Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17796ACE5CD311F080FFD49CDAE4EC9C.roa
File: 17796ACE5CD311F080FFD49CDAE4EC9C.roa (raw, json)
Hash identifier: 09qJZfwUpxIOiCU9WVaY6TxfRo+sTxSA753ebdA7qPs=
Subject key identifier: 6A:EE:75:75:22:37:04:DA:B5:76:78:11:CC:6B:76:42:B0:AE:8E:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17796ACE5CD311F080FFD49CDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 14:43:36 +0000
ROA not before: Wed 09 Jul 2025 14:43:30 +0000
ROA not after: Sun 12 Oct 2025 14:43:30 +0000
asID: 20473
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101606 (0x18ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 14:43:30 2025 GMT
Not After : Oct 12 14:43:30 2025 GMT
Subject: CN=686e8017-a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:6a:b6:83:b2:3e:39:5d:ce:e0:27:ba:2e:
33:0d:6b:14:c6:90:99:96:12:78:c1:e6:90:94:54:
57:49:c8:95:ee:56:af:f8:af:85:07:55:d4:14:f1:
67:60:eb:a9:06:4c:17:f0:fe:94:de:2d:90:6a:81:
b1:0c:77:cf:b5:c2:c8:f4:97:ee:60:de:64:ed:54:
1c:2f:0a:2f:91:30:81:d9:25:3d:7a:fa:3d:20:a4:
ad:b9:18:61:fa:36:a3:f0:6e:6e:8e:3d:1e:c8:52:
38:29:c9:fd:01:f2:60:07:b7:99:62:87:eb:c1:16:
d1:d3:d5:bc:b6:d3:cc:0c:ba:04:70:27:06:9c:f9:
cb:e3:8a:f0:85:9f:7c:70:2a:87:ae:8e:d7:69:aa:
a5:9e:75:94:10:a9:ac:12:11:29:ae:af:06:27:af:
31:90:d3:b7:a8:e3:bd:56:09:75:41:b5:b8:33:9d:
01:4b:d3:5e:65:4d:a9:f7:0b:54:36:8f:71:4b:04:
f3:c4:28:6d:86:9c:2f:c0:77:ba:86:c1:c4:cc:42:
87:a4:d4:38:b8:54:3a:39:47:c1:0d:da:90:94:7f:
0e:44:53:4f:99:1e:b0:9e:7a:8b:e4:04:7a:25:17:
a5:30:f0:6d:0c:ac:19:48:8f:e5:6f:ad:90:7f:04:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:75:75:22:37:04:DA:B5:76:78:11:CC:6B:76:42:B0:AE:8E:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17796ACE5CD311F080FFD49CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
80:50:cf:22:15:17:d4:d9:5f:59:4f:86:8f:ac:1f:9b:08:f3:
58:6b:c6:2c:c8:e9:7d:c8:3d:fa:23:44:43:0f:e8:53:46:78:
93:36:49:9e:d1:89:ad:44:a5:4a:82:8a:6e:b9:c0:80:b3:25:
43:9e:81:94:fc:8e:2e:19:4d:cf:0f:d3:e5:fb:68:40:2d:29:
49:fd:4c:86:e6:1e:4d:21:75:61:fd:b4:dc:f1:54:2c:50:be:
89:3e:95:90:39:5a:e1:a6:e6:f4:74:b3:3b:4f:87:73:04:15:
10:f2:26:be:93:b1:5e:85:ea:90:4a:ff:b6:51:20:58:f2:18:
35:30:87:fe:fa:e1:bd:cc:bd:62:46:c2:4a:46:99:4a:81:5d:
32:70:99:26:5f:bc:a9:0c:ae:6c:fc:bd:c0:b0:b9:5b:f9:f4:
21:81:b5:92:5b:2c:8f:e4:77:47:63:6b:07:0e:13:d6:33:ae:
47:33:c2:71:1d:03:8b:0a:3a:03:be:49:66:86:c2:d5:6b:8c:
2a:06:a1:67:7c:6d:8e:ec:9c:1b:5f:07:e7:77:10:de:7e:7c:
2d:f9:c9:f5:4e:3f:34:ac:85:48:6a:97:1f:15:00:74:37:c3:
f9:64:e2:60:c4:29:89:5c:ca:de:2a:53:3a:69:e0:04:5a:d8:
e5:7f:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:07 2025 by rpki-client