Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1606DE06469E11F08343D383DAE4EC9C.roa
File: 1606DE06469E11F08343D383DAE4EC9C.roa (raw, json)
Hash identifier: Dtni804kIErtMwn+t4mVigwmbpwcFhPAwLhJKH67raQ=
Subject key identifier: E9:A3:BE:F1:D9:C5:57:10:98:CA:AF:82:91:62:9A:57:B7:A0:3C:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1606DE06469E11F08343D383DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:28:44 +0000
ROA not before: Wed 11 Jun 2025 08:28:39 +0000
ROA not after: Tue 12 Aug 2025 08:28:39 +0000
asID: 135097
IP address blocks: 154.204.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99832 (0x185f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:28:39 2025 GMT
Not After : Aug 12 08:28:39 2025 GMT
Subject: CN=68493e3c-419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:67:32:7e:b9:73:d8:a6:84:d8:6f:03:b4:
93:d7:67:5c:32:5c:c4:f2:58:5f:47:cc:d7:36:61:
b4:58:3c:d9:f4:04:9d:1e:60:7a:9a:a0:be:a7:7e:
69:d6:4b:c3:b0:e1:b5:76:29:b6:9e:14:9e:a0:e8:
3a:cd:6b:a1:2f:08:09:85:13:09:83:4e:7f:49:b7:
61:4c:cb:78:59:2a:9a:20:9b:fe:14:9a:ba:0f:19:
36:06:8d:7c:9a:c4:d1:32:c7:a8:c4:8f:89:48:d7:
fc:31:c0:6f:f7:c1:8b:3a:c8:b5:60:27:13:f1:ca:
bd:ae:b4:c7:10:70:ca:1d:68:ee:0a:2f:73:a7:bf:
65:be:17:44:9c:02:b2:80:20:d4:d6:09:86:95:7e:
83:5a:6e:d2:4b:ed:44:27:10:71:e5:9f:bc:29:ab:
5e:7f:a2:3d:d3:24:1f:be:d7:bd:11:17:af:5c:ad:
75:06:72:8c:17:f8:ab:15:6e:e1:79:cf:ac:96:f6:
5b:08:fe:73:3c:94:e1:8e:25:6a:7a:fa:e8:77:a7:
ed:b5:53:ea:39:61:24:e4:6c:82:db:cc:7c:9c:7f:
7a:f5:dd:35:48:86:0c:df:c6:63:0e:e7:06:35:b8:
03:30:92:5e:4a:07:42:36:31:0e:f9:c6:3c:21:43:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:BE:F1:D9:C5:57:10:98:CA:AF:82:91:62:9A:57:B7:A0:3C:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1606DE06469E11F08343D383DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.192.0/18
Signature Algorithm: sha256WithRSAEncryption
55:ae:54:b0:e7:3b:ef:56:c2:94:db:28:b7:15:5e:9e:3e:f2:
43:5c:75:02:7b:0a:72:e7:70:0a:4a:24:b0:d9:3e:29:5f:66:
af:86:c2:dc:53:e2:c8:11:b6:fd:29:58:70:a1:43:26:a9:d3:
56:26:35:27:69:25:60:71:d8:ed:4f:33:17:65:f5:d7:cc:fc:
09:a1:f6:62:11:6b:f8:41:8a:96:7b:05:3c:63:5d:de:f1:3c:
38:2d:1c:d1:40:c0:01:dd:0e:bc:fc:bc:45:c6:df:66:89:d3:
c5:41:16:f5:22:ea:2f:7c:50:5d:77:7e:11:59:c9:aa:e4:96:
95:42:5a:aa:32:98:a8:66:e4:23:7e:07:d0:5f:c5:d0:f3:59:
f0:af:4e:72:7e:d9:e4:00:aa:e2:ec:a4:94:19:0e:6f:df:3a:
11:56:93:8f:12:60:70:92:75:5f:63:86:63:06:ab:1d:21:48:
0d:de:20:2a:59:71:46:fd:84:5d:47:ad:96:45:e4:72:fc:1b:
70:c4:31:a3:0b:8f:f3:33:20:6a:31:2d:be:71:b0:bf:9a:f7:
a2:67:59:74:1f:ce:8d:e4:e1:09:cd:c0:ed:e8:97:90:00:4a:
c9:e0:fe:ee:5d:aa:a1:79:36:4f:56:8b:72:5a:79:5c:f5:de:
42:55:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:11:40 2025 by rpki-client