Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBE1F5A37E511F0A1D9D7C1DAE4EC9C.roa
File: DBBE1F5A37E511F0A1D9D7C1DAE4EC9C.roa (raw, json)
Hash identifier: gC24f5qqtlzUz6zG78moy7LizWkcMvi4zPIrhjeqgYs=
Subject key identifier: C2:21:1D:26:F6:F4:B5:AC:8B:92:1E:0C:A7:2D:D3:48:A9:FC:BF:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01821B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBE1F5A37E511F0A1D9D7C1DAE4EC9C.roa
Signing time: Fri 23 May 2025 14:54:43 +0000
ROA not before: Fri 23 May 2025 14:54:37 +0000
ROA not after: Sun 29 Jun 2025 14:54:37 +0000
asID: 395839
IP address blocks: 154.194.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98843 (0x1821b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 14:54:37 2025 GMT
Not After : Jun 29 14:54:37 2025 GMT
Subject: CN=68308c32-4886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:a7:b7:2c:17:d7:17:7c:a3:d1:7d:04:b4:
3f:70:55:9e:0e:89:3f:d7:5c:06:70:16:46:12:08:
59:be:e9:6d:34:b9:bd:33:ab:cf:87:2d:f4:fd:85:
87:c8:ea:d4:4d:2d:73:f2:73:62:f7:fc:4c:2c:36:
82:4b:0c:48:ea:d0:2a:36:2d:7e:d9:04:4a:6f:df:
29:b5:80:7b:ae:da:17:cb:ee:a3:45:e8:34:a3:7c:
d3:4c:70:08:0f:08:22:8b:29:25:f5:d4:fe:36:00:
5a:71:9f:0c:83:ba:19:1a:32:94:0e:89:7b:4e:d0:
18:b2:b0:cc:ed:a8:d4:01:f2:aa:97:22:01:4c:cc:
5e:d0:e9:96:ee:b0:b8:45:c7:24:6a:16:32:f1:7e:
7b:f4:02:a4:e9:e6:03:0f:e6:91:42:44:95:fc:97:
fa:69:f9:43:e2:06:3b:2c:d4:07:d9:31:40:43:39:
d0:11:aa:92:3f:24:8a:e5:c1:08:c2:51:be:69:18:
af:29:1c:c2:a1:47:ce:77:b1:05:b5:15:2d:32:a3:
28:c0:9a:2f:44:5e:42:54:c6:66:6a:b5:99:b4:c8:
55:c0:af:a3:fb:27:12:b7:97:8a:a4:06:a7:83:5c:
af:b3:47:88:13:29:bd:bb:58:3c:0a:67:7d:1d:af:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:21:1D:26:F6:F4:B5:AC:8B:92:1E:0C:A7:2D:D3:48:A9:FC:BF:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBE1F5A37E511F0A1D9D7C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:b0:3d:d3:26:19:b1:e9:57:ef:6f:aa:a1:91:75:f1:8b:f6:
c0:da:7c:7f:42:4c:09:46:17:fc:7e:e4:c7:f9:a8:f8:0f:e8:
80:11:03:f0:8a:6c:d2:6b:15:53:22:43:e6:b0:1e:41:12:05:
de:6d:88:6c:25:02:f4:cd:b4:31:ef:2a:14:57:20:cb:a6:b7:
f4:49:f6:ae:0e:f1:45:ff:df:1f:ee:9b:88:ed:4b:3f:fa:66:
c1:30:ad:4f:a0:f0:a1:d2:71:a6:fd:0c:97:cd:bd:5c:a3:c5:
9d:52:f8:d7:ff:27:23:41:6a:0d:32:c8:db:84:ab:ab:5a:b7:
20:58:81:73:d6:92:11:c6:ca:f0:21:de:e0:87:9a:a1:d0:48:
a7:cf:36:44:77:c5:92:25:25:e6:55:44:76:b4:a9:05:52:d3:
74:c8:fd:4f:b3:f3:d7:69:47:88:6c:df:c9:3a:df:8e:39:21:
e7:c1:2e:d3:a9:9b:bf:e4:58:27:14:f6:f0:c0:bd:bf:0e:d2:
cd:96:e3:09:5e:82:0f:8e:ae:d6:73:a2:e2:e6:54:2f:81:ec:
5e:94:af:e8:bb:fa:ac:c6:b9:84:a8:a4:00:87:b1:f3:ea:cd:
7f:4c:c0:07:b9:58:6a:1e:d3:58:da:41:5d:58:61:0b:7f:58:
51:03:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:46 2025 by rpki-client