Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E5F378A544611F08CE6DAEEDAE4EC9C.roa
File: 3E5F378A544611F08CE6DAEEDAE4EC9C.roa (raw, json)
Hash identifier: b6u1Ow1pIY+Yw+fJf6XemXUbdZ4SddNkP3wT7aT2oZc=
Subject key identifier: 16:1F:F0:8D:CA:D9:8C:4A:DA:1A:EE:98:70:89:88:4D:30:3A:53:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018969
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E5F378A544611F08CE6DAEEDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 17:35:12 +0000
ROA not before: Sat 28 Jun 2025 17:35:08 +0000
ROA not after: Sun 14 Sep 2025 17:35:08 +0000
asID: 21859
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100713 (0x18969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 17:35:08 2025 GMT
Not After : Sep 14 17:35:08 2025 GMT
Subject: CN=686027d0-88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:bb:2d:e3:1b:44:38:bb:bc:8c:9f:4e:f6:
83:ee:6e:15:55:f7:c0:af:b4:46:79:1b:d2:fe:fb:
7c:2f:ec:89:3c:90:aa:62:f3:3a:f7:a0:a6:41:05:
b8:5f:c0:cc:62:a3:47:ea:3f:70:88:06:a4:a8:ba:
4e:fd:1a:c1:6e:4a:05:5a:95:39:ef:19:04:16:cc:
8b:49:d2:ed:e2:b4:9b:91:ee:0d:7b:59:be:33:e0:
78:3e:59:be:a8:a6:ca:fb:24:80:d3:9f:0d:b6:50:
4b:03:7f:bd:7a:7e:b4:48:56:e7:cb:fd:1d:a3:61:
c5:ce:10:1d:52:52:6f:09:95:3e:90:49:75:a4:e4:
25:f7:44:b5:4c:44:99:88:cf:f5:93:db:2f:e0:87:
cd:06:d0:63:b8:b7:64:7d:cc:b2:61:b4:0b:cd:6b:
70:b2:df:d1:ad:a5:84:e3:a6:9a:88:fc:f8:ab:28:
80:09:bc:f3:04:e6:8e:be:f0:07:27:1f:d9:fa:86:
4f:42:61:3b:3e:63:72:f4:5f:e2:43:77:df:9d:c0:
fa:06:d8:ec:b4:e3:57:64:f3:cb:46:a2:0e:6f:6f:
48:d8:24:5b:f8:1e:86:8e:6a:51:7c:7a:97:51:96:
e1:a5:3c:75:14:2c:a2:2b:dd:5a:ef:0d:33:48:6b:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1F:F0:8D:CA:D9:8C:4A:DA:1A:EE:98:70:89:88:4D:30:3A:53:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E5F378A544611F08CE6DAEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a6:ac:57:e9:e3:bd:e0:5f:ea:ac:d1:c0:ee:b7:5c:9c:7a:
0e:d9:e3:e1:68:14:bb:c8:dd:ab:70:af:67:51:ce:7b:b2:0f:
67:a3:f4:82:60:95:2f:ea:6c:6a:98:db:71:04:ba:9d:63:2e:
c8:62:47:c5:c6:6a:61:ef:12:ce:b5:0b:46:18:d3:3d:36:1b:
f1:0b:61:3c:4f:27:3f:4c:8e:f4:b4:cb:98:6f:db:a5:b9:f6:
f6:b9:ba:a5:d1:48:a0:68:17:ca:1a:cf:74:53:c7:41:55:10:
6a:eb:0e:29:aa:0a:04:60:e7:b2:96:72:35:17:1c:f4:b3:77:
8b:a3:80:be:f1:53:b1:29:30:de:eb:d5:a7:04:b1:44:27:94:
95:82:e1:28:cc:8c:8d:0b:21:41:c4:15:72:2a:40:1e:35:5d:
31:04:54:02:87:a9:7b:3c:2b:d4:e3:c3:fa:2c:49:10:7c:fc:
f0:b9:58:34:11:fb:e4:a9:0b:9e:2f:3a:ba:30:6b:41:1b:f6:
94:87:9a:ec:b5:43:50:69:6e:79:81:8f:08:62:72:d3:8e:64:
4c:97:d8:e7:10:2a:dc:a1:90:ff:5f:30:2b:12:cc:6e:05:2c:
5f:65:61:1f:de:aa:5d:25:bf:5b:f9:64:28:73:1d:cf:3b:c2:
8f:fa:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:50:29 2025 by rpki-client