Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFB670744EA811F0BDE646F1DAE4EC9C.roa
File: DFB670744EA811F0BDE646F1DAE4EC9C.roa (raw, json)
Hash identifier: F1BsKpDY+mB4qXUzGo8IZxEcUByzutKBf1KcT4mwunM=
Subject key identifier: 9D:1B:05:88:4A:F6:C3:95:C2:BE:52:75:40:42:83:09:96:A9:3A:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFB670744EA811F0BDE646F1DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 14:06:06 +0000
ROA not before: Sat 21 Jun 2025 14:06:02 +0000
ROA not after: Wed 30 Jul 2025 14:06:02 +0000
asID: 133180
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100316 (0x187dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 14:06:02 2025 GMT
Not After : Jul 30 14:06:02 2025 GMT
Subject: CN=6856bc4e-f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:4d:d3:10:23:9a:05:13:fe:01:83:ba:f4:
b3:fc:45:01:df:3a:69:fb:f6:63:91:b4:c2:94:e0:
1c:d1:c9:2c:b8:29:bb:0a:ba:91:f6:63:9d:20:84:
f6:df:ea:3c:fa:40:e5:71:cf:dd:e3:55:9a:19:d0:
b3:15:af:32:79:c9:c8:3a:fc:65:87:09:38:89:e9:
2b:23:83:9f:07:d4:4a:f3:9f:3f:8c:e9:ef:3e:32:
a2:d8:81:9b:7d:8c:4d:a9:d1:1a:8d:31:b1:f1:5f:
5f:92:11:3a:2f:20:81:6e:76:af:21:da:db:b7:49:
c1:f6:2b:fd:89:fa:23:df:cd:d0:55:ea:0d:3e:15:
3d:3e:7a:64:73:4d:84:79:d9:1c:ef:37:e1:56:0f:
59:80:c4:98:51:ce:5e:58:d8:67:87:a4:46:08:80:
d0:44:b1:b2:01:d1:d2:37:73:3d:1f:3f:48:1f:bf:
ce:e9:30:e0:9b:60:51:e3:28:c0:73:a0:d7:5f:e2:
d0:65:e3:23:d7:2f:01:f0:a7:3a:65:08:c8:ad:dc:
bd:70:2b:fd:0f:5a:bb:0b:e9:c4:ad:cd:4d:9c:d4:
d8:1e:54:ce:fa:2d:b8:0c:eb:25:45:4b:d3:9c:09:
70:7b:e5:ba:af:0a:70:af:9f:d4:c8:01:a5:8c:55:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:05:88:4A:F6:C3:95:C2:BE:52:75:40:42:83:09:96:A9:3A:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFB670744EA811F0BDE646F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:db:14:b3:35:89:98:62:94:8a:cf:30:fc:91:ef:45:24:61:
75:99:b0:68:80:e0:6b:b9:1f:c6:01:6c:76:9a:01:ed:0f:65:
79:86:d9:83:33:49:72:30:f5:48:bd:f2:e0:90:ea:2e:e1:ca:
1b:d9:25:15:09:eb:bb:8c:d6:57:25:79:f1:11:a1:f9:36:e7:
55:a5:7e:95:a5:7e:62:06:a6:94:20:01:c2:5a:b1:fa:93:2d:
98:ad:0d:30:7c:9c:f1:79:a4:fe:db:b3:31:c2:70:97:41:ff:
b1:cd:77:75:b2:25:ca:eb:22:e8:b0:0b:12:57:c2:be:16:56:
24:b0:ba:4f:29:5d:85:ee:71:e0:24:5a:c7:dd:2c:0a:72:ec:
9e:d6:0b:af:1d:0b:1f:cd:3c:30:13:25:9a:cb:9c:29:7d:65:
13:f5:c4:17:f3:ec:1f:9d:78:b1:9b:0c:78:39:7e:78:41:05:
b3:13:77:56:65:35:5d:ad:74:f0:1b:2b:4c:b5:d5:d9:21:f9:
15:8d:a7:73:e7:d2:f5:42:05:3b:e3:4f:55:8c:96:30:10:02:
2b:2e:5e:7b:83:28:c8:57:1e:6b:eb:f0:3c:0f:2e:43:89:5f:
cc:a6:78:00:b3:3d:88:07:df:15:93:4d:0d:01:e7:b3:9e:fc:
c5:23:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:37:54 2025 by rpki-client