Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA600ACC4B6011F09114F789DAE4EC9C.roa
File: DA600ACC4B6011F09114F789DAE4EC9C.roa (raw, json)
Hash identifier: hkK3q7Fgdj9gWnOvlTbizrepTA6bL/J3bB609I8XGqs=
Subject key identifier: 99:18:C1:4D:F5:07:6F:C8:E4:26:92:01:1E:D3:C4:06:70:B6:AF:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA600ACC4B6011F09114F789DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:53:01 +0000
ROA not before: Tue 17 Jun 2025 09:52:55 +0000
ROA not after: Tue 16 Sep 2025 09:52:55 +0000
asID: 4515
IP address blocks: 154.194.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100088 (0x186f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 09:52:55 2025 GMT
Not After : Sep 16 09:52:55 2025 GMT
Subject: CN=68513afd-2c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:ea:a2:d7:3f:01:2a:f5:34:a7:f0:da:33:
8e:ea:a7:b6:3a:38:ea:ea:71:9b:10:ad:cf:c6:fe:
47:77:c9:37:78:1b:e8:e6:58:91:e9:12:5d:c9:44:
4a:55:27:74:59:63:46:a5:59:78:be:a4:a9:7a:8c:
de:0b:d8:a3:85:c4:96:1f:e2:64:98:6d:fc:72:ae:
bd:36:40:69:fe:60:20:76:46:a7:59:be:11:c4:5e:
12:e1:51:d1:f2:23:7b:a0:d7:57:74:2b:c1:6b:68:
fc:65:e8:dc:9f:a6:a4:e4:7d:5c:67:d7:ac:b6:05:
46:d0:29:34:66:18:15:48:cf:50:4e:8c:ae:3e:d9:
85:bc:eb:99:9f:8c:bc:91:dc:74:10:58:dd:73:2c:
93:b6:95:06:b3:cc:b6:cd:de:98:b4:99:24:77:78:
19:5f:db:d4:ea:60:67:26:59:24:be:f4:38:64:02:
fa:2e:bf:d8:e0:55:0b:80:c2:6b:7a:7d:50:61:fe:
c1:6e:94:9d:f1:75:27:33:84:20:19:ed:66:ff:dc:
5f:3d:8d:de:ee:e0:48:41:6b:2d:ce:1d:9d:63:2b:
ab:90:37:a0:49:05:64:06:36:fb:be:c1:24:8e:11:
a4:e7:56:03:36:85:4e:39:56:3c:4b:74:b2:4d:77:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:C1:4D:F5:07:6F:C8:E4:26:92:01:1E:D3:C4:06:70:B6:AF:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA600ACC4B6011F09114F789DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:6d:67:9b:28:bb:f5:c6:75:bf:02:0e:98:6b:b1:29:ff:46:
bb:70:e1:5f:5a:14:f9:77:a8:7e:04:31:72:cc:1a:9c:18:a4:
9b:5c:67:24:ce:ca:19:03:e9:b2:3e:99:0a:bf:93:cd:d1:c6:
f4:57:9d:38:d6:db:29:97:cf:0e:9e:8e:6d:34:f7:66:ab:de:
f1:74:8d:f6:9b:3f:24:72:93:70:8c:e0:2c:98:fb:1c:91:95:
fc:e9:dd:d4:8a:de:9c:c7:23:6f:4b:de:5a:0c:29:7e:3d:ad:
c0:0f:01:dd:7a:c0:3f:8c:fb:e6:de:35:0f:4b:81:9e:94:86:
b4:bb:53:ac:85:5c:50:73:af:9a:0b:fe:c3:5a:34:77:e5:b7:
3f:21:80:c6:2d:fc:76:a0:14:be:98:db:47:47:b5:42:e2:a3:
de:70:eb:33:2a:03:7c:39:13:14:86:11:ba:99:f4:21:19:78:
d5:28:f6:9e:8f:2e:a0:56:df:66:3f:75:13:43:bf:65:08:56:
62:7f:46:af:ca:2d:c8:80:f5:a0:95:b5:e1:0e:71:ea:de:0d:
bb:8b:48:4b:a6:23:06:7e:01:dd:34:cb:4f:99:3e:bb:c8:6d:
a1:54:7f:5c:28:7b:89:00:46:fa:8d:d6:8a:51:35:70:4f:e7:
14:5a:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:32:23 2025 by rpki-client