Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4E60AE45FB11F08EB59CD9DAE4EC9C.roa
File: 0B4E60AE45FB11F08EB59CD9DAE4EC9C.roa (raw, json)
Hash identifier: XHoNM6A5nK419tH5hIvAoQU4MXFcj2kPbWJdjBE7OeY=
Subject key identifier: 28:AD:4E:83:A2:26:A9:AE:5E:DB:B6:6F:14:AF:16:B3:6E:F7:A4:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4E60AE45FB11F08EB59CD9DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:01:38 +0000
ROA not before: Tue 10 Jun 2025 13:01:33 +0000
ROA not after: Fri 18 Jul 2025 13:01:33 +0000
asID: 20326
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99780 (0x185c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:01:33 2025 GMT
Not After : Jul 18 13:01:33 2025 GMT
Subject: CN=68482cb2-7f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:05:48:ee:3e:29:ba:b0:3d:98:a8:8f:b5:
e0:00:8c:e4:65:6a:9a:e5:0a:95:5d:04:8f:7b:07:
f0:7c:5f:3a:f5:a3:85:5a:19:e7:1d:c0:dc:23:67:
c5:f0:dc:bb:19:45:f7:21:02:82:2e:9b:bd:b8:df:
92:27:fb:ba:6a:51:b0:07:b6:b1:18:ec:5a:06:37:
78:38:0c:c2:88:2b:8f:df:ba:05:91:33:0b:e4:62:
2d:43:95:8e:0d:fe:f0:58:6e:cb:2d:91:e8:0c:26:
8f:e9:6e:10:91:c9:90:8b:36:2b:0b:87:be:f5:c6:
56:9a:3b:68:4a:0f:3b:17:11:40:86:a9:8e:2d:e5:
2a:ad:1f:4d:67:30:6a:f8:ca:e0:b5:f9:3d:6c:cf:
fb:ac:f8:ac:16:8c:f8:0c:c7:c4:ab:f4:be:45:77:
34:44:ac:bb:ba:35:e5:45:d5:f2:f2:bd:7a:a2:7f:
4d:3d:dc:13:bf:44:f1:a7:57:17:14:39:27:72:1f:
a5:3e:aa:26:4c:b1:ac:5d:8d:1d:56:fd:e4:ab:d3:
85:52:c7:41:1e:45:5f:2f:7a:75:fa:90:1b:14:ad:
a8:19:b8:7e:f5:1d:53:a6:8d:2e:2d:a8:78:e7:5e:
7d:69:93:40:8a:e2:95:e8:8b:d5:83:5b:17:cd:30:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:4E:83:A2:26:A9:AE:5E:DB:B6:6F:14:AF:16:B3:6E:F7:A4:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4E60AE45FB11F08EB59CD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b9:f0:1f:92:fa:48:de:3a:79:97:5a:73:12:63:dc:04:3d:
bc:b4:f0:e4:09:b5:ad:a2:08:30:54:89:79:90:0a:68:15:de:
ee:75:cf:4e:1b:69:bb:8a:04:1c:5e:b8:87:fc:ce:fa:c4:e6:
7c:c3:42:6b:01:cc:34:2e:7a:a0:9c:3a:e5:c8:cb:38:e6:7e:
02:9f:06:e4:e8:d4:e0:2e:e5:99:9b:35:78:dc:90:5b:d2:b4:
09:2a:a8:01:6e:99:67:1a:97:2d:82:9e:d8:80:89:7d:67:56:
4d:17:90:b5:66:e8:de:0a:01:3d:e5:46:2c:5c:db:85:b0:fe:
c9:cb:8e:8d:6e:41:03:46:95:c9:d5:f5:90:69:ee:f7:87:4e:
46:db:4c:2a:cf:ea:92:ad:9e:33:73:c5:30:c1:d6:0a:f2:4c:
93:ae:a6:d7:05:7c:68:e6:b0:d1:05:2c:37:e7:7e:06:9c:cb:
d0:59:2f:5c:d7:5a:50:25:ae:77:d3:54:db:cb:f9:70:d4:b5:
b4:5e:9e:60:57:91:0a:cc:40:7f:5e:c0:75:20:58:ea:7a:2c:
6f:1d:21:8c:71:b3:5c:96:84:e2:24:7a:b5:e7:cf:7b:70:b1:
ae:21:a5:b0:ac:38:65:5a:a9:38:9e:6f:3d:bb:96:70:34:d1:
30:06:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:43:59 2025 by rpki-client