Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86AF2203BB611F0BAB8D99FDAE4EC9C.roa
File: A86AF2203BB611F0BAB8D99FDAE4EC9C.roa (raw, json)
Hash identifier: q4NiTfTxApYJ8YECd2ExFSNVAXeADiYTLM19xFaCpTQ=
Subject key identifier: 90:A5:9E:5E:A8:C3:1B:46:66:FE:B5:BE:5D:9E:15:A1:1B:04:85:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018352
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86AF2203BB611F0BAB8D99FDAE4EC9C.roa
Signing time: Wed 28 May 2025 11:26:55 +0000
ROA not before: Wed 28 May 2025 11:26:50 +0000
ROA not after: Sun 06 Jul 2025 11:26:50 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99154 (0x18352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:26:50 2025 GMT
Not After : Jul 6 11:26:50 2025 GMT
Subject: CN=6836f2ff-2e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:5b:38:f2:1f:39:f3:9a:c5:fd:3a:d3:3d:
de:03:de:e5:3c:5f:f9:77:61:b6:40:34:35:58:20:
d5:05:01:a4:6c:1a:b3:7a:5d:84:9c:66:06:f2:23:
75:b7:f2:79:43:00:38:8b:b3:4a:6e:09:b4:cb:f0:
bf:48:9f:bc:dd:0a:7d:33:00:00:4f:f1:f7:85:6c:
7d:0e:b5:d2:df:7e:de:bf:02:7e:ac:56:c7:ff:97:
ec:a2:47:25:5a:cd:bf:26:a6:36:85:d5:c8:20:d3:
6f:57:c5:8d:90:1c:ee:c1:48:0c:51:ff:54:2e:c2:
72:fd:e6:3b:d6:16:f1:44:a9:90:fb:e6:9d:b7:3f:
f2:22:5d:01:75:97:26:58:2f:8b:1d:8b:0d:cc:f6:
eb:60:16:da:bf:d9:e8:4f:f8:63:b1:db:ff:30:24:
2c:72:bb:6f:f5:85:fe:47:d8:26:e3:29:c9:d5:85:
54:84:98:9f:33:32:f4:69:f2:67:f5:d7:01:cc:21:
70:67:96:9e:0b:cf:c1:a6:0f:82:62:4f:f3:74:92:
99:6f:18:d9:13:16:8e:51:94:05:ad:40:b4:8a:18:
cd:74:a0:fd:47:11:8f:4b:25:12:a9:70:37:a0:1f:
c2:4c:81:6b:8c:ff:c4:8a:1e:29:1b:97:56:56:6c:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:9E:5E:A8:C3:1B:46:66:FE:B5:BE:5D:9E:15:A1:1B:04:85:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86AF2203BB611F0BAB8D99FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:59:e8:92:6d:1f:f1:25:65:2c:9c:df:1f:39:95:6f:46:96:
c5:18:28:f3:20:1e:c6:4f:d9:5a:e3:2a:22:87:71:fe:8b:3c:
42:0e:35:33:81:86:b0:90:92:da:e2:93:f8:26:5d:fd:c6:3c:
f7:e4:9c:02:be:6e:4c:b0:fe:a7:2d:18:d8:9f:e2:29:0d:b9:
74:b3:a0:b5:aa:08:de:ff:d1:2d:62:14:ae:99:75:54:6f:eb:
69:19:99:bf:8b:41:da:dd:d0:34:58:63:83:71:07:5c:bf:f3:
c5:73:de:4d:ce:91:a3:51:c5:09:e1:a6:23:1c:ba:3e:3e:dc:
54:63:47:67:d3:04:9d:7c:d6:ec:e5:a3:af:d2:09:a2:d5:24:
a4:45:7a:2f:aa:92:0c:2a:7f:a0:41:06:4a:8f:98:97:08:d1:
5c:c7:31:27:5f:39:24:20:20:0a:38:64:74:bb:73:ff:cc:75:
6e:63:78:9c:e9:52:1a:b3:16:c2:bb:37:29:05:74:49:45:03:
3f:f3:19:b7:bc:c1:1b:6a:4b:57:24:22:08:5b:0c:e6:e8:3f:
01:13:cc:1a:c0:92:4a:af:9a:e2:e9:ce:c1:74:00:8f:18:08:
ec:5d:9e:d1:d8:89:64:95:b4:c1:9f:d3:0d:ad:a7:77:b1:d4:
27:ed:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:52:25 2025 by rpki-client