Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BCC022E243E11F0ABA469EBDAE4EC9C.roa
File: 8BCC022E243E11F0ABA469EBDAE4EC9C.roa (raw, json)
Hash identifier: /fF858Bl+hyQnIYAUqglVxDQdr9Rw6ft7DUBARCEiBI=
Subject key identifier: 94:84:B1:4B:08:61:12:08:1B:B4:5D:57:46:8B:F2:A8:7C:1C:FE:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BCC022E243E11F0ABA469EBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:39:10 +0000
ROA not before: Mon 28 Apr 2025 14:39:06 +0000
ROA not after: Mon 27 Mar 2028 14:39:06 +0000
asID: 17561
IP address blocks: 154.95.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97297 (0x17c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 14:39:06 2025 GMT
Not After : Mar 27 14:39:06 2028 GMT
Subject: CN=680f930e-6954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:f2:5e:c0:c6:5b:ab:d5:45:1b:70:6a:51:
c7:6b:5a:ea:38:11:28:30:e9:85:df:a5:20:84:e0:
86:c3:1e:04:73:71:3a:52:04:47:8f:94:ed:d9:6a:
82:6b:49:5d:d0:fd:37:7f:9e:80:38:4b:10:ae:69:
3f:58:17:2e:cb:4e:a9:81:23:8e:a0:bf:d6:c4:85:
8b:d3:1f:5c:de:0b:96:e3:81:94:a0:dd:ff:9b:ec:
2e:74:49:98:a0:49:2d:1a:1d:2f:8e:fd:67:68:5c:
26:c0:16:c2:e4:da:34:9e:80:89:e7:5e:d8:56:22:
1d:08:a9:1e:c7:69:be:7b:a0:aa:1b:4f:ef:b4:2b:
3e:06:6d:33:1d:4e:6b:46:95:f4:97:21:c3:8d:70:
da:71:96:9d:a9:df:36:b3:f0:1e:23:ac:78:17:34:
5b:b3:0f:60:ba:ff:86:47:74:ee:d2:66:e4:a7:cb:
eb:c7:48:45:16:2b:21:77:6f:36:12:79:29:b4:93:
8d:cc:20:92:ca:e3:0d:1f:54:0d:67:b2:e2:69:75:
3c:a4:a4:a2:87:b8:9d:56:f5:6b:63:7c:80:e0:4e:
d4:7b:83:31:6d:ec:3f:78:c7:68:91:55:f4:73:23:
d3:e8:28:e2:b2:c0:bf:4d:1b:1a:f5:c7:96:7f:a4:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:B1:4B:08:61:12:08:1B:B4:5D:57:46:8B:F2:A8:7C:1C:FE:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BCC022E243E11F0ABA469EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/24
Signature Algorithm: sha256WithRSAEncryption
31:be:e6:cf:e4:92:af:be:37:34:f7:db:b3:48:57:40:e7:e6:
9a:08:41:f4:0c:73:ca:3c:ce:23:5d:a4:87:85:1a:c5:b1:50:
a9:ac:b6:cb:3f:3f:fe:af:a7:04:99:65:18:1c:f0:83:c8:6f:
27:10:f5:32:4d:7e:8c:e4:06:03:c2:a5:36:f0:f5:f8:e1:66:
e2:45:bd:86:54:74:eb:6d:ff:8b:35:da:a6:cf:2e:da:dd:a2:
70:ae:68:9a:e0:2f:7c:77:53:b7:e2:d3:5b:77:e7:5a:cd:05:
40:1d:b2:fd:6a:75:f0:70:b5:8d:4a:41:01:b8:d9:a9:e7:64:
17:39:d0:58:d9:b5:08:b5:ae:87:19:7b:c4:27:a3:42:70:b7:
4c:b0:35:43:f3:eb:ac:53:16:31:6a:e9:43:59:16:7d:22:02:
db:f1:d0:e7:66:6a:1c:39:aa:41:c9:d4:a9:74:bb:5a:0f:90:
9d:b3:58:14:6a:6a:aa:77:ac:ef:2e:06:6e:4a:26:37:2c:da:
76:fb:d9:58:38:fe:20:4d:d8:89:13:4e:74:fc:0a:be:8b:36:
2f:10:82:6a:23:2d:d7:6b:e7:ff:af:82:78:37:54:00:be:a4:
23:a7:08:c2:0f:c2:e5:ef:3b:1e:55:1a:dd:b5:05:44:b7:85:
56:27:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:42 2025 by rpki-client