Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3476E4A3D4B11F0BF5B4CE7DAE4EC9C.roa
File: F3476E4A3D4B11F0BF5B4CE7DAE4EC9C.roa (raw, json)
Hash identifier: nbdHxnLiDYxqiEg5yn9jLC6+tNfNuGyn0XL1sARKuf0=
Subject key identifier: 85:50:44:0D:96:67:E0:14:04:8F:7D:31:F9:4B:20:0F:1E:03:10:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3476E4A3D4B11F0BF5B4CE7DAE4EC9C.roa
Signing time: Fri 30 May 2025 11:48:07 +0000
ROA not before: Fri 30 May 2025 11:48:02 +0000
ROA not after: Sat 05 Jul 2025 11:48:02 +0000
asID: 271988
IP address blocks: 154.88.160.0/20 maxlen: 24
154.88.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99273 (0x183c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 11:48:02 2025 GMT
Not After : Jul 5 11:48:02 2025 GMT
Subject: CN=68399af6-234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:d3:4c:de:ed:37:e1:cc:4d:c3:78:de:2e:
57:93:91:48:77:3a:74:0b:43:63:85:2d:3f:8b:01:
c5:ae:e9:f2:1a:20:1c:ec:90:f5:fc:b3:aa:58:6b:
8c:e5:7a:ec:20:6d:ed:f9:0c:9e:be:c2:b6:46:80:
ee:97:c2:7e:ec:e9:99:ed:59:7a:8e:16:4d:97:94:
24:5b:58:88:bf:1f:6f:92:d8:f5:14:e1:32:6e:20:
92:af:9d:80:1a:14:18:43:ce:fc:4e:6c:7a:15:a1:
44:2a:bb:b4:a4:4b:bc:0f:38:e3:5c:bf:b3:e2:e4:
ac:46:ca:1b:5a:c9:ae:54:e1:72:7b:31:70:72:07:
67:e5:b4:a8:e6:46:bb:79:f3:21:f6:a9:18:50:a9:
b8:bc:f4:bd:ac:3a:5b:45:83:2b:3d:ac:17:c3:f9:
e6:29:0e:c1:3e:e8:7e:6b:0b:ce:45:99:e0:0c:75:
4d:37:e7:18:b7:2f:91:b8:a1:2b:bd:c0:78:e4:c9:
14:c9:22:d8:bf:22:df:67:dd:fc:73:5f:ee:f0:24:
67:20:54:4b:30:32:6e:60:a0:3d:c5:8e:c1:ba:42:
69:dc:bb:1e:0f:df:a8:c1:e3:e4:e4:e4:e1:e8:47:
f6:38:b3:9d:06:4c:ce:a7:a2:fe:5a:5a:4a:39:9e:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:44:0D:96:67:E0:14:04:8F:7D:31:F9:4B:20:0F:1E:03:10:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3476E4A3D4B11F0BF5B4CE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.160.0-154.88.179.255
Signature Algorithm: sha256WithRSAEncryption
d6:9a:2d:f7:76:6c:ad:39:ad:ce:4f:13:1d:79:0a:12:ba:c9:
4b:d9:a1:be:d2:e2:13:b5:c7:05:a2:b7:23:5c:9d:91:f3:ef:
cb:50:12:a3:d3:b0:9a:18:7a:fe:39:6a:4f:92:40:4a:27:a9:
78:ae:e9:4f:2c:e1:f9:b4:3e:a7:1b:29:96:b9:2d:73:0c:f6:
df:4b:5c:04:8e:3c:a8:7d:0c:70:15:47:de:78:ec:35:bf:c2:
bc:05:f4:de:93:15:1d:8f:2e:24:5b:88:1e:b7:fb:af:08:e5:
cf:7f:9c:2c:b9:b2:75:8f:94:14:8c:32:32:ab:aa:f4:0c:66:
ac:3a:e4:59:fe:d7:ea:37:cb:25:84:65:c0:57:1e:41:fc:d2:
9f:95:a5:a6:aa:d3:13:ca:b8:32:57:f5:c3:f8:9f:05:58:bb:
ad:74:8f:74:4b:51:9b:c5:9f:f6:bb:ab:b5:ce:e5:61:a2:d4:
3c:da:7d:1c:d2:ca:61:10:33:50:ff:58:d5:62:3b:a9:09:04:
83:28:b2:1c:d7:cd:9c:3f:fa:0c:6a:6e:d1:9e:b9:e9:bc:56:
de:a6:65:18:75:f2:23:cb:f2:4c:87:f0:f4:90:7f:34:3e:9d:
df:98:2f:11:a3:8a:e9:6b:1d:64:72:61:12:27:e5:55:c5:7f:
60:9f:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:38 2025 by rpki-client