Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB1A682597711F08F3305C1DAE4EC9C.roa
File: 1CB1A682597711F08F3305C1DAE4EC9C.roa (raw, json)
Hash identifier: DQEsdXRV5SO0/qcPgNU+Ih6gZ6xa4+bSRtjKRjhtMow=
Subject key identifier: CD:F9:8C:30:F9:42:36:D5:0F:46:7D:43:5C:AD:0A:0A:67:E3:07:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB1A682597711F08F3305C1DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 08:07:37 +0000
ROA not before: Sat 05 Jul 2025 08:07:32 +0000
ROA not after: Sat 09 Aug 2025 08:07:32 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101062 (0x18ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 08:07:32 2025 GMT
Not After : Aug 9 08:07:32 2025 GMT
Subject: CN=6868dd49-19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:a2:f3:cc:44:36:11:71:bb:2d:9d:20:b6:
36:16:f0:d0:b8:22:72:6d:19:f3:dc:a1:84:02:35:
0f:ae:53:30:27:c1:9b:3d:38:39:8f:d3:eb:bf:0d:
98:eb:f2:5f:3f:93:f6:0c:c3:75:86:15:2f:41:26:
2f:67:75:50:be:d9:70:cf:1e:3f:28:ec:1c:d9:69:
6a:02:d5:ff:51:d1:d2:01:bc:93:28:0c:56:0e:b3:
fc:6f:da:36:10:39:9f:de:22:70:ad:b9:8b:3a:03:
78:78:be:7a:b4:52:ed:aa:18:b9:93:d9:5d:80:86:
bb:0b:44:e9:b4:14:a5:39:d3:b8:41:37:8c:e5:e1:
2c:d3:88:f5:b5:dd:26:da:97:a9:2b:24:00:70:40:
a0:4b:31:25:fe:e9:e9:13:47:9d:c4:a6:e3:c1:84:
01:86:df:f3:17:10:15:ed:d1:93:54:27:9b:65:ae:
e1:69:34:c1:d0:b3:07:8f:c9:ad:61:7f:ed:8f:da:
58:10:1d:e0:23:b3:54:05:25:7a:b7:49:6e:30:39:
d7:9a:4a:16:29:6f:9f:99:13:a4:48:69:b7:de:bb:
2a:a9:53:7e:78:73:32:e9:d6:d3:38:68:67:13:f4:
12:56:b1:6f:df:e6:43:66:c1:d7:9b:f4:43:1e:75:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:8C:30:F9:42:36:D5:0F:46:7D:43:5C:AD:0A:0A:67:E3:07:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB1A682597711F08F3305C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
154.212.139.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bf:ab:2c:8d:b8:3c:61:9b:6e:da:82:bf:f5:ea:36:ad:a5:
d9:05:39:d7:0e:0e:04:54:01:a5:42:68:91:01:12:18:29:b1:
a5:48:47:79:a6:3d:5d:58:06:c8:55:dd:96:10:3e:51:6c:1d:
38:de:94:a1:9f:80:6d:2d:d4:e3:10:41:a5:69:fa:8a:ca:09:
cd:7a:1d:39:5c:69:07:8c:11:21:20:66:b8:04:08:33:fc:d3:
3f:45:6e:64:50:95:ba:2c:02:e9:53:fd:0d:d4:95:b5:3d:49:
9b:88:15:ab:f6:ce:2f:cd:f1:fb:b4:1a:ca:5b:bf:1a:55:7b:
2e:25:75:4f:24:17:c1:dc:2d:6c:69:f1:93:30:71:0a:87:bf:
09:ce:2e:18:70:49:99:82:3c:61:5f:67:9a:8f:9d:3b:3b:c7:
44:bf:aa:0b:fb:88:4b:d3:fd:18:ca:44:79:9d:11:83:2e:be:
8d:a3:9b:74:75:95:2f:5b:de:32:87:80:c2:f3:f6:d9:f6:b8:
f1:1a:8e:4d:34:fa:46:3e:90:f3:bd:95:ce:79:2c:5f:d1:b7:
1d:e1:f1:53:d5:78:24:cc:c3:3f:08:93:c2:44:7b:f4:81:2b:
66:61:c3:4a:71:1b:97:ef:b3:15:e3:b6:40:e7:f3:a6:e9:f3:
08:91:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:43 2025 by rpki-client