Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60399B0406811F09C1AB5A6DAE4EC9C.roa
File: D60399B0406811F09C1AB5A6DAE4EC9C.roa (raw, json)
Hash identifier: yxX1bR+mLorTbJNPDEN7WEqMhV4uEbWL2lBcif1hALA=
Subject key identifier: 0B:62:2A:41:CD:4C:63:A5:31:F1:E7:A5:19:DA:17:66:00:BB:09:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018465
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60399B0406811F09C1AB5A6DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:52:27 +0000
ROA not before: Tue 03 Jun 2025 10:52:22 +0000
ROA not after: Thu 10 Jul 2025 10:52:22 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99429 (0x18465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 10:52:22 2025 GMT
Not After : Jul 10 10:52:22 2025 GMT
Subject: CN=683ed3ea-3419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:c1:6a:8e:29:c4:15:6f:93:94:08:fc:d1:
5e:fe:09:d5:7d:50:11:92:52:71:3e:e8:cb:1a:3f:
d4:ca:85:22:84:0f:e6:95:df:51:55:56:0d:33:8f:
89:66:2f:bf:66:1e:51:91:f5:0c:a0:70:ea:54:33:
31:87:3e:81:a7:c7:cf:46:65:55:89:68:6d:3e:f2:
89:45:01:9d:29:56:cd:98:25:7d:bc:d6:66:f5:47:
fd:93:1e:ad:65:26:57:8d:f8:b9:b0:07:43:b1:5f:
21:67:f3:ca:2b:fe:5e:02:43:d1:00:98:f9:90:e1:
a0:51:1b:4f:04:07:11:63:b7:9a:ed:9a:20:6b:97:
4a:13:b6:f5:33:23:3a:8d:f9:9e:dd:d5:5e:b1:d5:
f3:f2:3d:a0:f8:29:b5:f4:af:7d:43:99:d1:ef:e7:
1b:39:4f:dd:13:a1:ff:83:ba:fb:25:7c:27:ca:5b:
57:b0:09:14:ee:3a:ac:5f:9e:b2:3d:8c:d4:e5:f2:
25:81:cc:ed:27:83:d2:bc:0c:36:3e:14:0d:d9:68:
12:14:97:e8:6f:f8:b6:43:7a:4f:a2:ca:91:a0:5a:
4b:e4:29:a4:d0:e4:e2:43:15:a0:a2:19:2a:8b:ac:
1e:31:bc:8f:6a:cb:98:20:8c:6b:25:bb:86:4f:3b:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:2A:41:CD:4C:63:A5:31:F1:E7:A5:19:DA:17:66:00:BB:09:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60399B0406811F09C1AB5A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5b:bf:d6:ad:d8:26:95:73:bc:b7:36:6c:f2:f6:87:e0:d1:
0b:c2:8a:b9:00:2f:e9:2a:c9:12:c8:e0:eb:a8:9f:ba:9b:c9:
e3:69:4c:be:4c:97:40:1d:1b:96:82:f8:f3:4f:df:cc:a2:c7:
9e:90:0b:6e:b9:ad:c1:f7:0e:2d:68:f8:77:93:69:15:02:d7:
8f:2e:42:14:3e:ca:fe:7b:96:6c:13:7f:65:76:2d:b0:73:ea:
07:96:25:f1:07:b5:3d:71:35:df:60:bd:0f:f3:df:63:e7:59:
2f:ed:9a:f5:d7:2d:2e:1d:f4:7b:8a:ca:0b:8c:99:94:4c:56:
ad:71:10:bf:d0:cc:29:6e:53:e5:16:21:35:df:c7:a9:02:9d:
95:18:a2:64:11:85:bd:b0:14:6e:23:d9:c2:d8:91:ee:8b:57:
9f:64:df:b7:cd:2e:fc:3d:27:64:2c:07:5d:02:89:14:c5:b9:
a6:d9:97:c4:ad:7a:9a:1a:43:23:c2:c1:aa:65:b1:d1:60:f4:
a5:10:a8:47:b1:ec:14:e3:3a:5a:0e:d6:ca:d8:6d:55:27:f2:
bf:a5:78:b2:9d:fe:7e:ac:e9:d8:d6:9e:ae:4f:58:7a:ba:5c:
f9:f2:ee:94:78:ca:61:57:7b:bf:63:05:ea:e7:f8:c2:65:70:
21:75:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:26:42 2025 by rpki-client