Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC15376393711F0BAE43BE2DAE4EC9C.roa
File: CBC15376393711F0BAE43BE2DAE4EC9C.roa (raw, json)
Hash identifier: 8GD2JN8YO4itxB/Nq8nq0zJXvMVlZ1gKUSOyLecuEfo=
Subject key identifier: 00:AF:9C:92:75:D6:B2:A7:DD:46:C4:32:0A:01:4B:45:75:42:18:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC15376393711F0BAE43BE2DAE4EC9C.roa
Signing time: Sun 25 May 2025 07:13:46 +0000
ROA not before: Sun 25 May 2025 07:13:41 +0000
ROA not after: Tue 01 Jul 2025 07:13:41 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98982 (0x182a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 07:13:41 2025 GMT
Not After : Jul 1 07:13:41 2025 GMT
Subject: CN=6832c32a-8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:20:79:6f:ad:ca:6e:d8:a0:13:31:95:26:
f4:78:7d:87:ce:38:55:d0:c9:93:d9:e7:b2:80:67:
8d:d2:ce:c6:ce:d2:d1:46:7c:ca:67:14:f2:90:9d:
9c:8c:4a:3c:81:cd:d5:50:19:8e:93:c1:fe:4e:2b:
4a:98:81:35:76:66:a6:be:16:cf:48:77:47:21:29:
9d:b6:50:73:3c:a4:bb:81:60:7c:ae:ce:1f:32:9a:
f8:01:3e:00:cc:28:62:9a:ea:96:39:53:0c:5a:e1:
90:e6:81:c8:98:be:e6:78:0d:23:49:9f:92:28:67:
d8:c3:9c:7d:fc:f0:02:67:6b:6a:fb:2e:ca:ab:f3:
49:a1:68:b0:90:ea:b2:c1:b6:29:78:c6:d1:1b:10:
4e:18:e1:20:82:6f:ef:a1:1a:9f:3a:29:63:eb:e2:
10:1b:d1:f2:41:fd:1d:4d:98:8d:64:52:9e:bf:a4:
00:40:51:03:61:d2:70:69:55:98:fe:d2:fc:bc:24:
8f:1f:ec:0a:c0:38:e8:97:fc:c9:1b:09:27:11:89:
04:0a:ff:8b:29:fa:6d:46:13:89:90:e7:30:b8:64:
1b:67:e7:75:60:f7:17:f8:8c:da:8e:a1:b2:6b:9b:
07:de:d6:b8:db:c7:27:16:b7:be:e8:57:1f:5b:ca:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:9C:92:75:D6:B2:A7:DD:46:C4:32:0A:01:4B:45:75:42:18:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC15376393711F0BAE43BE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:c3:d9:b6:73:d9:b4:26:d3:22:48:31:38:25:0b:aa:ba:06:
4a:a4:b4:6d:ce:f9:64:a2:1d:6a:23:54:ac:6b:5b:0d:01:38:
fe:cf:89:ad:f1:ae:14:95:55:44:0c:a5:ce:52:b8:43:1f:71:
6c:18:76:71:df:f5:66:fb:88:78:cf:1e:81:64:83:34:89:f3:
ed:19:80:6c:5a:54:14:86:a6:1a:49:a3:b5:b1:16:5b:5d:96:
07:c4:39:f6:a0:61:e8:7e:55:6f:00:52:8f:15:65:9f:69:36:
42:1d:47:ed:d9:c1:9e:ba:77:be:94:2c:86:37:31:c2:9c:cf:
77:d9:40:a8:3c:25:ae:63:c4:c4:8e:42:61:15:19:d0:9b:9f:
ad:72:87:0b:d0:a6:98:3e:5a:4d:db:a0:6f:d5:c3:2e:1a:fe:
10:92:17:ee:e5:a6:8f:8b:7e:cd:0c:17:2c:bd:41:2c:d2:4d:
74:7c:ed:89:4f:cb:0d:46:c3:fc:2e:2a:b5:81:3b:6c:08:98:
76:dc:20:c7:d5:ed:e5:90:72:8d:93:e6:b8:25:28:c5:05:07:
1f:32:8f:5a:4e:f1:c7:fe:b5:92:1d:24:cf:a5:b3:d0:0c:3b:
d0:c5:cf:91:f9:04:66:f3:3b:2f:ff:2d:e8:27:2c:26:6c:88:
05:5d:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:16:19 2025 by rpki-client