Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD50E9A03B6711F08106BC93DAE4EC9C.roa
File: BD50E9A03B6711F08106BC93DAE4EC9C.roa (raw, json)
Hash identifier: vRdl/W5tgn2SV0GpAS0qhUf0LuYnzZKqk/lsa/OEreU=
Subject key identifier: C9:C3:61:E9:3F:D9:19:66:45:E5:AD:A3:24:2A:C4:A8:FE:EA:6A:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01831C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD50E9A03B6711F08106BC93DAE4EC9C.roa
Signing time: Wed 28 May 2025 02:02:00 +0000
ROA not before: Wed 28 May 2025 02:01:55 +0000
ROA not after: Wed 27 May 2026 02:01:55 +0000
asID: 132839
IP address blocks: 154.195.192.0/19 maxlen: 24
154.195.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99100 (0x1831c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 02:01:55 2025 GMT
Not After : May 27 02:01:55 2026 GMT
Subject: CN=68366e97-17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:5c:c2:40:97:fc:d3:ec:f0:39:f7:18:33:
aa:af:15:d9:19:71:4f:51:f1:37:a8:04:48:12:f7:
f7:00:4d:5e:bb:17:df:08:e4:1b:6f:23:cd:0b:0c:
5b:6e:e1:c8:54:75:62:8a:b8:f0:14:ed:2f:cf:b4:
d8:34:a9:27:c7:9d:43:57:cb:25:28:54:b5:ad:54:
8b:c9:15:e2:74:05:21:af:59:10:69:c0:50:43:0c:
db:21:df:51:16:b3:96:59:34:79:ec:1a:68:66:42:
3a:b4:74:69:e3:c9:fe:1c:90:b5:47:6f:e0:d9:35:
eb:0f:68:e5:b1:93:77:ec:df:f4:3f:94:fa:9d:e1:
77:de:ea:76:00:18:be:8d:78:b3:b4:c9:f2:2b:16:
6d:bf:fd:e3:48:45:78:63:01:32:3c:5f:72:80:1a:
23:95:ca:8a:d9:66:aa:43:66:7b:ae:cd:c9:19:1b:
77:bb:c6:3e:51:fc:b5:b7:b6:7b:ed:fa:08:5b:23:
30:f1:3f:7a:f9:98:76:4a:e0:9e:d0:10:73:8d:f2:
cf:bd:cf:8e:d0:24:8c:54:6b:3c:2e:11:a0:cf:48:
57:2a:8e:4c:b0:5e:c8:70:c7:9b:38:6e:49:63:e8:
db:32:b5:70:ab:cc:1f:89:c2:00:b2:2c:83:c2:ff:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:61:E9:3F:D9:19:66:45:E5:AD:A3:24:2A:C4:A8:FE:EA:6A:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD50E9A03B6711F08106BC93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:c4:88:9b:7b:6f:f8:8c:af:8d:20:d9:eb:6a:93:7e:61:35:
8e:c7:56:52:95:6f:cc:96:35:9f:46:60:75:82:a8:31:d7:f6:
0b:59:4e:ed:02:55:03:2f:9e:07:7d:4e:e1:74:6c:9e:93:2a:
b6:c3:92:b1:c0:27:16:74:75:5d:ed:dd:8a:48:88:05:13:eb:
7a:3d:d3:61:cb:a2:43:96:fe:9c:25:93:b2:60:22:b7:f5:5f:
e9:f4:57:f2:68:28:fd:70:14:42:15:5c:81:12:f0:1a:5f:5e:
78:32:f9:c8:9a:7b:77:33:1b:97:43:29:4a:75:f6:02:f1:a2:
d2:84:b8:09:5c:ad:67:37:d9:3d:c0:92:ff:d5:2b:89:88:36:
d3:0a:78:e8:8a:a2:74:bc:7a:fe:38:1e:c9:32:8e:c7:ae:08:
0b:60:b3:8a:9b:92:9e:fb:30:82:d3:a0:f0:6f:ee:a0:e8:9c:
33:bd:40:55:28:c6:38:1f:59:93:8a:36:a8:d2:34:76:3e:18:
a8:00:d7:4e:02:36:7b:13:34:02:bf:50:3e:20:f4:38:18:d8:
8b:a2:91:6f:5b:fe:fe:c4:71:ad:67:5e:6f:bb:92:86:fc:71:
6a:76:2c:93:79:f0:36:50:d5:7d:3b:b5:2b:4c:c7:2e:59:4b:
d3:7b:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:21 2025 by rpki-client