Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB60004318D11F08C250A7EDAE4EC9C.roa
File: 6CB60004318D11F08C250A7EDAE4EC9C.roa (raw, json)
Hash identifier: CtI671X3fogz4f69P9NRtpmdzc61D3Pxc59orFKtB30=
Subject key identifier: B0:AA:64:CB:34:A5:A2:FD:95:3D:91:3C:C3:63:22:B3:90:11:1F:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB60004318D11F08C250A7EDAE4EC9C.roa
Signing time: Thu 15 May 2025 13:06:33 +0000
ROA not before: Thu 15 May 2025 13:06:29 +0000
ROA not after: Sun 15 Jun 2025 13:06:29 +0000
asID: 54801
IP address blocks: 154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98540 (0x180ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:06:29 2025 GMT
Not After : Jun 15 13:06:29 2025 GMT
Subject: CN=6825e6d9-bb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:e0:bb:69:ca:b2:e9:5a:bc:b2:9f:85:36:
a9:90:4b:6f:c0:dd:79:50:8a:08:bd:97:98:fa:04:
84:44:07:4f:ad:af:0d:9d:40:64:d7:01:66:fc:36:
a4:02:3b:0a:81:34:23:5a:38:ce:3e:71:13:71:4a:
19:8b:ff:bb:96:66:ed:9d:8a:97:35:d4:22:59:41:
09:79:5f:73:64:bc:fa:90:d6:ad:4b:ec:2b:2f:08:
92:8f:69:31:d9:12:3a:24:5d:97:0d:ae:2c:86:d9:
bd:e3:0f:ad:f9:10:54:b1:56:e6:6f:e0:e7:fe:1f:
36:a2:f7:bf:62:ee:2b:f0:85:d1:e9:fb:d0:48:c2:
c7:0a:47:3e:4d:e7:64:1b:fd:ba:d9:61:b3:99:4a:
cd:76:f5:5a:89:a9:71:04:95:9f:23:49:4b:e0:f1:
e4:62:d4:46:ff:5a:2b:8f:7a:c5:fc:6a:ef:96:fe:
9b:3c:6f:72:2f:3d:d3:fb:21:65:87:e1:9c:26:c8:
3b:e8:65:05:21:24:7f:4e:10:96:2c:bc:67:a5:f0:
c2:05:fe:72:32:b7:fb:96:ca:c0:b9:db:66:ac:f8:
9a:9b:08:09:13:25:9f:e6:7e:49:29:f7:04:8a:fe:
18:ef:ed:f3:1b:77:b5:3f:d5:62:d0:b2:0d:0e:e6:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:64:CB:34:A5:A2:FD:95:3D:91:3C:C3:63:22:B3:90:11:1F:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB60004318D11F08C250A7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:dd:06:da:97:7f:d3:55:a4:d9:30:70:d7:0c:5e:19:12:cc:
48:f5:7b:9b:59:a5:5e:14:8b:1e:98:6c:5b:d4:23:f9:f7:1d:
6d:36:33:38:bb:26:2b:5f:d9:94:36:03:92:89:71:a2:40:a5:
2c:cc:e9:81:a8:8e:cd:1b:09:5f:08:07:e1:55:bb:52:9a:4a:
fd:8e:71:ee:70:b2:9e:df:85:07:02:65:75:4f:f0:46:bf:83:
92:3f:21:96:24:3a:40:68:3f:61:88:4c:66:80:a2:89:93:a4:
2b:d4:73:15:2d:b6:81:da:f7:5a:b5:3e:6c:8f:96:be:7a:10:
99:47:82:f3:7d:a8:40:0a:67:c6:ac:4d:96:a2:f9:38:da:19:
03:ad:ed:7a:0c:6a:ac:51:42:44:b3:6e:0c:8b:b6:1d:be:d2:
7d:f1:4a:33:40:00:f7:b2:97:38:8e:5a:9b:33:5b:a7:ac:64:
b0:82:f2:c6:68:9a:c9:c2:21:70:5d:0e:76:2a:0f:76:b1:d3:
ec:ee:2d:2c:cf:76:e2:07:67:08:d8:56:42:2b:f8:91:ae:e1:
98:d9:eb:6e:03:8c:c1:f6:2b:87:12:e8:bc:cb:2b:1f:50:31:
5e:d4:8a:4d:73:04:de:7e:d4:95:c9:b9:34:23:dd:33:90:d5:
ca:e6:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:57:06 2025 by rpki-client