Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDADF43037CE11F085D591AFDAE4EC9C.roa
File: FDADF43037CE11F085D591AFDAE4EC9C.roa (raw, json)
Hash identifier: slYdrKb3Znz5hetjhG7XJ9Vxboe4mL14594pIGAax3w=
Subject key identifier: C0:C0:FC:F6:1E:86:15:96:70:8C:7A:C5:28:7B:86:35:2E:A9:E2:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDADF43037CE11F085D591AFDAE4EC9C.roa
Signing time: Fri 23 May 2025 12:11:01 +0000
ROA not before: Fri 23 May 2025 12:10:56 +0000
ROA not after: Sat 14 Jun 2025 12:10:56 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.206.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98810 (0x181fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 12:10:56 2025 GMT
Not After : Jun 14 12:10:56 2025 GMT
Subject: CN=683065d5-d679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:1c:2c:6d:f6:25:8e:cc:fa:82:9f:bd:a1:
38:46:ed:0d:b7:af:47:dd:a5:bb:14:0b:59:7b:70:
2c:18:f4:13:4b:8e:66:49:ed:00:a3:ef:26:ee:b4:
f1:4f:af:51:7f:32:1e:9d:b4:9e:ed:b4:16:0d:bd:
b5:48:a6:2d:db:62:91:92:d1:b8:94:2a:41:8a:d7:
6a:7e:68:33:d3:e8:9b:ff:cc:7a:1d:15:b9:b4:b2:
16:94:cc:33:90:57:13:a5:b9:7d:96:fd:05:83:79:
b5:40:63:2c:31:a9:4d:b7:4b:de:19:bf:ff:da:23:
19:43:50:3d:18:73:39:57:80:dd:29:8f:37:ad:ec:
d1:e8:57:ee:1f:bb:1d:01:51:95:29:6c:26:4c:6f:
90:ec:dc:70:94:fc:7b:3a:21:83:f3:bb:c6:c4:56:
39:a3:a6:6e:34:5c:92:da:1d:47:d7:ff:cc:e3:56:
e4:f3:9f:5f:6a:5d:e1:77:9d:b4:8b:7e:38:48:17:
be:bc:8b:a1:b5:7f:d5:43:24:64:b0:99:19:99:0a:
58:a6:68:8f:ad:92:e4:d6:a3:5b:d8:e9:f5:0a:81:
16:9a:95:f0:de:5e:a0:a7:d2:24:8b:9e:ba:5c:07:
90:16:47:23:0b:23:31:b0:9f:b3:8d:bb:19:1d:a9:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:FC:F6:1E:86:15:96:70:8C:7A:C5:28:7B:86:35:2E:A9:E2:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDADF43037CE11F085D591AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.206.128.0/18
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:af:c8:8a:7c:36:c3:34:3a:a7:98:90:9f:27:1a:f7:04:dc:
1b:9c:fb:1d:ba:30:77:3e:c8:29:91:a4:2b:bd:6b:94:e0:f8:
2d:7e:cb:76:b7:c5:0a:2d:da:c5:6a:6b:b9:69:14:5d:6b:8a:
25:8f:96:74:85:c1:41:17:fc:e6:1e:3b:49:23:8c:99:3b:e6:
dc:ff:6b:94:0e:7a:ab:fc:eb:3a:b4:31:c8:44:a8:29:80:6b:
c4:44:c2:78:db:0b:81:ce:9d:bc:f5:fd:ef:76:1b:fd:1c:81:
bc:cc:cf:5b:dc:86:96:06:57:be:d0:f5:42:c7:8b:4b:b7:1b:
1f:39:4a:fe:d4:2c:87:af:e6:c4:c4:d3:08:d7:90:2d:21:41:
e8:14:e0:3c:69:37:35:d1:1c:7b:a5:a7:52:ab:e2:34:0a:76:
cc:28:1f:4f:e1:c5:01:86:f4:0b:b4:5b:4e:b8:19:d2:6b:e7:
1f:02:a7:c5:e1:37:51:31:cb:f5:84:1d:47:05:c0:8f:87:3e:
32:52:b5:e9:e4:2c:74:7b:f3:84:60:75:a9:5a:40:f2:0a:52:
64:fc:64:01:d7:4a:42:c6:f7:ad:b2:3d:ab:fd:50:61:c7:82:
21:31:f6:87:bc:22:2e:16:ee:bf:00:ae:8f:2f:02:c5:4c:04:
1d:f9:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:05 2025 by rpki-client