Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F9384E574311F09E9407E1DAE4EC9C.roa
File: 84F9384E574311F09E9407E1DAE4EC9C.roa (raw, json)
Hash identifier: +E9IYvlCLHRM6fvC0i6PjMjJnM9L6iNg1vHhLppKJuA=
Subject key identifier: 05:4C:BC:42:A3:B0:C0:A2:3D:9A:0D:DA:EB:AE:85:20:C4:14:9A:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F9384E574311F09E9407E1DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:53:16 +0000
ROA not before: Wed 02 Jul 2025 12:53:11 +0000
ROA not after: Sun 24 Aug 2025 12:53:11 +0000
asID: 40065
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100798 (0x189be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:53:11 2025 GMT
Not After : Aug 24 12:53:11 2025 GMT
Subject: CN=68652bbc-13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:1e:61:88:97:23:df:c4:3b:03:de:9e:d3:
8b:1a:7c:cf:2a:52:24:90:fd:b3:1c:50:fb:53:13:
ce:fc:f5:49:8c:45:20:b6:48:c3:64:b1:c5:00:79:
fe:bc:27:58:5c:be:11:1a:9e:32:17:f2:38:de:5b:
18:05:1c:9a:05:97:de:67:9c:d0:a1:23:30:f1:9b:
59:6a:16:3a:8d:e9:9f:f5:6c:22:42:d1:6f:cd:c5:
23:7a:91:46:43:01:74:39:0a:5d:52:c4:78:bc:5d:
de:a7:e8:fa:34:0d:29:7d:d5:6e:42:96:70:f6:c0:
43:d6:30:f7:ee:cf:b8:62:96:d7:92:31:45:4b:6d:
ba:8f:8b:4b:7c:9f:30:a9:88:16:9e:31:2e:78:e6:
d6:b6:7b:51:d8:41:05:9d:08:4c:66:2d:fe:7b:08:
0a:6b:c7:5b:0b:77:37:aa:23:27:d2:71:7a:8f:f6:
94:7d:a7:bb:bf:4d:2f:0c:41:fc:91:f0:19:f8:6a:
f4:cb:0a:09:67:bc:27:b6:88:7b:41:d0:94:fd:91:
d6:98:43:bc:0c:55:1c:5e:13:ad:70:2c:66:c7:36:
a5:fc:d1:58:41:00:96:12:56:7e:20:33:40:cc:96:
cc:7b:3b:0c:ba:04:77:9e:bb:3b:3b:b5:46:3c:32:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:BC:42:A3:B0:C0:A2:3D:9A:0D:DA:EB:AE:85:20:C4:14:9A:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F9384E574311F09E9407E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:a8:e4:ae:70:92:fe:f2:23:80:40:cd:19:fd:d5:8d:9f:20:
68:09:e1:c2:aa:d6:51:c4:ce:ae:a1:27:eb:01:fd:1e:40:dc:
66:2e:17:2a:25:99:0d:e7:a9:d6:7f:8f:40:d0:f3:a5:b8:27:
66:54:4a:60:cf:32:15:96:00:d6:43:0c:b1:85:6d:b5:29:89:
20:e1:6f:c4:24:9b:34:20:6a:7d:a9:b6:c7:58:e1:71:2c:5a:
49:db:10:86:37:77:ad:01:7a:95:38:9c:a1:a8:ae:22:26:d5:
40:ce:0c:30:ba:39:05:b9:6e:46:05:4b:6c:1a:97:e1:1b:76:
70:72:e8:de:55:8b:70:d1:1b:da:a6:02:71:25:23:11:21:67:
71:e0:c6:e2:e5:18:26:15:06:6e:a9:12:58:ad:46:24:4d:e3:
05:f0:a1:09:c8:b7:ee:55:07:ed:e5:b7:a8:bb:c8:a5:a7:16:
63:e8:b5:d0:f3:01:17:02:53:cb:45:26:f9:89:94:4e:5f:f8:
de:69:c8:e3:50:b1:b1:73:ca:f9:5b:63:4c:0a:82:6a:cb:4b:
41:97:a2:24:40:1f:93:24:81:db:23:e1:2d:b1:e6:9c:72:b9:
d3:a6:17:d9:f7:2f:e9:16:fe:67:d8:44:c5:94:0b:2f:87:4a:
c2:67:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:08:08 2025 by rpki-client