Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/94C2BDF04C7F11F0BE0543DADAE4EC9C.roa
File: 94C2BDF04C7F11F0BE0543DADAE4EC9C.roa (raw, json)
Hash identifier: 3YaFLxVNUkbWE76XdYz35Qs+t/X1QWUU2Sxhtna54Xo=
Subject key identifier: 47:F5:2D:25:FA:E0:B2:B2:8F:77:FE:29:E5:60:13:0D:F3:FE:18:32
Certificate issuer: /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial: 011D
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Authority info access: rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/94C2BDF04C7F11F0BE0543DADAE4EC9C.roa
Signing time: Wed 18 Jun 2025 20:05:29 +0000
ROA not before: Wed 18 Jun 2025 20:05:24 +0000
ROA not after: Thu 18 Jun 2026 20:05:24 +0000
asID: 37515
IP address blocks: 213.150.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Validity
Not Before: Jun 18 20:05:24 2025 GMT
Not After : Jun 18 20:05:24 2026 GMT
Subject: CN=68531c09-6197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:a4:ac:84:b7:34:2a:1c:05:8b:ca:8b:68:
78:f3:08:40:e8:09:70:aa:35:2c:13:10:2a:d7:81:
82:de:3a:e5:30:21:f3:69:2d:a4:ed:ac:82:53:52:
d6:c5:d4:73:de:dc:14:c4:65:60:3c:b4:db:b0:66:
18:c1:87:09:35:eb:6b:3e:e0:c5:8f:d9:c8:8d:26:
78:9e:8c:76:f9:2d:78:bd:ea:13:eb:69:7c:07:0b:
a9:df:22:9c:f4:73:f2:e9:a0:0a:7f:38:cc:09:ce:
19:61:88:3f:a6:8c:cb:cf:57:47:c0:44:63:e0:0a:
b1:da:ba:77:70:a8:e9:1c:fc:fd:b8:04:e6:12:bd:
4d:35:73:4c:ac:6f:ce:66:c3:c9:53:c0:16:d0:1b:
7a:2a:43:ab:a5:5c:6c:f3:8c:6a:16:a2:0d:57:77:
86:75:e5:66:b0:4f:2f:df:3d:14:f9:a3:c1:b6:40:
fc:78:cc:16:23:71:50:e5:c0:0e:5a:7d:66:5f:4e:
4f:d6:a4:4f:99:37:db:73:2e:8a:ac:1a:0b:a5:6f:
c4:0b:da:ba:6f:3f:f9:65:43:1a:f3:c9:ee:75:37:
28:a4:69:59:92:dd:55:32:fd:ce:63:10:70:60:eb:
5d:2e:24:b1:d4:65:c6:22:e8:bd:36:e9:30:39:21:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F5:2D:25:FA:E0:B2:B2:8F:77:FE:29:E5:60:13:0D:F3:FE:18:32
X509v3 Authority Key Identifier:
keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/94C2BDF04C7F11F0BE0543DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.150.208.0/21
Signature Algorithm: sha256WithRSAEncryption
59:19:8c:82:1b:6d:ae:cc:c1:b8:c8:62:55:17:24:cd:ea:0c:
de:10:aa:94:2c:db:c1:99:8e:48:52:50:9b:76:6d:5f:50:a9:
ea:c2:fc:5a:f4:73:57:4c:65:0e:5c:81:25:33:0d:c7:58:f5:
91:b8:eb:30:8f:15:4a:96:d6:91:67:d2:7e:3e:59:0d:fb:90:
47:aa:1c:16:55:a3:41:35:61:3b:68:a5:9b:2c:88:da:95:0b:
47:38:87:f4:f2:f3:fd:33:1f:ca:cd:4b:f4:cc:9e:56:a7:e5:
02:80:d3:9b:90:e1:84:08:33:c2:c3:ce:01:cf:57:38:e0:6d:
90:ed:fc:67:3f:91:0f:16:51:3a:5d:be:93:0e:d9:ab:93:3a:
4b:ca:7d:9c:c9:12:f5:9e:23:ff:57:d5:8d:6e:5f:a3:62:52:
b4:f9:14:6e:0f:c7:58:58:d2:2f:bc:c1:4c:b5:b1:c5:7c:e9:
ec:82:93:9e:ec:31:7f:0e:8d:23:09:f0:05:59:40:82:e2:f3:
4c:c9:53:6e:bd:d0:89:56:6d:b1:d6:ac:be:42:ea:05:df:97:
aa:3f:86:bf:8a:a9:8a:9a:c7:a1:18:1b:87:3a:89:fe:41:37:
43:43:46:9c:a5:76:37:84:c4:40:d3:75:c4:19:82:e4:c5:3d:
b5:2e:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:50:45 2025 by rpki-client