Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93050F228B911F097EF8BF4DAE4EC9C.roa
File: F93050F228B911F097EF8BF4DAE4EC9C.roa (raw, json)
Hash identifier: 4SMZtQ6P7Drfq7vjS42EEyCtgOZLaUnzM60eM5M9Ipk=
Subject key identifier: 69:C2:81:C4:58:08:3F:1F:18:78:05:F3:4D:A5:D9:AA:6C:DF:16:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93050F228B911F097EF8BF4DAE4EC9C.roa
Signing time: Sun 04 May 2025 07:32:47 +0000
ROA not before: Sun 04 May 2025 07:32:41 +0000
ROA not after: Tue 10 Jun 2025 07:32:41 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97974 (0x17eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 07:32:41 2025 GMT
Not After : Jun 10 07:32:41 2025 GMT
Subject: CN=6817181f-de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:ba:9a:35:2c:7a:f2:1e:67:d7:67:91:66:
f3:82:e5:1d:f0:b2:a0:0b:9c:54:2b:9b:df:14:eb:
83:0e:d5:43:16:33:60:49:6b:32:3f:f8:d2:ab:15:
8e:95:e1:15:b1:9e:ef:f2:29:78:32:89:f7:e8:2c:
6f:69:39:89:4b:89:69:93:d0:8a:9d:a0:a0:8e:9e:
dc:2a:3e:a1:33:26:02:4e:41:5f:31:89:d8:de:1b:
63:ab:75:de:74:5c:6e:94:f0:7c:e7:8b:2c:57:12:
cf:7b:b3:81:a2:17:66:5d:64:6e:8d:4a:7a:fb:bf:
de:05:e6:01:b9:ba:20:36:c5:dd:1e:4a:56:58:05:
9c:29:83:28:23:98:00:ea:62:0e:5f:4d:05:c1:15:
64:a7:8c:86:17:4f:78:ca:1c:fd:24:b1:b8:97:a4:
7d:20:3c:e2:08:fc:39:03:45:f4:54:32:a1:6c:00:
a7:da:4f:59:5d:ec:07:50:1b:1b:fa:21:81:2e:32:
78:d1:0b:a7:8a:ab:aa:5d:df:9e:f5:82:78:60:8b:
f6:46:c5:71:c6:45:25:48:ce:89:d6:9c:ee:fa:b6:
3b:44:c8:f7:ac:aa:7b:8c:5c:2c:91:ae:6f:b1:bf:
b2:fc:08:23:aa:54:8a:be:7e:c1:a4:3c:92:6b:0b:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:81:C4:58:08:3F:1F:18:78:05:F3:4D:A5:D9:AA:6C:DF:16:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93050F228B911F097EF8BF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
50:72:01:15:b5:70:55:40:cc:79:ed:d9:05:1f:b3:c7:04:f6:
b2:b2:2d:2f:27:7a:e8:07:a3:78:37:51:8f:3f:9e:df:ea:92:
4a:d9:f0:ed:ad:a0:e4:61:cd:da:f7:36:2b:ad:9d:fc:b3:66:
a0:de:bf:8c:fa:ea:95:69:51:d1:bf:d6:cd:df:0a:96:7c:8d:
2f:06:1d:bc:58:a5:f5:10:7f:3c:f6:2b:8a:3a:2f:bf:86:ac:
e1:ee:85:7c:3e:e6:fc:f4:b8:76:36:17:c1:27:06:ca:92:42:
82:ef:0e:c3:eb:9d:b3:35:1f:3d:de:ee:e4:c9:a8:ec:2f:48:
25:8e:64:8d:81:b7:a9:0c:57:ad:c5:e8:92:fb:c1:f6:38:3f:
22:74:ef:f3:63:b1:4a:03:c4:a9:cf:6a:66:9c:ac:0e:8f:06:
7b:ab:18:a3:b9:d9:45:7c:97:5b:4c:d7:6d:6b:96:a7:fb:44:
4e:47:7f:26:9c:ab:a1:ce:71:6b:cf:8c:63:62:66:bd:79:8e:
03:ba:4e:e1:b5:2f:e9:e3:76:67:cd:ed:96:db:85:a3:ef:4e:
8b:12:70:07:7a:15:21:fe:81:93:52:09:02:53:cf:1b:46:e1:
68:85:24:ab:71:a5:11:3b:6b:60:02:0c:f6:12:86:18:99:04:
a3:13:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:26 2025 by rpki-client