Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C87158C42DD11F0904E8D9ADAE4EC9C.roa
File: 9C87158C42DD11F0904E8D9ADAE4EC9C.roa (raw, json)
Hash identifier: I95HtW4kEpYL9R18H2mBkCAo+1lu1kUMIHvub9dJvvg=
Subject key identifier: 3F:A1:6D:CF:5C:E9:09:3C:0B:8E:79:9F:E0:9F:76:5A:C0:18:94:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018530
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C87158C42DD11F0904E8D9ADAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:53:23 +0000
ROA not before: Fri 06 Jun 2025 13:53:19 +0000
ROA not after: Thu 17 Jul 2025 13:53:19 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99632 (0x18530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 13:53:19 2025 GMT
Not After : Jul 17 13:53:19 2025 GMT
Subject: CN=6842f2d3-7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:04:9b:bc:2c:9e:5f:2a:5a:5f:e5:fa:7d:
fa:ed:c6:c2:04:9b:1a:d8:7b:13:34:c9:55:6d:b8:
7f:53:2d:7d:94:d0:06:20:65:95:06:31:bf:aa:d8:
f2:bd:56:4e:e7:fa:9c:71:c0:dc:8b:4e:c9:63:cd:
96:1e:47:3f:58:51:6d:5c:49:20:73:a9:c0:8d:e9:
9e:64:a4:cf:b0:46:a9:cc:2d:62:74:a8:b8:5e:f2:
ed:cf:fe:ce:0e:80:d5:fd:d4:d2:ee:f4:2a:2a:94:
db:12:a0:c8:a6:da:54:a1:40:cb:21:d3:0c:57:fe:
80:0e:02:dc:70:95:3f:9a:8d:5e:b5:7c:1e:52:98:
8d:d0:98:59:1a:8e:94:b3:0e:54:d9:75:15:4e:75:
c6:7d:4b:e6:ea:48:f1:ee:57:6d:8c:27:0b:5c:9e:
57:0d:25:b4:88:f7:05:0a:59:2a:69:55:ac:a4:b1:
a2:50:94:98:e3:1e:0a:53:41:e7:04:47:b3:a1:e2:
14:1b:55:fd:b9:55:49:f2:12:c1:06:45:ee:e8:9c:
d2:96:4f:fc:69:45:24:83:e6:1b:c4:2f:b8:c4:09:
e4:50:0b:c1:1c:f4:e2:57:d4:ce:7f:29:88:34:a4:
cf:d5:54:dc:d6:84:dd:16:73:f3:69:bb:df:54:02:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:6D:CF:5C:E9:09:3C:0B:8E:79:9F:E0:9F:76:5A:C0:18:94:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C87158C42DD11F0904E8D9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c5:05:db:0b:94:00:66:1b:73:7b:59:17:ff:48:42:4c:4c:
db:8f:c3:4a:05:d2:88:95:5a:ef:ed:88:0a:c2:0b:da:4f:0c:
14:3c:35:a5:cf:06:30:67:e7:7a:bc:ec:85:60:dd:43:27:a5:
64:de:c2:87:c1:b2:a6:cc:8a:43:42:42:23:83:ec:4e:79:ef:
6f:9d:d9:d6:f6:3e:8c:ec:f2:9c:35:d4:bc:87:73:e1:69:16:
72:49:ed:b7:02:a6:ce:d8:54:87:58:e5:7f:31:73:0c:29:6e:
a0:59:30:6b:e7:3f:75:e8:32:6c:41:ff:5a:e7:c4:03:31:18:
f8:ec:c9:8e:15:e1:c6:65:72:d0:6a:82:fc:95:7a:1f:bf:87:
d0:16:46:97:bb:43:67:09:ba:2d:8b:6f:78:7f:6a:f2:33:ef:
c5:8d:d0:da:eb:d0:0c:7d:56:58:e1:ce:03:89:ce:50:53:f4:
b8:d2:e0:22:15:60:7c:fe:a9:07:50:4f:af:11:56:0b:05:4b:
5e:ca:83:27:64:3b:16:0a:60:93:65:85:c3:c2:da:31:09:80:
1a:6b:89:b2:44:e8:79:97:8f:5a:80:b4:be:cc:de:b1:15:3e:
35:cc:84:0c:04:3b:ef:87:a2:28:1f:0a:19:ce:88:cd:2f:f1:
1f:e5:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:56:03 2025 by rpki-client