Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15E82494617D11F08E7E9FCBDAE4EC9C.roa
File: 15E82494617D11F08E7E9FCBDAE4EC9C.roa (raw, json)
Hash identifier: 9A11CrytfbfuVSvcZV2NY4OYhrbU+SVd3G/YufFz2KA=
Subject key identifier: 58:39:E2:1D:71:81:0E:C5:46:6B:49:9C:BF:E9:F0:76:1D:50:5F:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15E82494617D11F08E7E9FCBDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 13:10:32 +0000
ROA not before: Tue 15 Jul 2025 13:10:27 +0000
ROA not after: Thu 21 Aug 2025 13:10:27 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101856 (0x18de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 13:10:27 2025 GMT
Not After : Aug 21 13:10:27 2025 GMT
Subject: CN=68765348-b7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:d5:10:a1:9b:df:6d:5e:78:16:79:b9:a6:
ef:62:78:41:ee:c5:5c:7d:e2:21:32:35:54:88:dc:
7d:02:2c:6d:38:84:69:9d:9b:97:67:18:7d:03:5d:
32:15:a8:4e:2c:da:db:17:cb:ae:a7:5b:c4:b3:3a:
1c:3e:5d:77:37:39:e7:b2:02:76:31:b0:7b:3d:cb:
d6:8e:fa:9e:af:6a:0c:aa:a3:ff:8b:70:6f:52:1a:
7c:96:56:c9:f8:4f:8d:2c:bf:bc:7c:ff:16:69:4d:
bb:18:ec:dc:54:58:d7:fa:15:79:54:f5:e1:c7:c0:
db:b6:09:04:8f:f3:89:45:fd:da:a1:21:c6:c1:4b:
3e:85:41:c9:57:1a:d3:19:8e:95:bc:f4:55:35:7c:
52:33:ef:8d:b5:3d:53:2a:db:17:d0:e4:99:07:d9:
0c:f0:9f:ab:d1:38:ad:cf:7d:fb:b5:d3:66:41:22:
d6:47:fe:69:bc:b5:01:81:fb:11:18:5e:50:81:68:
68:ec:b0:59:0e:98:91:78:ee:c3:ae:f0:c2:35:24:
0d:37:a6:58:ba:0f:ed:84:a0:6e:2d:c1:33:76:28:
45:bf:3b:e1:26:72:5d:af:ce:24:7e:be:7e:41:26:
9a:69:30:f3:ba:ba:d6:0a:bb:82:99:21:7c:df:0d:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:E2:1D:71:81:0E:C5:46:6B:49:9C:BF:E9:F0:76:1D:50:5F:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15E82494617D11F08E7E9FCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c9:d4:e1:21:d3:86:83:bb:e0:2c:8b:65:f3:35:31:7b:9a:
60:76:ad:db:f1:c6:09:78:bc:61:f9:1a:46:1f:49:1e:47:63:
45:ac:33:03:96:0e:46:c0:43:11:4f:49:6b:90:2b:32:ff:aa:
3e:4d:cf:74:2c:25:2f:6e:d7:94:49:42:e5:7b:78:25:3b:b7:
f3:e0:a1:24:63:30:91:db:39:74:a6:2a:32:37:09:20:ba:2c:
84:e8:f0:2c:6c:a1:f5:97:fb:d2:dc:a0:7b:a5:95:46:f4:a6:
33:95:6b:87:95:7c:9e:87:83:f9:56:42:ec:e0:75:d5:e9:41:
93:78:54:ae:18:5d:60:5e:23:2c:28:32:bc:85:60:da:82:60:
be:fe:b3:c3:7a:6b:85:44:d8:67:94:ca:68:17:c2:2d:01:f0:
6f:2b:80:c5:21:c2:63:05:dd:61:4c:51:55:1e:cc:33:4f:8f:
c1:a5:04:40:86:a0:ce:bf:57:24:d0:3f:87:20:5a:cc:90:04:
b9:ac:6d:7b:51:63:c7:87:f8:1b:a9:fa:ee:6c:03:c0:92:1d:
58:32:58:db:8f:63:fb:7f:b6:5e:57:37:9a:13:e9:ee:54:ef:
78:ab:3a:d8:6e:c0:b2:05:66:89:fc:d9:bc:df:84:39:29:fd:
5a:3b:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:42 2025 by rpki-client