Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696DD3542BF211F09C75A07EDAE4EC9C.roa
File: 696DD3542BF211F09C75A07EDAE4EC9C.roa (raw, json)
Hash identifier: 4/1IJny7DqV8fVupC2OI9WBmf47WUmnsR1ubBc4mufg=
Subject key identifier: 2D:2C:A1:AF:A2:CA:98:11:76:E7:ED:BE:02:19:0E:2F:96:F9:3B:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696DD3542BF211F09C75A07EDAE4EC9C.roa
Signing time: Thu 08 May 2025 09:54:20 +0000
ROA not before: Thu 08 May 2025 09:54:16 +0000
ROA not after: Mon 19 May 2025 09:54:16 +0000
asID: 26617
IP address blocks: 154.202.6.0/24 maxlen: 24
154.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98190 (0x17f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:54:16 2025 GMT
Not After : May 19 09:54:16 2025 GMT
Subject: CN=681c7f4c-5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:30:4f:3b:82:3c:54:ce:bb:1a:e6:78:78:
92:63:ef:e8:67:25:b3:20:6e:db:16:87:a8:69:d3:
89:1b:1e:12:9a:0e:b7:3d:cd:68:dd:75:63:7a:d8:
3b:e6:67:95:b3:c9:a0:73:c0:0c:6e:ec:44:dc:32:
a5:51:b5:53:28:54:3c:5e:45:f5:7f:94:6c:99:19:
05:f6:13:de:f4:40:ee:d2:f8:e5:32:a0:38:59:08:
4b:ff:e9:22:60:cb:73:b0:10:ac:68:77:6d:57:a4:
ae:81:ad:b1:e9:b8:f5:8f:ba:06:34:04:b2:94:6e:
92:42:36:cb:14:45:12:20:9e:18:83:a4:ef:c3:34:
61:a8:8b:79:01:f0:a6:35:81:0f:67:cb:a1:1e:9b:
54:4a:7a:f3:f8:9a:b6:8d:0f:2f:b8:3a:99:73:76:
15:c3:6b:49:90:07:06:e6:90:e2:cb:c6:22:47:84:
cb:cf:91:1c:8f:f2:6a:9c:22:89:fc:bc:ca:da:b0:
16:85:f2:de:b3:69:d7:c1:5b:37:60:7a:4f:19:46:
0c:2a:e0:69:3c:1a:b3:35:97:78:b4:8f:64:f1:a0:
a4:cf:1d:07:56:47:cf:68:76:04:ab:63:37:62:7a:
59:cb:87:fd:e9:75:38:7e:06:d2:05:59:be:fc:fb:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:A1:AF:A2:CA:98:11:76:E7:ED:BE:02:19:0E:2F:96:F9:3B:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696DD3542BF211F09C75A07EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:71:82:1d:57:ef:82:36:27:cc:fe:3a:80:4c:4e:67:9d:25:
64:82:fe:bd:f3:e7:5a:9c:d1:37:dc:1a:20:e6:6c:22:7c:5a:
4e:16:63:9b:c1:d8:ff:67:e1:8b:e6:af:a6:28:99:89:ad:c6:
b4:ff:89:de:fa:1d:21:6e:a5:8b:cb:81:4f:4c:83:50:43:22:
d5:cf:3b:3a:1e:6d:60:c4:4c:ea:df:bb:68:7c:4a:f3:c8:d4:
d2:33:e3:62:27:c5:d1:84:1a:62:75:02:1e:06:85:ac:a7:95:
ba:cb:7d:1f:f8:70:cd:1a:39:fe:3d:03:24:85:9a:92:b9:ce:
f8:a4:5c:6d:41:39:bd:53:36:08:15:80:a1:7d:94:96:4a:e6:
be:9a:cd:1a:0c:30:9d:86:c1:8a:98:14:ab:fb:cc:b9:88:49:
73:87:2d:6d:52:a2:2d:0e:6e:48:e7:04:ab:44:6a:10:7c:11:
8e:3e:94:1f:b3:f4:a6:4d:ce:f2:4e:11:54:c3:43:da:6e:a6:
1b:7a:66:0d:16:8f:13:bf:10:64:d7:11:55:b9:94:19:bc:3d:
36:62:2b:d1:32:c7:b8:5e:73:13:ad:f8:79:94:0c:bd:9a:5a:
38:28:5c:2e:e0:69:1f:2d:4c:0b:49:c2:4e:f6:9e:5a:1e:92:
51:c6:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:15 2025 by rpki-client