Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A8EC0038A911F0BD62BABDDAE4EC9C.roa
File: B4A8EC0038A911F0BD62BABDDAE4EC9C.roa (raw, json)
Hash identifier: 7bMIN+Oqm1VoEDmAKNTUtuEpxpHh9etsklzZBlOcLPE=
Subject key identifier: 2E:7C:4A:E2:E3:5D:DD:61:B4:A4:A5:9E:2A:F7:B7:04:7B:00:E3:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01829A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A8EC0038A911F0BD62BABDDAE4EC9C.roa
Signing time: Sat 24 May 2025 14:16:38 +0000
ROA not before: Sat 24 May 2025 14:16:34 +0000
ROA not after: Thu 19 Jun 2025 14:16:34 +0000
asID: 9304
IP address blocks: 154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98970 (0x1829a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 14:16:34 2025 GMT
Not After : Jun 19 14:16:34 2025 GMT
Subject: CN=6831d4c6-0133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:21:8a:b5:36:03:c8:ce:a3:5a:86:e4:b8:
75:4b:7a:2c:3e:14:8e:94:5b:a2:a0:e4:8d:76:9a:
9c:c3:d3:72:e3:67:07:34:90:fb:69:5c:c9:0b:31:
59:08:c4:24:ad:29:a1:87:a2:da:a2:e7:a1:0a:37:
72:58:0c:8e:86:67:57:e6:6e:1a:83:70:1a:f8:e5:
19:d8:de:86:8b:95:a1:b4:90:f4:1f:a0:4e:96:70:
11:d8:d5:57:45:af:fa:e0:ec:10:3f:08:b2:bc:81:
c8:cc:98:20:98:60:d4:c8:46:8c:a7:18:19:20:39:
39:44:e4:8f:d2:c4:02:9b:dd:31:e6:ef:31:ed:62:
b5:e5:e4:0d:24:cb:75:41:ba:35:22:a2:53:75:9e:
e3:76:cf:2e:4b:35:5a:06:2c:f9:6a:c2:be:dc:15:
b6:bf:d5:24:53:bc:f3:2b:be:6d:a4:bb:4b:46:40:
d4:91:35:ec:33:ca:60:b5:4c:7a:f0:50:7b:99:a0:
03:44:04:cf:be:df:b9:a4:85:05:ff:10:5e:a5:65:
26:68:ba:de:9d:75:ed:65:10:52:e2:6d:e9:03:1c:
43:c6:2f:53:68:2b:9f:13:35:e3:b1:fe:33:ef:41:
26:d4:9d:e0:58:3c:c1:99:21:24:b8:c6:2e:c5:48:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:4A:E2:E3:5D:DD:61:B4:A4:A5:9E:2A:F7:B7:04:7B:00:E3:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A8EC0038A911F0BD62BABDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.200.0-154.92.204.255
Signature Algorithm: sha256WithRSAEncryption
16:9b:7b:0e:fd:ae:5d:1e:ec:09:d4:b1:79:b1:4c:cb:0b:72:
03:d0:8b:67:39:a2:12:d7:31:92:bf:b1:55:3a:6a:39:29:08:
89:a9:b9:47:c5:03:89:c0:8d:01:3d:2c:03:e7:86:d1:2e:3f:
96:f8:81:aa:c9:03:b8:f4:32:37:dc:92:ab:97:75:7e:eb:58:
00:40:b3:03:03:b6:95:22:fb:50:2e:b7:85:98:10:08:b6:e3:
3b:6b:56:3f:66:82:c7:81:07:1e:43:c2:a2:37:62:da:bd:99:
27:e3:71:a4:d3:57:22:40:c3:15:88:11:e0:b9:96:6f:23:ee:
0f:9d:a4:5d:cb:e8:6f:ad:94:18:8a:c4:d8:91:d3:07:56:0f:
4e:be:d8:ce:01:74:3d:ef:85:02:a2:e9:23:26:70:36:05:08:
63:ff:d1:ad:50:c2:ed:2c:b3:a8:41:c2:dd:77:81:05:63:40:
de:b3:8b:11:d7:62:1a:0a:45:95:48:b3:40:a0:e8:57:7e:63:
03:aa:01:a0:10:35:3f:87:3e:35:a0:0b:78:38:7b:f5:c6:f3:
dd:e6:1c:2a:1a:57:20:fd:bd:60:88:ce:1e:03:02:34:04:e7:
3d:fe:10:d6:cf:08:2a:35:23:db:71:bf:a3:3c:6d:fe:8a:14:
47:58:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:45 2025 by rpki-client