Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D118212572911F0BCB0DEBEDAE4EC9C.roa
File: 3D118212572911F0BCB0DEBEDAE4EC9C.roa (raw, json)
Hash identifier: C6oWlzbz8xMgE9fhlWjfulQMRVrayWU4tXoJUCoUk+M=
Subject key identifier: A1:58:50:CD:E2:74:24:15:4C:20:1F:E2:E5:08:50:B3:CD:64:77:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D118212572911F0BCB0DEBEDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 09:45:08 +0000
ROA not before: Wed 02 Jul 2025 09:45:03 +0000
ROA not after: Tue 07 Jul 2026 09:45:03 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100779 (0x189ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 09:45:03 2025 GMT
Not After : Jul 7 09:45:03 2026 GMT
Subject: CN=6864ffa4-e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:26:6a:6c:8f:0e:ed:f0:ea:c4:e4:69:9d:
54:c6:68:74:7d:a4:06:b4:2b:23:95:fc:fc:c4:87:
23:16:7d:60:e6:1b:f8:6a:e4:e9:5e:80:6e:8e:cf:
5a:6e:18:2b:23:9b:6d:cd:ba:e5:30:00:36:df:fd:
da:e1:73:9c:6a:93:b3:98:0e:bb:d6:4a:0a:c7:42:
81:07:9a:b6:94:57:51:33:eb:4f:b4:e1:d4:8d:0f:
39:16:ec:e4:c9:1e:30:a0:bc:b0:70:fe:7e:60:77:
eb:e9:3b:d9:c9:7f:56:22:18:d1:29:a8:da:f0:e0:
69:8e:a2:f6:79:67:f2:89:95:97:6e:35:86:22:33:
75:16:e1:ce:a7:fe:ea:cb:f1:9f:f7:b6:ff:8a:d3:
12:13:26:6c:71:86:fc:41:9a:b1:a8:5d:a8:af:96:
d6:46:19:88:9d:92:36:2b:0f:81:61:a3:bc:14:21:
92:bc:ce:86:05:8e:3d:f9:73:5e:d4:38:44:0c:6d:
71:d3:e5:06:52:ba:f2:e9:5f:de:6b:d5:dd:42:70:
61:a7:65:b5:43:94:22:eb:68:c7:5b:5a:25:e9:6a:
23:de:bf:0c:68:ce:ae:17:cc:1a:d4:3c:f8:b4:46:
36:6e:fe:53:f4:72:b0:84:1f:97:44:2b:d4:11:1b:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:50:CD:E2:74:24:15:4C:20:1F:E2:E5:08:50:B3:CD:64:77:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D118212572911F0BCB0DEBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
98:58:ab:84:58:4b:30:9f:d7:eb:cc:47:e6:22:fb:f6:95:25:
08:89:f9:1b:77:cf:c6:80:fa:14:33:9b:ae:db:b2:d6:f7:26:
8c:07:49:98:de:65:b6:68:69:44:94:44:f5:b6:9f:21:98:25:
0b:59:9c:64:94:87:9c:85:fe:ee:18:fb:6d:99:4d:ce:67:7b:
b9:5c:ac:8a:0b:c7:99:44:77:19:71:4e:bf:42:e5:be:22:8b:
e5:13:45:24:9d:33:3b:33:5d:3e:e3:d3:84:ce:38:b6:45:57:
41:86:a2:a9:9a:64:e7:14:87:d3:79:9c:53:31:f4:75:da:f3:
00:0d:6f:d5:00:c5:c6:c4:d3:98:de:ed:9d:90:24:45:fb:72:
1d:c3:40:9e:e5:cc:ba:f9:00:79:b0:36:e8:63:f4:62:2a:40:
ee:3a:90:27:8f:22:3e:b8:de:7a:07:84:9e:f1:f8:8a:a1:2e:
43:d5:f9:5c:09:a2:be:b1:6f:61:3f:3b:a0:ff:dc:1c:a0:62:
c2:d2:f7:75:8b:27:7f:5b:db:19:33:78:be:09:1a:3c:bb:d1:
2e:d3:7f:30:d3:e1:8d:ca:a3:ab:0a:01:9d:8b:ce:e8:2f:ff:
4d:bb:9d:80:ed:f7:d6:ae:f4:bf:27:35:1e:0a:f9:90:16:95:
7f:c0:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:34:25 2025 by rpki-client