Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0CFC9C590111F09A37B5B9DAE4EC9C.roa
File: DB0CFC9C590111F09A37B5B9DAE4EC9C.roa (raw, json)
Hash identifier: Oz7TglFPlOJqEpaG7btf+AVMdvIlPAxivIaKPq65DGw=
Subject key identifier: 9B:15:3A:96:0B:3C:5F:8A:E9:BB:04:36:BF:DF:A9:F0:81:9D:16:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0CFC9C590111F09A37B5B9DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 18:08:16 +0000
ROA not before: Fri 04 Jul 2025 18:08:11 +0000
ROA not after: Thu 04 Sep 2025 18:08:11 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101014 (0x18a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 18:08:11 2025 GMT
Not After : Sep 4 18:08:11 2025 GMT
Subject: CN=68681890-924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:9f:2a:82:3d:25:37:1b:43:7e:6a:da:15:
e7:5d:0c:31:e2:56:0e:e9:39:e7:d7:a9:56:24:93:
59:52:3a:73:96:11:7d:ba:84:ef:24:e9:19:62:b3:
91:11:a2:84:ca:bf:0e:e9:e8:7f:88:b5:f5:07:f9:
bc:1c:67:b8:e7:c3:89:49:f7:0d:76:1e:a1:33:ab:
ba:ef:ef:04:fd:94:77:ec:d7:5f:15:14:74:b3:76:
fb:b1:a6:1a:68:1c:e3:13:9c:9a:e0:ab:76:90:be:
03:58:6c:65:03:b0:28:cc:f4:28:5e:24:aa:ac:b1:
25:60:f5:d1:42:29:13:df:32:4d:94:53:68:b2:54:
e6:da:fb:7e:bb:a7:44:70:ca:d7:85:1e:76:f5:92:
07:fb:35:b6:8c:a2:fb:23:33:94:0d:69:53:b5:af:
86:92:8c:b6:a0:1c:39:3d:05:34:9f:e8:66:b7:b6:
f5:b1:0d:63:4d:01:6c:d7:8c:0c:da:2e:1f:5f:aa:
30:e2:40:21:94:a3:33:46:22:f4:68:f1:b0:f0:89:
8a:75:3d:5b:ab:87:0f:5b:9b:d0:17:c0:a2:61:34:
61:a7:b0:28:80:e7:cd:08:61:75:a3:73:af:9c:08:
5c:6d:90:7c:1a:2b:f2:d0:28:be:75:c3:d2:7a:69:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:3A:96:0B:3C:5F:8A:E9:BB:04:36:BF:DF:A9:F0:81:9D:16:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0CFC9C590111F09A37B5B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
76:66:d7:de:60:91:d7:14:7c:7b:bd:f0:0f:0d:26:51:cb:d4:
83:17:f4:b5:df:f8:9e:b2:9c:2c:7c:a3:77:be:76:41:88:3d:
b0:f6:6c:dd:39:b1:3a:1f:49:a3:ad:05:d8:cc:a6:16:bf:15:
c8:1f:fb:8d:5e:c2:17:fc:a6:07:64:1e:59:b5:ca:0b:fb:33:
79:c0:5d:15:a7:1f:e0:d0:0b:95:36:98:8a:ee:2e:88:64:bd:
3c:ea:08:ff:21:39:ac:bc:be:38:f4:95:f3:2d:84:26:15:20:
c1:08:92:e9:0e:19:09:20:51:8c:80:43:44:96:6d:e8:81:a9:
65:c6:7e:b5:e8:47:58:5e:2b:09:13:49:3c:e6:e5:d4:7b:a9:
52:39:20:14:1e:d2:4a:c6:4d:5c:80:42:12:58:fb:90:bc:4d:
60:f0:79:33:78:57:34:96:e1:30:9c:52:77:23:e3:15:81:c4:
61:6c:ad:6e:08:57:9d:e6:27:73:3e:89:b0:8e:e7:8c:14:8f:
d9:6d:63:6c:6c:5e:51:19:04:7d:af:e2:36:49:48:6d:a0:1d:
23:66:b9:68:1f:1f:e5:86:a0:07:a2:dc:90:ac:d1:41:55:91:
83:ec:81:21:99:b7:2c:65:2a:f6:a4:35:b3:2b:f2:24:53:7e:
2f:65:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 00:49:54 2025 by rpki-client