Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD2330837F411F09FEBFBA0DAE4EC9C.roa
File: BFD2330837F411F09FEBFBA0DAE4EC9C.roa (raw, json)
Hash identifier: bmPHIaOgpe82Vv0byicREU/VpI4xCaNnC2NYSJ0Q1aI=
Subject key identifier: 26:99:B7:63:FF:32:4F:E9:7B:69:AF:0E:78:6D:4C:88:C6:AE:BA:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018235
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD2330837F411F09FEBFBA0DAE4EC9C.roa
Signing time: Fri 23 May 2025 16:41:18 +0000
ROA not before: Fri 23 May 2025 16:41:13 +0000
ROA not after: Sat 14 Jun 2025 16:41:13 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98869 (0x18235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 16:41:13 2025 GMT
Not After : Jun 14 16:41:13 2025 GMT
Subject: CN=6830a52e-ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:38:e9:5d:52:34:b7:c7:86:ad:ba:d5:96:
34:a5:1b:d6:ff:3a:bc:dd:22:50:8c:2b:96:19:8f:
6e:7b:2e:3e:ee:78:eb:97:b1:fd:f1:e5:72:1c:eb:
d5:f5:83:37:44:98:7d:07:ea:91:6b:43:00:ce:f3:
0d:e8:fd:e5:80:53:e1:b0:76:9f:02:5b:5b:f3:8a:
1d:92:e9:c4:57:e2:b8:9f:1a:0b:7e:fc:e3:7a:64:
04:6d:4a:30:24:da:ad:0a:39:9f:5b:51:c9:df:89:
17:5f:56:55:f3:f0:3d:b5:1d:b9:4c:76:f8:a0:c1:
90:b0:b4:05:3a:b6:18:09:3b:9c:1f:eb:6d:96:6d:
bc:5f:6d:d9:a6:b0:d6:62:23:2f:7c:b5:68:b3:aa:
52:2e:5e:32:54:1b:f4:62:5a:c1:b1:87:49:61:16:
a0:94:ea:3c:67:fc:42:20:ec:a8:11:2e:f5:05:76:
25:66:a7:88:61:57:bf:70:b8:6c:6e:db:a5:34:da:
64:7a:e1:21:13:4a:67:f6:e7:b4:38:f0:91:5a:51:
1c:19:53:96:44:34:89:ce:85:a3:0b:52:f1:28:7e:
c7:4c:05:31:87:8b:02:46:de:4d:77:c7:22:d5:ac:
3a:8b:21:a9:cd:a8:de:22:ee:d1:b3:54:2b:10:9d:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:B7:63:FF:32:4F:E9:7B:69:AF:0E:78:6D:4C:88:C6:AE:BA:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD2330837F411F09FEBFBA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
23:80:3b:84:39:e3:fb:41:d0:6f:41:40:f0:bc:21:d7:73:f1:
fd:d9:c2:71:0d:eb:14:59:c0:25:6c:61:cb:ae:f0:f4:ea:c8:
09:1f:36:50:fd:ae:5d:a1:34:74:42:0f:e5:2f:aa:e7:fa:07:
c0:bb:82:0e:e3:04:74:55:3c:e6:b6:5f:99:13:ad:f1:9d:a1:
49:56:51:e9:a3:7d:73:ad:1a:fd:88:62:45:2d:4f:fb:0d:88:
08:e2:5e:6a:d1:40:c5:a2:38:3d:82:41:36:6b:79:68:b4:16:
4d:11:9f:92:b7:16:f1:26:b4:63:ce:b3:6f:9b:73:38:d0:ca:
ae:51:32:7a:f9:ab:16:78:e5:f8:5b:a1:31:5f:78:71:a6:61:
c3:c8:70:1c:66:b5:e5:c2:55:10:69:96:7d:fc:b3:3b:57:ea:
55:45:52:8f:0f:36:e3:b2:ba:48:50:60:eb:ac:3c:da:7a:fe:
bf:72:d7:4d:a7:dd:4d:09:e8:20:2a:bf:ca:45:5f:c0:a9:1e:
e4:83:0a:ce:c4:f4:68:d6:d5:c5:99:0f:02:68:62:c8:eb:78:
92:bb:ef:7c:7c:61:2f:01:0e:13:7b:03:41:a5:40:bd:3a:69:
cd:44:88:2a:11:45:d4:87:65:2b:b0:6a:b9:c1:b5:15:45:1e:
5c:4e:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:37 2025 by rpki-client