Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A042D2617511F0B2586F99DAE4EC9C.roa
File: 18A042D2617511F0B2586F99DAE4EC9C.roa (raw, json)
Hash identifier: TN3MPnJ3AO16gLE/r84W+NRx5FV9U+lsoF6dVPjQoeA=
Subject key identifier: 59:4B:F2:22:F0:FA:CF:4A:07:92:68:EA:50:66:F4:26:CB:93:22:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A042D2617511F0B2586F99DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:13:21 +0000
ROA not before: Tue 15 Jul 2025 12:13:16 +0000
ROA not after: Tue 29 Jul 2025 12:13:16 +0000
asID: 9304
IP address blocks: 154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101846 (0x18dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 12:13:16 2025 GMT
Not After : Jul 29 12:13:16 2025 GMT
Subject: CN=687645e0-59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:1d:b5:d4:e0:eb:6b:d8:78:97:52:9d:39:
a9:38:23:3b:24:ea:35:cd:3f:1f:fb:b7:ad:ea:ae:
5c:7e:b6:d6:4c:63:65:2b:63:1d:54:11:31:47:ff:
f7:2e:f4:1b:c9:ca:a4:2d:df:92:f2:ab:f6:2c:a5:
6c:1d:5e:d5:06:11:88:a4:2b:33:8d:0b:49:69:3f:
3e:d6:f2:d4:04:26:6e:de:7e:2c:ac:1a:c8:dc:2a:
4e:5a:65:94:c2:b6:90:5a:9a:5d:84:3e:93:5e:63:
77:96:91:12:ee:20:5e:92:48:bb:7c:12:b1:1d:63:
fd:90:47:1e:d7:eb:9e:9b:14:c5:f5:29:5e:c2:b1:
7b:f1:38:70:42:87:53:a5:ac:59:71:09:31:03:d7:
42:d0:43:74:90:e2:bb:d1:66:b1:81:9f:fb:84:d2:
5b:2f:ed:fc:88:ed:aa:b9:f2:f6:3a:b4:d5:50:39:
24:ae:81:c1:6f:09:68:6e:5d:fa:e6:c9:07:e6:d5:
41:15:7f:90:32:bb:c2:09:5f:0b:91:b4:84:d6:51:
be:93:95:8f:09:fd:95:57:19:0a:fa:12:34:69:5a:
4f:6f:d5:c2:0b:82:59:87:5e:53:71:67:f6:7e:3b:
a6:24:ce:ca:17:f6:63:e8:91:89:54:6d:5e:e8:a0:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:F2:22:F0:FA:CF:4A:07:92:68:EA:50:66:F4:26:CB:93:22:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A042D2617511F0B2586F99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:6a:eb:d2:2b:57:03:71:88:e1:99:07:54:10:10:f7:3c:79:
38:52:fc:d4:60:11:2e:6d:46:0e:78:63:f8:69:99:57:7c:66:
3a:aa:c5:73:56:cd:a1:fe:0c:ed:68:a0:8b:46:e7:06:d8:af:
3d:f8:98:7f:98:3d:9e:13:c8:0e:59:64:b7:ea:d2:c0:29:8c:
99:9c:85:72:eb:5f:00:43:25:f0:8a:28:4d:75:c6:37:50:0e:
d0:4b:02:65:84:61:12:7a:e0:61:74:4a:45:b0:cb:68:b0:25:
b5:3c:19:92:cf:50:40:14:4f:4e:09:c4:06:8c:c0:0c:cd:21:
b1:76:c8:28:e5:63:22:9d:08:99:c6:9b:77:4f:46:b3:e1:7e:
bf:c8:5b:20:d2:59:a8:6d:91:89:f0:ef:60:e4:ac:46:86:a5:
f1:5f:70:42:ba:98:8a:7a:85:0d:a7:5c:18:2d:b7:5b:6f:d9:
a0:67:6a:14:04:4d:29:8e:f1:39:7c:79:cc:24:1a:51:f1:71:
1f:56:a2:e3:ac:c7:08:3d:05:cd:c9:c4:3f:e4:27:23:77:79:
1f:ef:fb:7b:7c:08:43:91:63:dc:01:fc:89:db:b2:8b:47:df:
00:8f:dc:5c:58:6c:6c:82:f5:c7:6c:2e:12:b0:26:19:68:11:
79:75:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:48 2025 by rpki-client