Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46F07F03C7911F08333BE94DAE4EC9C.roa
File: B46F07F03C7911F08333BE94DAE4EC9C.roa (raw, json)
Hash identifier: Qu0b5Ox2t0YxormCyITiGdUziz7RcMVqJuGVAR+55nk=
Subject key identifier: 8A:21:67:6F:54:C0:F8:E2:80:FB:1D:D1:6C:DF:A5:7A:AA:1E:4A:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46F07F03C7911F08333BE94DAE4EC9C.roa
Signing time: Thu 29 May 2025 10:43:07 +0000
ROA not before: Thu 29 May 2025 10:43:02 +0000
ROA not after: Sat 05 Jul 2025 10:43:02 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99254 (0x183b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 10:43:02 2025 GMT
Not After : Jul 5 10:43:02 2025 GMT
Subject: CN=68383a3b-1aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:66:71:90:30:cc:c4:84:8a:8c:4a:77:23:
22:0b:09:ed:73:d7:5c:c2:0d:52:e8:a9:49:c4:c1:
ba:f5:86:fb:3c:0f:0f:e3:3e:5e:10:32:58:d8:9e:
14:88:70:79:af:7e:bb:cb:f1:b3:61:f7:4c:a2:7f:
1b:8b:f6:cf:91:65:88:b1:14:4c:a5:0b:5c:52:73:
3d:08:e7:02:74:65:e2:60:0c:63:c0:8e:85:e6:b1:
3e:61:99:c5:b3:cd:ff:09:2f:a7:bd:a9:7b:cf:29:
e9:1a:a0:0a:fc:59:ed:a2:fe:e6:5e:8e:fe:86:f8:
85:a9:76:9d:36:50:4c:c9:a1:a8:4f:9c:ab:41:93:
0c:5a:72:42:92:a4:74:18:bb:28:00:e1:e8:40:f8:
c3:cb:23:a3:6f:f4:ab:75:03:17:f5:d7:76:de:a5:
7c:c9:6d:1f:c3:9c:94:13:0a:28:c5:61:5a:c0:11:
98:50:ab:e8:74:97:f9:83:9d:2f:4a:59:9f:13:cc:
4a:5c:ea:12:f8:e8:96:aa:2c:87:3d:02:7a:a7:ea:
7c:50:e1:2b:eb:48:1d:7b:9a:3d:07:0e:60:01:37:
87:a5:18:5a:0d:33:a0:17:bd:f3:d3:e8:84:d9:92:
57:9d:3d:e6:90:39:dd:5d:9c:b4:22:3f:c0:ae:e9:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:67:6F:54:C0:F8:E2:80:FB:1D:D1:6C:DF:A5:7A:AA:1E:4A:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46F07F03C7911F08333BE94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ad:72:1f:e6:9d:de:77:a1:60:9f:f0:23:7b:e4:ce:c2:f7:
c8:84:a0:1b:33:7f:f5:4f:54:0f:4d:27:0f:62:ce:71:71:ef:
39:56:32:13:4b:32:2d:5d:5d:e0:31:1b:b5:c3:65:17:5b:1f:
f4:ef:ac:a2:d4:3f:d0:4e:94:b1:5f:3f:91:2b:1c:a9:c8:ca:
7d:74:92:48:90:7a:8a:27:4d:9a:87:5b:67:63:a1:0c:aa:ea:
3e:98:0a:a0:3d:86:34:31:4b:17:ca:68:d6:27:d3:3e:65:7c:
b6:5c:8e:5b:ae:9e:27:ff:09:92:b9:35:af:78:2b:c6:5b:54:
d7:ec:21:87:c5:d4:c6:4f:00:db:7a:f7:62:93:b5:b8:4b:e1:
58:6d:c5:64:33:fb:d5:b2:76:a2:d5:a9:d2:fb:8d:0a:63:1f:
5f:29:e7:38:66:9d:77:f2:0d:41:18:f1:43:29:92:47:18:9c:
64:f9:47:9a:f2:fb:40:38:5b:65:65:c2:69:4a:6b:21:36:8f:
be:60:a2:2c:8c:fd:bb:6a:c4:f1:d6:3e:39:e2:84:59:e4:09:
28:1d:b1:53:f5:17:4d:61:12:5c:ef:fa:8c:11:1f:32:46:a8:
a7:8f:bd:14:21:c3:4b:85:9c:d6:a3:d3:be:9e:d4:e1:50:b2:
11:87:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:50 2025 by rpki-client