Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E729CE43A411F0B009A6A8DAE4EC9C.roa
File: D2E729CE43A411F0B009A6A8DAE4EC9C.roa (raw, json)
Hash identifier: 0TXFPXzEXL+qI5SwdbrcqW9GF9/ldIuRsBLqXH9Ud7k=
Subject key identifier: FF:78:DE:65:42:27:F3:4A:3B:F6:C4:C6:DD:5E:F3:B6:E6:BA:4A:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018566
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E729CE43A411F0B009A6A8DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 13:39:24 +0000
ROA not before: Sat 07 Jun 2025 13:39:20 +0000
ROA not after: Mon 14 Jul 2025 13:39:20 +0000
asID: 20473
IP address blocks: 154.197.54.0/24 maxlen: 24
154.197.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99686 (0x18566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 13:39:20 2025 GMT
Not After : Jul 14 13:39:20 2025 GMT
Subject: CN=6844410c-8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:cd:bf:f5:43:e9:90:85:c8:53:e7:27:8e:
63:21:e7:e1:b9:f9:bc:c5:1d:ee:f9:76:aa:76:2a:
37:ac:bd:64:2a:af:a2:78:96:a3:3a:d4:a2:be:1e:
22:9e:d0:e4:7c:95:7f:67:45:6e:b6:05:13:92:d9:
a1:99:d1:a7:28:19:61:b2:83:30:b4:7e:da:2b:20:
6a:81:bb:7e:81:64:ca:3f:27:69:94:db:25:18:f2:
2e:7d:85:51:5e:28:80:ff:d4:03:51:cd:9a:93:ce:
45:78:f8:82:da:4f:2a:6a:e8:12:a6:ae:26:6e:b0:
87:89:05:6d:84:4e:04:e4:a6:b2:12:8b:e8:46:12:
23:8c:bf:b0:5b:d2:03:d7:6c:d6:bd:57:9c:07:04:
c1:61:4b:8a:24:0c:aa:9a:92:9d:62:73:00:72:af:
0c:e1:54:09:d5:1f:2e:9a:d1:32:8d:12:15:72:71:
36:80:e9:46:61:eb:55:e5:a2:9e:dc:ac:0e:58:3f:
7b:77:56:24:41:df:f0:0f:b4:6d:4b:05:b8:40:5f:
f2:02:ba:51:8b:f6:55:83:19:0e:0a:fb:41:b5:f9:
37:3b:28:9d:b6:e4:b3:c9:8e:e2:8f:9b:24:bc:88:
5f:6e:bf:3a:10:b5:9b:d1:bc:ce:7f:22:94:a3:8a:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:DE:65:42:27:F3:4A:3B:F6:C4:C6:DD:5E:F3:B6:E6:BA:4A:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E729CE43A411F0B009A6A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.54.0/24
154.197.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:08:69:3e:04:67:07:ad:af:66:8a:67:e5:99:96:22:8a:5a:
74:c9:ae:88:62:e2:87:9a:6b:43:38:f7:fe:3c:75:56:53:99:
ff:17:69:b4:bf:ef:e3:8e:e7:cf:81:18:51:d8:a4:e1:c6:76:
dd:77:50:bc:a9:9b:b7:4c:91:68:37:0e:5d:e6:95:f5:b3:1d:
7f:31:18:ae:98:4a:3d:14:be:4d:0b:26:fc:a5:20:06:8b:1c:
01:94:36:38:a8:0b:98:d5:cf:6e:10:60:95:0c:cc:a1:83:19:
8e:c9:bf:2d:22:18:e6:1f:99:62:06:cd:52:c9:0f:f2:5b:de:
79:28:3c:3d:f4:29:dc:b8:03:fb:43:ee:56:69:44:c9:9d:16:
e1:63:0e:7c:50:8a:01:cb:23:85:25:68:04:84:78:ab:79:5a:
6b:bd:b9:6f:bc:90:17:fa:e8:98:3a:59:a0:b6:9f:40:91:9a:
58:c9:62:c0:63:0b:bc:a4:9b:0d:d7:da:1c:f3:ee:9e:49:35:
75:2b:a9:fd:a6:f2:13:5e:89:fc:75:20:64:66:b8:3b:82:e6:
6c:c0:6a:bc:df:9f:d5:3b:88:f1:23:cb:6c:df:c6:b9:fa:c6:
35:3f:81:53:d6:07:f3:be:15:c3:54:fa:49:d0:e0:6b:6b:eb:
35:ab:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:39:06 2025 by rpki-client