Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24458D865A6811F09A8922D8DAE4EC9C.roa
File: 24458D865A6811F09A8922D8DAE4EC9C.roa (raw, json)
Hash identifier: 1OYGE3eIilQCBvFxjcj6ihrEL2Ddks/AHrZ1Q0s29ak=
Subject key identifier: FA:47:10:F4:00:88:57:C4:A3:57:FA:F7:6E:53:3F:77:BD:62:17:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24458D865A6811F09A8922D8DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 12:52:58 +0000
ROA not before: Sun 06 Jul 2025 12:52:53 +0000
ROA not after: Thu 14 Aug 2025 12:52:53 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.102.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101224 (0x18b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 12:52:53 2025 GMT
Not After : Aug 14 12:52:53 2025 GMT
Subject: CN=686a71aa-e3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:b7:97:3e:50:a2:08:9e:64:67:ef:8a:d1:
0b:03:98:d8:fa:f1:be:c8:78:ee:67:87:6a:43:9a:
31:a7:33:ac:ea:15:e2:bc:33:62:1d:58:e0:e3:b7:
4a:e8:0a:51:72:e0:c8:8c:36:bf:3f:70:c5:1a:9c:
a8:fc:f8:23:0f:60:bd:49:24:cf:40:9b:5e:bb:12:
bf:e6:6d:40:ec:fb:83:eb:14:6e:a3:04:ff:4c:1f:
42:9e:29:a3:32:53:79:d5:e3:86:0c:4d:1a:e7:5b:
a6:75:ca:5a:c3:5c:49:ab:ca:26:b9:49:76:fe:1a:
ad:fe:3d:d9:55:2a:34:13:2d:dd:28:a5:37:c8:b6:
23:46:7e:da:1a:8a:d6:c9:4a:17:14:90:65:80:31:
8a:bc:8e:75:33:41:d5:af:19:a2:cd:b2:32:e5:9a:
7b:fe:17:c8:94:0b:52:d6:a3:50:04:a0:69:ed:3c:
5d:49:dc:87:e1:7a:bc:30:2f:0e:3b:57:68:7c:c5:
ca:3f:7b:37:2b:37:56:67:7a:60:28:24:66:95:be:
8d:eb:91:f7:3f:af:86:45:0c:6a:ba:e0:d0:02:b2:
95:af:5a:2a:22:89:12:c2:d4:74:5e:ae:83:e3:2d:
78:7d:f5:ba:ce:dc:4b:15:60:37:2c:4d:73:49:d9:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:10:F4:00:88:57:C4:A3:57:FA:F7:6E:53:3F:77:BD:62:17:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24458D865A6811F09A8922D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.102.0/24
154.197.116.0/24
154.197.124.0/24
154.212.139.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e4:68:f4:e2:66:24:c7:f5:cf:18:1d:55:fb:8c:80:9a:f9:
6d:3b:67:96:e1:ea:b7:67:ae:33:16:5e:9a:ce:03:80:ac:da:
68:46:be:98:4f:8b:90:75:f8:52:57:41:e7:c3:4c:bd:42:7d:
2e:0c:ad:98:b4:96:27:6b:d6:46:eb:49:1c:44:f8:dc:da:cb:
c2:81:2c:18:d7:0e:43:d0:11:f9:6b:26:a1:a0:66:ff:41:b3:
0a:0d:e4:81:b9:66:3d:e1:a2:3e:30:28:c7:41:1f:4b:c3:df:
92:99:ac:6f:98:f9:54:4e:d4:38:40:f2:1a:96:6b:dd:18:95:
9f:7b:eb:48:55:14:17:69:5e:02:71:dd:b8:b8:38:fc:70:a1:
cb:79:63:79:1e:4c:7b:e4:45:1a:38:c5:78:37:da:31:ec:24:
3a:e4:ac:8c:3d:68:91:26:e7:4c:0e:18:4a:d5:93:0c:7b:d9:
e3:79:ba:69:1a:bd:58:3c:18:49:dc:9c:9c:27:80:df:12:00:
2c:71:5f:5e:af:dd:ad:bf:4b:08:6e:bd:55:ef:df:16:a6:21:
45:4d:e1:4b:0b:1c:b3:69:27:03:d2:75:16:31:69:ac:33:c6:
9e:bc:b6:a8:40:a1:4c:4a:d1:77:5d:9a:71:61:6b:18:72:ed:
a8:ef:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:56 2025 by rpki-client