Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173D8C2C5B8C11F087027BBEDAE4EC9C.roa
File: 173D8C2C5B8C11F087027BBEDAE4EC9C.roa (raw, json)
Hash identifier: Pk+GNjGuqSfnwe5CPY2UXd0IzFPfggxgUIyEZIm3OCk=
Subject key identifier: E1:43:C3:6C:19:68:C1:26:06:42:9B:D6:D2:D3:63:F7:2B:D4:54:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173D8C2C5B8C11F087027BBEDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 23:42:50 +0000
ROA not before: Mon 07 Jul 2025 23:42:44 +0000
ROA not after: Fri 17 Jul 2026 23:42:44 +0000
asID: 54600
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101512 (0x18c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 23:42:44 2025 GMT
Not After : Jul 17 23:42:44 2026 GMT
Subject: CN=686c5b7a-0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:71:42:f1:8e:a5:8f:4f:fa:91:34:7d:33:
fb:b4:b5:6a:7d:fc:15:8f:ec:ae:f4:38:ab:6e:89:
c4:b5:ef:c0:4e:ab:01:02:4b:39:12:ba:bb:dd:fb:
3a:3a:fe:63:98:23:b3:f4:77:52:40:52:27:f3:48:
62:36:65:bb:1a:00:f8:09:61:5d:cc:da:90:db:b9:
a9:39:a6:24:ab:77:2d:ba:b2:52:e2:ea:98:77:d9:
6d:e2:44:15:3b:05:24:32:8b:05:38:21:6d:51:ac:
d6:14:2b:ee:51:ad:84:98:65:50:05:8b:b2:4c:48:
26:c8:9a:de:94:28:42:f5:72:30:6b:38:de:09:d8:
5f:eb:39:4e:7e:09:f2:c3:04:f9:28:be:33:d5:1d:
27:77:fc:0a:eb:b7:77:47:a4:8f:9f:66:16:53:c5:
9c:1d:84:9a:f3:c1:2b:1e:a6:ab:7b:fe:c7:58:d9:
72:43:d0:52:6a:61:9a:2a:bc:47:00:20:61:44:c6:
e0:f2:40:1b:b3:9c:36:60:fb:68:5c:54:7f:95:86:
2c:96:79:88:c3:28:c5:30:00:c0:aa:04:d0:0f:8e:
d4:3e:92:a5:06:66:f0:3e:24:c6:21:15:74:12:b7:
3a:c6:b5:90:3a:c4:f2:dc:ff:38:c2:bc:b1:43:02:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:C3:6C:19:68:C1:26:06:42:9B:D6:D2:D3:63:F7:2B:D4:54:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173D8C2C5B8C11F087027BBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:61:8c:b9:f2:c4:42:95:92:cf:ab:eb:56:b4:41:b6:60:0a:
8a:5a:b7:e2:32:a2:2c:6e:e2:c9:14:fa:44:93:3a:b0:83:49:
ed:72:54:d9:d1:f7:fa:41:a6:1f:0b:2f:5f:36:c8:e9:98:02:
9a:e5:e1:d8:de:85:31:06:c0:51:9d:1d:16:0a:c7:5c:85:5b:
34:84:d1:b1:60:11:d5:45:5b:11:2f:73:40:0a:14:34:a7:fb:
0f:ee:4b:97:c3:b6:70:31:0d:39:e7:9f:e6:91:9c:9e:15:d9:
f2:2e:35:9e:1d:cc:06:a6:49:4f:d1:2a:55:9d:02:89:ca:cd:
0b:41:86:f1:c7:5c:8b:2d:32:60:b0:6c:f3:48:64:6d:8a:b3:
31:26:ee:78:46:cd:c4:4b:dd:e3:48:d9:ff:a6:3f:40:0e:70:
e2:dd:ce:04:1f:ba:69:17:10:e6:d7:66:87:05:83:50:3f:33:
ef:12:f4:5b:b6:fa:99:ed:31:1e:34:3a:c9:58:8d:10:cf:a9:
5a:15:d1:b0:a4:c0:43:17:ee:7c:5a:ae:29:ff:bd:b1:fc:7a:
a5:aa:7a:9f:61:2e:03:0e:c0:17:69:17:dc:ae:d1:87:4a:55:
97:52:dd:5c:2a:d8:64:28:75:b3:39:86:95:27:6e:69:e1:cc:
90:48:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:52 2025 by rpki-client