Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F6290449DF11F09AD079BFDAE4EC9C.roa
File: 93F6290449DF11F09AD079BFDAE4EC9C.roa (raw, json)
Hash identifier: Wm+AReaFrix5Mks29lp00EfW/DIS7OVnJs67XRcJmME=
Subject key identifier: 5A:BD:0F:CC:0D:0C:57:01:AF:E1:30:53:86:33:BF:20:75:6A:C9:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F6290449DF11F09AD079BFDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:55:06 +0000
ROA not before: Sun 15 Jun 2025 11:55:01 +0000
ROA not after: Fri 25 Jul 2025 11:55:01 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100047 (0x186cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 11:55:01 2025 GMT
Not After : Jul 25 11:55:01 2025 GMT
Subject: CN=684eb49a-4942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:34:11:8a:af:b9:27:82:ea:e2:86:56:26:
cf:66:12:5e:d6:28:9c:9f:c7:f9:f7:ce:2d:20:29:
2f:61:ee:44:84:2c:2f:e5:d7:f1:09:67:8c:d4:82:
fe:d1:92:89:44:78:ff:f8:a7:ea:86:80:46:85:90:
c7:97:19:9e:78:43:f2:60:f2:76:f1:82:0f:ac:19:
43:d1:6e:8e:31:a4:3e:f2:a4:1a:5e:fe:1c:ed:33:
f0:2c:78:79:73:dd:bf:16:6f:b7:cb:6a:98:9c:53:
6c:5e:2e:87:c8:a8:f1:31:70:87:07:1b:09:4e:a7:
37:cd:3c:25:91:8f:96:35:51:5f:06:d6:03:8e:8b:
f1:5e:49:5e:19:c7:8a:bc:18:8f:f3:2e:47:61:75:
f8:ea:0f:81:73:f0:a7:3a:4a:2a:1a:8b:ef:72:e2:
1c:ee:72:5a:2f:1e:25:99:ae:31:1c:aa:45:d8:e1:
38:cb:1e:df:2e:a9:70:62:1f:a2:47:72:0d:42:47:
f3:12:18:81:09:15:c7:c4:84:3f:c6:07:f0:74:90:
56:79:d8:4a:bf:5b:0f:2c:42:d7:18:db:23:76:57:
99:e6:7d:74:d3:8f:24:b0:bb:c2:f8:ea:41:65:6d:
4c:62:75:3a:eb:bb:41:19:21:ca:93:1f:7c:e5:00:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BD:0F:CC:0D:0C:57:01:AF:E1:30:53:86:33:BF:20:75:6A:C9:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F6290449DF11F09AD079BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:53:df:53:bf:ff:c6:cb:ad:69:38:fc:8a:38:8c:ee:1d:fa:
43:e7:b2:d3:32:a1:03:14:34:ab:8d:3f:b8:58:96:1d:c4:11:
94:6e:0c:e5:7a:b6:f0:99:cb:0c:a3:8a:e3:ee:90:07:e9:00:
be:ce:d3:be:40:51:7a:06:d8:a9:c3:40:f6:a6:c5:af:33:7f:
01:38:6d:69:c5:dd:34:25:55:ca:78:15:ab:4a:fb:36:2c:35:
6a:c9:45:c2:17:37:f6:b1:50:62:0e:60:b7:0f:ae:74:23:39:
04:ae:62:7f:1e:54:f4:bd:11:f2:70:8a:96:97:cb:7f:22:d7:
3a:4f:84:7d:e0:2a:d9:b2:08:0c:5c:fa:c4:3a:86:7e:50:77:
57:79:92:77:af:96:96:c3:ff:b9:08:27:21:45:99:8c:2d:39:
0a:c6:21:3b:23:04:98:9c:78:3b:77:4e:49:2c:ba:fb:23:49:
23:99:27:b9:44:12:20:d9:30:94:10:ff:53:36:d6:ec:77:30:
ec:9e:98:ee:a7:51:dc:43:b6:05:7a:ad:9b:12:e6:b4:05:0e:
e0:4b:9a:d9:dc:11:b9:3c:50:a8:17:80:a0:e6:e8:c6:ed:fe:
57:ec:2a:8f:72:5a:6d:ec:26:08:60:42:a6:31:e6:7d:1c:17:
07:90:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:15:35 2025 by rpki-client