Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/048B55C8516E11F08FE414EDDAE4EC9C.roa
File: 048B55C8516E11F08FE414EDDAE4EC9C.roa (raw, json)
Hash identifier: RqmJ7QeI1N1pQt19JSEW8FxSfh8vwrnhS+91t48NYcY=
Subject key identifier: 41:93:63:82:B4:CB:D4:24:D6:22:16:4C:56:5F:A2:83:E2:31:7B:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/048B55C8516E11F08FE414EDDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 02:42:22 +0000
ROA not before: Wed 25 Jun 2025 02:42:17 +0000
ROA not after: Tue 15 Jul 2025 02:42:17 +0000
asID: 57043
IP address blocks: 154.199.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100575 (0x188df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 02:42:17 2025 GMT
Not After : Jul 15 02:42:17 2025 GMT
Subject: CN=685b620e-8161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:9a:d5:8d:a5:91:0d:d6:ce:7c:53:51:02:
91:f7:a7:b5:a0:7e:5f:23:c0:f6:0a:53:b9:01:4c:
dc:64:ba:f9:95:da:07:fd:56:db:1b:0d:4b:b4:d2:
cf:53:c7:10:dc:f7:32:bf:3a:68:3c:52:0b:b4:04:
e4:d1:6f:eb:8d:cf:a9:7d:b2:c6:bb:89:52:a8:5c:
d4:1c:81:4d:1b:e1:14:34:2b:d6:80:dc:e3:02:e7:
0c:94:b4:e3:67:8c:46:66:78:36:4e:60:a3:74:1b:
25:1f:41:d6:42:c6:42:58:54:d8:50:01:71:ae:c3:
ac:b7:20:c0:6a:12:a5:b0:e1:85:be:77:73:57:50:
54:5f:18:5b:c6:49:74:21:04:1f:c2:7a:3d:f9:15:
db:d1:e6:7d:56:a9:41:46:9f:9b:3f:f2:f3:4b:89:
ed:4f:dc:c3:2d:9a:9a:2b:f0:72:9b:60:54:47:ce:
82:ab:6c:8c:b9:e8:2a:00:d0:93:24:39:8f:6c:14:
96:89:b3:1b:a4:dc:3b:9f:f0:52:1f:6a:ef:5b:cb:
1c:f7:fb:d7:aa:2e:c8:03:03:af:93:0f:a8:c6:6d:
1e:e8:d0:37:5d:18:c0:ea:b0:72:d8:ce:8e:4c:8e:
04:25:24:7b:80:b0:6e:26:09:29:17:5f:d4:fb:df:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:63:82:B4:CB:D4:24:D6:22:16:4C:56:5F:A2:83:E2:31:7B:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/048B55C8516E11F08FE414EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:c3:5c:d5:0a:b8:d2:9a:14:23:33:80:d2:ea:e2:ef:86:
38:58:fd:e3:5a:e8:f7:a4:a3:a2:8b:37:4f:3f:00:ed:5f:44:
dd:21:dc:4f:28:6b:cc:04:b4:58:6c:ff:26:5d:88:a4:0b:0d:
37:be:18:98:95:76:9c:96:f1:be:06:d4:93:db:bf:4b:8d:13:
79:9b:ba:15:aa:a0:a3:ea:e4:da:43:1d:ed:10:12:d2:d3:ab:
eb:08:a3:2a:71:4c:7f:09:de:72:cc:04:23:d1:22:87:8a:db:
b9:87:20:86:c7:83:1c:10:a7:b2:de:73:f2:d0:db:e1:f4:d7:
c3:4b:ce:4f:72:81:6b:d5:20:df:ab:43:ef:cc:0e:50:df:56:
a1:7a:19:6d:35:24:ce:6c:2e:d4:39:37:5f:c3:e2:53:38:a2:
07:fb:69:6d:6a:15:b5:69:c6:96:c5:2c:16:57:34:64:35:2b:
d7:f2:6d:0f:a2:75:2d:f6:3c:48:77:a7:08:f4:bc:13:8d:00:
50:7b:a0:94:f9:c7:54:06:fa:8b:3e:9e:a2:50:b0:c4:a1:2a:
2e:11:5a:40:ba:6b:94:dc:a1:85:98:ad:6a:ec:41:ca:67:94:
68:c5:35:6f:7f:fb:56:6a:c2:e2:37:33:35:fe:c8:0d:75:a8:
d2:22:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:20 2025 by rpki-client