Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA39512504811F0AFB2847ADAE4EC9C.roa
File: 5CA39512504811F0AFB2847ADAE4EC9C.roa (raw, json)
Hash identifier: ftGk0tnh3WarAZBOVQECeQWZXa+181mgsobXBq/YMi0=
Subject key identifier: 4B:44:51:EB:F9:51:6D:46:94:FB:F5:85:FA:17:D8:B3:AC:66:35:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01881F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA39512504811F0AFB2847ADAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:40:17 +0000
ROA not before: Mon 23 Jun 2025 15:40:13 +0000
ROA not after: Sat 02 Aug 2025 15:40:13 +0000
asID: 174
IP address blocks: 154.202.105.0/24 maxlen: 24
154.202.134.0/24 maxlen: 24
154.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100383 (0x1881f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:40:13 2025 GMT
Not After : Aug 2 15:40:13 2025 GMT
Subject: CN=68597561-862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:e1:d8:1f:eb:86:bb:d0:18:a8:1f:dd:d1:
b0:56:9b:84:48:14:a5:ec:c9:92:04:57:61:58:95:
72:82:79:0b:84:34:b2:4e:6c:94:df:54:43:8b:15:
43:1d:e1:68:9a:9e:63:d4:e9:8b:03:c0:b3:de:4d:
59:51:c5:e8:85:ca:9d:0d:32:70:ba:55:ee:5c:68:
12:ea:1a:b7:ed:2d:5a:bf:31:a4:5f:d4:f0:f7:e0:
2b:ee:09:0b:99:82:4b:e0:65:fb:4d:2d:e0:0f:ba:
5f:c2:80:ca:4d:84:91:e1:46:0c:cd:0f:ae:2b:e2:
79:48:9b:7d:c2:6c:0e:6b:dd:bf:8c:d7:75:92:93:
ae:a4:8f:8e:bb:ef:95:f7:f8:85:0a:da:a5:03:de:
33:77:99:1b:43:6f:73:98:34:88:67:8d:18:c8:ae:
f6:b7:3e:a4:b6:39:64:ba:f3:b0:b1:f9:ba:04:68:
aa:46:96:e2:db:1d:bc:21:57:8d:ed:51:df:d4:d5:
1f:cf:98:96:12:6b:3d:6c:c8:8c:00:dc:7e:c1:d1:
1a:5a:e0:01:6c:9c:84:a2:61:02:b7:b9:f1:b8:4e:
9d:73:09:8c:ea:b7:b3:a2:e4:cc:63:77:64:e8:f8:
78:26:b8:23:d6:30:68:22:cb:53:09:d9:cf:70:fd:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:51:EB:F9:51:6D:46:94:FB:F5:85:FA:17:D8:B3:AC:66:35:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CA39512504811F0AFB2847ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.105.0/24
154.202.134.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:56:32:46:b4:0a:61:a8:e0:aa:9f:6f:b5:60:3b:02:29:49:
80:f8:4c:4b:2c:3b:e4:4f:de:da:b5:89:6b:45:50:45:95:76:
59:3f:17:de:a7:2f:55:c5:b8:ce:14:41:5f:52:1e:7e:2f:ad:
1e:fe:d8:23:fd:04:f1:20:4d:5a:2e:df:49:32:88:fb:b9:7d:
22:0f:09:f2:45:84:6e:17:0f:6d:72:74:6b:70:fa:03:f6:ab:
b6:57:5a:34:98:93:cf:6a:58:63:06:f2:65:47:8c:0d:f3:ff:
3e:04:38:d2:fa:d3:43:2b:5d:52:da:dc:af:a6:b6:43:90:1b:
42:96:0a:bf:b1:b0:25:26:a7:b6:2f:68:c3:62:a4:46:aa:ed:
d2:96:4b:b6:66:e0:05:85:2c:9b:88:fe:7b:e5:07:14:fe:ab:
3c:bc:81:95:57:e9:ae:9d:4f:7d:cf:f0:a3:7d:0b:01:ab:48:
df:e1:7d:8b:c0:f0:17:e7:a9:49:5b:08:a3:ac:42:4a:50:cc:
2d:6c:67:6c:dc:82:20:d2:82:e7:42:93:52:56:aa:d1:39:36:
34:2b:81:7f:f7:9d:6f:15:df:7b:c4:03:a4:db:be:58:57:9b:
66:6c:c0:81:60:d2:c3:14:62:f0:2e:bb:cf:c1:1b:20:03:56:
d8:d3:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:41:59 2025 by rpki-client