Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8A5A802FF011F080DB92B4DAE4EC9C.roa
File: BF8A5A802FF011F080DB92B4DAE4EC9C.roa (raw, json)
Hash identifier: WD/Yc21KgWQlrnoIxKf2i4jRZoz2ms2uOsWMlXu7E+c=
Subject key identifier: 94:8E:E9:FA:CD:8B:A9:A2:42:BA:5F:FE:D9:7D:45:52:0E:54:BA:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01805E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8A5A802FF011F080DB92B4DAE4EC9C.roa
Signing time: Tue 13 May 2025 11:52:30 +0000
ROA not before: Tue 13 May 2025 11:52:26 +0000
ROA not after: Sat 16 May 2026 11:52:26 +0000
asID: 140951
IP address blocks: 154.193.186.0/23 maxlen: 24
154.196.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98398 (0x1805e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 11:52:26 2025 GMT
Not After : May 16 11:52:26 2026 GMT
Subject: CN=6823327e-7e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:fa:77:dc:c2:9b:18:ad:a0:5e:c9:aa:ac:
2e:44:74:83:74:b8:05:d1:f6:fc:4a:e0:d8:57:bb:
54:0d:0c:91:bf:6a:a2:f2:4d:24:bd:76:d7:64:dd:
da:b9:05:62:2e:5e:94:b8:4e:5a:42:7e:64:52:f7:
c8:c5:b7:19:7a:73:1e:24:67:57:82:d8:53:03:9c:
83:76:bb:ce:e8:93:54:e8:9c:f0:da:f8:99:03:c5:
1e:b1:ef:e6:4e:36:e3:25:62:43:2d:6b:8a:61:57:
40:2e:f4:9a:c7:d8:06:a0:e4:d6:42:8b:a9:a5:85:
df:f8:6f:8e:3d:cd:55:d6:28:e1:49:92:dd:bd:40:
20:de:45:98:a0:07:8e:ad:14:23:6a:a6:fc:60:4d:
bd:4d:a2:b7:09:03:3d:ae:9b:0a:d1:3a:63:c4:18:
91:de:34:16:b5:69:39:c8:e1:f4:7f:d1:82:a6:7d:
b9:d5:bb:fa:c2:57:53:2a:4e:ad:7f:75:f3:aa:31:
5e:9f:87:e1:cd:50:c9:f6:fe:a6:1f:ed:83:7f:37:
ad:ee:f1:99:11:49:5e:6e:ed:5a:51:1e:8d:a3:cf:
21:bd:b6:9d:bb:8c:85:49:c6:d6:62:fc:71:76:d2:
4d:48:b3:83:9f:cc:0c:c3:ff:73:e2:d5:a0:90:a6:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:E9:FA:CD:8B:A9:A2:42:BA:5F:FE:D9:7D:45:52:0E:54:BA:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8A5A802FF011F080DB92B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.186.0/23
154.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:57:76:23:b9:77:c6:56:87:44:e7:61:1f:44:22:1b:ed:6b:
45:20:14:d0:ab:91:98:c2:af:c4:f3:0d:19:b8:4b:2f:f6:fc:
a7:1e:98:60:42:68:5f:9d:b3:fe:a4:ab:f7:6e:13:b6:07:61:
14:53:7a:25:85:89:7b:b4:6c:67:50:1e:7f:bf:c5:e5:50:66:
44:31:bf:84:d1:8a:ad:de:2f:d9:9f:86:05:42:28:3b:1e:50:
e2:12:7c:78:69:0d:4f:1f:21:ac:c3:1b:10:b0:a9:9e:b3:1f:
31:80:5c:4e:61:af:d9:77:24:2b:2b:ca:2f:5e:44:07:97:c5:
36:8a:4a:b6:e3:47:8e:24:37:f3:74:eb:a0:e6:9b:65:81:c8:
74:63:b8:1f:ac:6e:a4:69:86:e9:0a:44:00:27:00:e0:56:76:
6f:a6:51:3a:e0:6f:55:a6:fa:0d:e9:09:a0:9a:65:49:97:ca:
2e:0f:76:27:00:11:5f:1f:10:48:34:5c:be:bd:63:2b:d6:82:
76:3d:cc:c5:eb:58:69:1d:27:99:9b:1f:ec:4b:77:14:a6:93:
1d:af:76:85:5b:f0:44:3c:ed:70:85:85:1c:54:43:6e:23:0e:
a4:e2:90:ba:0a:69:1f:d3:04:d6:02:b2:b4:cc:4c:47:65:03:
cd:d2:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:44:53 2025 by rpki-client