Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7107985B3511F0AF7DD294DAE4EC9C.roa
File: 1C7107985B3511F0AF7DD294DAE4EC9C.roa (raw, json)
Hash identifier: VktYapH11WS9EvGry1ias1x1OmXkTW2t5jk8m95TEpQ=
Subject key identifier: 98:D2:F2:E7:8F:1B:BC:54:87:0B:B4:CC:2B:50:71:0A:5E:45:DF:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7107985B3511F0AF7DD294DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 13:20:12 +0000
ROA not before: Mon 07 Jul 2025 13:20:07 +0000
ROA not after: Sun 12 Oct 2025 13:20:07 +0000
asID: 20473
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101402 (0x18c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 13:20:07 2025 GMT
Not After : Oct 12 13:20:07 2025 GMT
Subject: CN=686bc98c-117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:18:89:5a:eb:68:e1:2d:23:97:c0:3b:50:b5:
48:1a:40:0b:15:77:9f:e6:1c:28:da:0e:5d:c7:16:
16:cc:89:cc:62:08:e9:0c:c0:59:f1:04:b3:6f:76:
1b:74:81:83:6d:74:72:e1:27:47:dc:f1:c2:03:2f:
87:e9:1c:c5:5c:70:60:e2:26:64:0f:9b:35:61:6a:
73:c3:d4:f1:3f:ac:38:9d:b2:26:1d:3c:12:a7:44:
13:f4:d3:b9:d4:21:2a:7f:53:6f:61:fa:ed:07:d5:
11:e5:72:31:5d:6d:3e:db:93:fa:63:02:d1:27:48:
2d:94:ae:f5:62:60:e4:f3:65:0e:a1:98:6c:b4:c6:
7e:f0:91:f6:2a:b3:36:95:ef:36:b1:cd:54:8e:7d:
e9:52:c7:10:dc:aa:f3:3a:80:1d:ce:bf:40:4b:22:
61:81:48:6c:44:c3:2b:42:36:11:c7:6d:dd:62:20:
2e:f2:59:09:75:51:99:e5:be:63:d0:45:e7:c1:84:
d4:83:11:72:61:6a:d6:c6:19:26:40:0a:17:47:67:
7a:cb:f1:6b:e5:a3:80:29:5a:9b:21:32:23:9d:d4:
03:db:46:99:65:c5:ca:6b:c5:2e:7a:85:37:e4:0a:
7e:20:db:11:ea:10:c5:33:5c:f1:69:71:69:d7:5f:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:F2:E7:8F:1B:BC:54:87:0B:B4:CC:2B:50:71:0A:5E:45:DF:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7107985B3511F0AF7DD294DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9a:09:0d:3e:d6:da:3a:27:18:08:1b:cb:57:c7:03:fa:a1:
87:55:00:fb:5d:53:29:a1:f7:e8:95:a5:f1:64:9f:3e:ac:19:
00:18:f8:47:83:86:bb:3f:bb:5c:fe:bf:4c:7a:54:ba:d4:71:
5a:dd:61:a8:32:c7:79:a4:04:6b:2d:2b:cf:34:90:95:61:e7:
ec:df:b4:c4:6f:13:08:7a:6f:cc:04:5e:23:e6:87:65:e4:77:
10:7a:a6:c0:f1:6f:fd:84:05:d3:8d:aa:16:9e:9d:71:eb:15:
6c:48:e9:0a:aa:4b:2f:41:bb:78:a1:3c:8c:d7:cd:47:7c:b7:
be:6b:2f:09:32:74:c4:be:38:fa:d4:bc:c7:c4:49:b3:48:72:
4a:8f:d5:49:1b:a7:8e:b8:9f:68:3d:83:ac:86:8e:86:3e:8b:
c5:d2:e3:10:e9:39:ff:94:39:4e:80:50:71:03:a7:37:30:8c:
a7:0a:e8:d5:e7:f0:73:36:72:c5:56:5e:9c:08:27:a4:7d:de:
ee:89:3f:6f:61:28:f8:df:0c:01:7b:c8:b0:5a:27:d1:e0:75:
92:28:2b:08:49:ab:0a:da:e9:73:b9:1b:ee:01:e4:3a:45:a3:
92:d7:b1:a8:3c:1e:5d:78:05:9b:bc:79:03:a6:1c:f3:da:46:
22:b2:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:47 2025 by rpki-client