Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/199ED1CC60A211F09AD25FBADAE4EC9C.roa
File: 199ED1CC60A211F09AD25FBADAE4EC9C.roa (raw, json)
Hash identifier: mZzsKTe2RDvz7ALSL5/49/d76Hxb8gUDF5AbDmmxV48=
Subject key identifier: BD:FA:60:27:C4:36:E4:77:75:4D:79:8B:F9:04:69:88:08:B5:C8:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/199ED1CC60A211F09AD25FBADAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:02:58 +0000
ROA not before: Mon 14 Jul 2025 11:02:54 +0000
ROA not after: Sat 04 Oct 2025 11:02:54 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101823 (0x18dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 11:02:54 2025 GMT
Not After : Oct 4 11:02:54 2025 GMT
Subject: CN=6874e3e2-540e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:47:36:2f:cb:f1:5a:5d:05:e7:c6:07:94:
45:1a:92:be:19:55:ab:97:a0:86:7d:2d:d1:fb:ca:
24:5e:4a:56:d5:92:65:77:73:4c:07:37:98:c6:07:
db:fb:49:09:8a:c8:d5:15:e3:cb:6a:cc:de:7a:ab:
eb:28:a4:fa:5a:37:b5:17:48:a9:98:5a:4e:e5:10:
0a:87:61:59:68:16:89:76:d0:a7:e2:b5:f3:67:f4:
5c:e9:04:e0:5c:3f:e3:c9:c7:90:71:c6:68:58:26:
05:b5:fc:53:d0:51:03:c1:df:6d:37:48:1c:a9:c0:
79:f3:b6:22:80:02:3f:ab:d2:e3:4a:a7:3d:38:02:
a6:ff:0a:c4:ae:dc:eb:af:6b:54:c6:00:e3:d8:39:
e9:1a:44:b1:fc:89:3f:af:f5:9a:e3:1f:94:35:1d:
0f:e8:49:74:68:b8:fe:47:a2:97:f4:33:a7:fa:38:
49:fe:45:bb:7a:80:cf:a5:97:7c:ce:cf:c3:4d:52:
4c:18:68:fd:98:6f:4c:e3:46:5b:be:fb:23:8e:8f:
bd:47:b8:6f:39:0b:c1:d3:2e:0c:09:91:fc:60:cf:
32:dc:31:51:58:92:eb:40:47:89:42:7f:06:57:f8:
4f:da:e3:86:fc:4e:33:37:1d:6d:ea:94:ae:83:c8:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:60:27:C4:36:E4:77:75:4D:79:8B:F9:04:69:88:08:B5:C8:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/199ED1CC60A211F09AD25FBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
36:96:24:a8:28:c6:db:c2:44:f3:cc:24:08:c9:87:e9:44:a5:
02:55:4d:a6:4a:84:38:0e:0b:90:a7:4a:72:81:ae:10:d9:2c:
86:7b:41:89:20:d4:75:e6:4d:08:f7:aa:fc:6a:49:b8:b2:c7:
56:3b:83:cb:51:19:aa:79:3b:0a:22:89:35:32:24:02:9b:56:
16:6a:30:9a:74:a2:f9:8d:a3:03:cb:a1:7b:4c:9e:e7:cc:69:
03:5e:09:a0:63:98:a5:65:09:fa:27:66:da:08:c1:f5:11:4a:
eb:63:5d:8a:97:ae:05:a9:ff:b4:7c:74:f3:c2:07:41:40:73:
26:6f:4c:19:f1:0c:d0:38:aa:9d:46:52:b9:9d:01:50:a0:8a:
98:92:73:f3:87:94:d1:b5:d6:68:58:3b:b7:d7:fa:a6:a7:87:
dc:d0:37:75:ed:15:14:76:ba:4b:b0:38:61:58:82:88:c4:3e:
04:2a:0b:73:ae:dc:f9:20:21:16:ee:c4:70:49:73:3b:8d:1a:
fe:df:82:20:c5:0a:8e:62:1c:ad:30:e5:df:7f:fa:15:ac:79:
ab:7d:91:ff:f1:bd:24:7a:92:e8:27:c8:00:33:8f:c5:88:ad:
a2:d8:07:d7:ad:d3:75:60:8a:68:08:aa:7b:47:a6:df:fb:cd:
34:89:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:19 2025 by rpki-client