Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0648334058D011F08051957DDAE4EC9C.roa
File: 0648334058D011F08051957DDAE4EC9C.roa (raw, json)
Hash identifier: sRlSSKbJJ++NHsZWfGixMqQvEPx/R28iIpCo+lMEJlo=
Subject key identifier: 55:C7:71:DC:87:1E:CB:D2:E6:FF:8D:94:20:71:3D:D7:29:79:C0:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0648334058D011F08051957DDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:11:33 +0000
ROA not before: Fri 04 Jul 2025 12:11:28 +0000
ROA not after: Sun 10 Aug 2025 12:11:28 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100944 (0x18a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:11:28 2025 GMT
Not After : Aug 10 12:11:28 2025 GMT
Subject: CN=6867c4f5-de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:0b:ed:48:c9:fc:ee:db:6c:dd:5b:ea:0e:
db:6b:47:6e:a0:60:3d:d7:e7:b7:12:40:b4:d0:9b:
60:94:a5:d4:ad:d9:1f:75:14:ea:30:b1:a8:07:e7:
cc:3d:44:91:c2:1b:c4:2a:d8:62:21:89:c2:b9:c5:
06:aa:97:46:2f:9c:75:2f:b8:48:ab:fa:b4:ce:ce:
31:53:0f:02:57:45:68:c5:35:3b:7a:00:10:49:26:
36:11:17:f4:50:46:e2:d1:45:ed:75:2d:8f:d3:2a:
74:48:ef:60:3e:e0:e4:c2:7f:e3:a2:2f:90:8b:8a:
3e:5e:05:88:69:21:c8:4c:1d:2d:0b:d6:2b:81:70:
09:e2:42:14:b9:44:03:b1:95:c3:18:74:6e:fb:06:
b6:35:71:9f:84:e6:97:19:75:e6:3d:7b:ba:ec:17:
9b:a6:df:8a:7d:6f:c2:83:09:1d:ab:e1:6d:4f:80:
cf:21:64:63:96:18:79:5c:6a:f4:94:f7:0e:d0:97:
25:90:aa:63:9b:13:75:d9:0d:92:84:b8:7c:25:43:
c5:f6:52:44:42:64:c2:e1:78:6b:0c:ae:a8:2e:2f:
58:62:68:3c:71:99:23:f1:9e:b7:fb:21:97:ed:48:
ff:fa:f7:ed:6e:19:e8:f6:13:06:68:6d:85:4c:3e:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:71:DC:87:1E:CB:D2:E6:FF:8D:94:20:71:3D:D7:29:79:C0:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0648334058D011F08051957DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/23
Signature Algorithm: sha256WithRSAEncryption
36:4c:a0:38:08:ec:c2:49:37:27:7e:7f:80:f8:1e:50:92:2c:
be:33:68:4b:f6:aa:7a:34:fc:20:bd:ae:3b:df:39:50:1d:55:
0d:e2:aa:93:13:a3:41:44:34:6e:c2:ea:a6:9a:42:1c:ae:1f:
e9:45:a7:49:0f:50:47:42:eb:96:23:74:94:a0:c5:4e:e5:76:
99:23:99:2a:56:63:2f:b4:de:ea:1d:32:f8:2b:6c:ab:e8:91:
13:81:8a:28:18:f7:7b:20:ff:3e:c9:73:ef:3b:ff:28:30:73:
9c:00:17:ac:35:0d:69:ec:45:8b:1e:cd:d1:e1:ee:89:61:28:
36:14:9e:6b:75:f0:40:84:a7:ff:ba:c3:b6:dc:c2:57:f2:00:
fe:d1:c9:1a:29:70:7d:2a:ba:4e:80:27:e2:5e:d2:c1:3c:e6:
68:e5:97:15:85:88:ea:80:c6:0d:cc:fb:37:eb:84:14:8c:88:
0b:a9:c4:b9:aa:6f:a9:fe:b3:d5:04:32:9e:64:6f:74:25:a1:
d7:17:31:b6:12:93:10:f0:e8:c5:41:03:71:79:bb:4c:aa:af:
e7:38:56:b0:d3:e2:4d:d4:19:b2:0c:81:32:fd:40:28:5b:a6:
29:9d:e3:d6:7d:cd:67:2a:d1:49:4b:a3:25:ba:57:54:d3:38:
74:5c:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:05 2025 by rpki-client