Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06CDDE037C911F098D15490DAE4EC9C.roa
File: F06CDDE037C911F098D15490DAE4EC9C.roa (raw, json)
Hash identifier: eipTEWSVQQ4TTM3+13DG0b+WoBVqeVlgXuVs+NpOBn0=
Subject key identifier: 20:9F:6E:42:FB:6B:D9:21:32:C7:4B:20:7E:9E:D2:2E:AB:5C:BD:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06CDDE037C911F098D15490DAE4EC9C.roa
Signing time: Fri 23 May 2025 11:34:51 +0000
ROA not before: Fri 23 May 2025 11:34:46 +0000
ROA not after: Sun 29 Jun 2025 11:34:46 +0000
asID: 134365
IP address blocks: 154.194.248.0/21 maxlen: 24
154.198.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98806 (0x181f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 11:34:46 2025 GMT
Not After : Jun 29 11:34:46 2025 GMT
Subject: CN=68305d5b-a4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:1e:c1:e4:51:e7:12:2f:78:53:1d:3d:ab:
eb:9f:3d:80:c2:23:19:02:d7:16:7d:ec:d7:30:94:
d0:ce:56:c8:64:30:6e:ef:74:09:22:28:b7:27:47:
6d:1d:71:a4:8a:a8:fa:19:db:8d:e3:a0:30:53:c7:
f4:36:77:25:cc:01:52:2f:23:8f:aa:5c:f9:e3:f2:
92:94:78:f3:15:e5:c4:1d:0f:a6:92:78:bd:e3:16:
db:77:18:aa:96:b8:2c:12:18:61:7c:19:f9:fb:02:
55:da:9b:de:c5:97:7d:a8:c3:0f:fb:15:2c:0b:da:
a6:4c:81:e9:b1:19:5f:f3:64:1f:9d:38:28:99:94:
de:7d:91:b0:e5:6b:d2:4b:48:2a:33:3c:38:3a:0d:
7d:fa:d6:47:26:7e:cd:7a:b4:14:c1:15:c8:e3:13:
5d:7c:9a:8f:48:5c:e7:00:52:3a:95:b5:b0:3d:c0:
35:45:fa:06:bb:c2:11:66:a3:e8:54:8f:34:b8:ac:
a3:32:5e:d5:ac:6d:d7:ed:17:c0:65:a0:d4:8d:88:
da:7f:d6:1e:49:a9:36:4a:74:2b:be:b3:97:40:32:
89:de:f8:5a:d4:81:c4:01:61:76:10:b7:43:97:e7:
d7:f0:b5:d3:a6:3c:22:04:bd:6b:65:a2:12:fa:4a:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:6E:42:FB:6B:D9:21:32:C7:4B:20:7E:9E:D2:2E:AB:5C:BD:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06CDDE037C911F098D15490DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/21
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
22:03:9f:6e:f4:e1:69:61:10:28:68:78:d8:cd:46:26:b7:8c:
1c:ca:23:79:bc:90:81:2b:5c:36:88:14:6f:7b:99:90:32:f4:
06:7a:02:0d:6c:c7:25:a0:87:d0:b7:3b:a8:44:86:08:b8:1d:
bb:0d:48:e9:6f:ca:95:e1:f0:78:01:f1:46:94:81:48:32:36:
2a:37:22:8f:56:25:f2:8f:f1:3d:94:26:c9:9a:15:36:91:eb:
6e:c5:da:91:bd:b6:3f:d5:83:f7:45:b1:40:f4:e3:ee:e9:f3:
cd:24:22:46:cf:9b:b7:74:3f:5a:41:15:f8:ee:b7:bb:f7:de:
9f:27:fc:30:e2:b5:e5:b9:11:60:0a:62:18:62:b0:84:80:17:
f8:c5:0e:07:a6:73:5e:5a:2a:55:18:de:bb:e9:44:cb:7b:40:
65:c4:f4:13:51:f0:f2:47:af:29:5d:2c:4e:8b:0d:d2:e2:bf:
28:76:e4:78:c6:b1:04:22:7c:61:fd:6c:d5:cd:38:c7:50:14:
ee:9a:88:d3:98:4d:1e:80:be:aa:1c:70:bf:c0:59:55:bf:af:
c3:e7:a3:2c:cd:ec:6c:e9:8d:27:67:cd:0e:0f:a6:fb:eb:c6:
6e:9c:8d:e6:88:ad:c8:9e:d0:0b:ab:d8:70:3c:64:a4:5f:4a:
35:7e:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:21 2025 by rpki-client