Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6083F61424EB11F099CE6D78DAE4EC9C.roa
File: 6083F61424EB11F099CE6D78DAE4EC9C.roa (raw, json)
Hash identifier: pg8DJUMHW8MGS60lcUz6xBb/oTG0DFd3I/sKUmOmK2Q=
Subject key identifier: CF:A8:FA:06:A0:59:22:1B:DA:D9:E8:54:FB:43:51:FA:59:81:0D:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6083F61424EB11F099CE6D78DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 11:16:21 +0000
ROA not before: Tue 29 Apr 2025 11:16:16 +0000
ROA not after: Wed 03 Sep 2025 11:16:16 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
154.92.23.0/24 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97507 (0x17ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 11:16:16 2025 GMT
Not After : Sep 3 11:16:16 2025 GMT
Subject: CN=6810b505-6d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:79:69:29:42:69:7e:7f:be:45:b1:0c:2e:
5d:cd:7c:23:26:45:02:61:ad:cf:c6:14:22:bd:d5:
5f:66:2f:c7:89:0e:90:11:d9:8e:0e:bb:a3:a3:df:
56:21:fc:40:1f:0a:49:16:9a:39:08:2d:9d:92:ad:
ef:e9:89:1a:fe:a9:a9:1b:be:5d:5b:35:0c:92:b6:
18:cf:02:f3:97:a7:f1:eb:de:f3:1d:90:a9:e9:35:
84:7b:24:a1:63:89:a8:fc:4c:62:46:21:58:82:49:
16:ac:a8:03:ae:51:20:65:a4:8c:a0:57:14:36:06:
52:94:48:81:72:21:b6:e1:d0:b9:17:d6:13:77:3e:
2b:1f:97:a0:a3:d7:71:eb:c2:44:7f:d1:17:c3:6f:
e6:23:73:7a:9d:e6:e3:34:b7:b0:b3:31:43:04:4c:
88:40:a9:36:5a:e3:5d:75:c0:6b:de:2e:e8:f7:ea:
8d:d7:b1:6e:16:ed:a9:04:22:8e:65:4f:0a:1a:e2:
7c:80:49:05:5c:f7:21:5a:cc:48:1b:bb:30:3d:42:
e6:27:3b:a7:73:b2:39:3b:34:3b:5c:12:84:a5:ab:
dc:5a:d9:32:d8:bc:6d:0d:e1:ba:a0:a5:35:37:7f:
56:5f:0a:a9:81:c5:5d:fe:06:a1:d0:8a:8a:a0:cf:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:FA:06:A0:59:22:1B:DA:D9:E8:54:FB:43:51:FA:59:81:0D:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6083F61424EB11F099CE6D78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:e6:a3:14:d5:76:69:2b:72:01:13:ee:7d:d3:59:bc:a6:99:
91:ad:18:22:00:e9:d8:79:0e:21:55:34:46:ca:d2:75:09:25:
53:66:b7:86:0d:d3:83:f2:ff:6d:9b:81:59:24:0d:71:f6:03:
61:ba:b3:a7:f3:87:67:3d:17:b2:9b:26:99:d5:d3:3e:c7:e5:
d3:e2:99:2b:fc:b0:d3:af:9d:f6:ad:9b:28:4d:d4:82:5f:96:
d8:91:aa:9b:b7:7b:63:f7:fc:29:b8:d6:c2:f2:b2:e4:44:00:
a5:5a:59:a8:8f:1d:93:4e:bb:1b:96:fe:c6:9e:a5:cd:92:22:
ee:12:b8:30:f3:c6:c0:fe:03:b7:bd:44:57:7d:0b:6b:9d:f8:
bf:25:fa:50:4a:37:40:b0:c7:1b:4e:44:bb:96:cc:fd:a3:32:
e3:9d:1c:f9:e3:7d:c7:45:69:a9:0b:f0:bb:f0:dd:a9:31:73:
c9:7a:fe:50:39:77:da:86:4c:b1:8b:70:15:bd:7a:20:5b:8d:
86:9e:89:9e:75:81:96:e7:ed:33:50:c6:79:7b:25:0e:b7:4f:
d9:c4:87:1c:4e:b5:d4:b0:2f:be:15:bb:d5:ea:56:18:27:14:
31:79:a1:bf:3b:07:17:61:f0:7f:44:a5:21:ea:dc:dd:57:ec:
3b:b5:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:23:54 2025 by rpki-client