Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311A81B458BB11F0B9CDD8F5DAE4EC9C.roa
File: 311A81B458BB11F0B9CDD8F5DAE4EC9C.roa (raw, json)
Hash identifier: YEhR+gtVXC5DkUd/MlU/My0sT7ZzBz0GfV2NO+uIUNo=
Subject key identifier: AF:00:EE:57:6D:98:BE:E7:96:7E:ED:A0:67:02:E5:AF:7D:8F:3C:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311A81B458BB11F0B9CDD8F5DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:42:26 +0000
ROA not before: Fri 04 Jul 2025 09:42:21 +0000
ROA not after: Sat 09 Aug 2025 09:42:21 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100924 (0x18a3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 09:42:21 2025 GMT
Not After : Aug 9 09:42:21 2025 GMT
Subject: CN=6867a202-c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:7f:24:7f:1d:54:61:a3:a6:49:42:ad:e0:
44:1d:82:ef:42:4b:ab:26:bb:2f:a9:c5:75:e2:31:
3d:d6:4e:98:8d:78:02:e3:da:dc:35:ab:72:77:ef:
32:15:d4:c7:21:10:bf:93:03:2b:c5:9a:a2:49:67:
be:95:65:fb:fd:25:24:22:2d:ed:6e:09:91:aa:4e:
6f:d8:e4:7a:ed:cd:4b:9f:49:49:98:02:66:d2:b1:
ec:3d:05:30:b5:9c:c7:51:d3:f6:4a:79:a8:96:7a:
d9:e6:58:34:03:86:c5:68:00:2e:62:b2:7e:79:0b:
09:3d:6d:4e:a0:e7:1a:c6:2e:ac:ae:5f:10:83:5d:
45:7c:de:8a:3a:55:4e:c0:0d:2b:cd:3e:f8:d0:03:
49:f3:96:bf:00:8a:6b:c9:9d:5d:38:07:15:35:40:
f1:72:80:96:23:5e:50:d9:3d:86:6d:5c:40:2b:61:
5d:b7:ae:e4:65:d8:43:89:20:7a:97:20:66:8f:6a:
2a:39:71:9a:97:b1:be:8a:68:57:7b:55:1d:b0:9b:
3d:a8:f0:0c:16:df:54:fd:c4:75:69:4b:75:f2:d4:
81:c2:1a:46:21:b7:02:bf:77:ba:d2:69:94:c3:d5:
16:2b:01:51:57:a5:a5:4e:1f:b2:3e:3d:8f:cf:5d:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:EE:57:6D:98:BE:E7:96:7E:ED:A0:67:02:E5:AF:7D:8F:3C:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311A81B458BB11F0B9CDD8F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
154.212.139.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:1b:3f:ef:2d:1d:1d:30:41:70:f9:7d:76:dc:c4:4e:62:fe:
af:20:95:0a:54:44:cf:be:b3:85:b7:a1:38:e5:ac:95:a7:53:
57:f3:d0:4b:77:33:7c:54:9a:11:01:8d:f3:ba:23:ae:ad:d3:
87:9a:06:b1:fd:34:68:22:53:01:d4:b6:d4:e6:c3:ec:7a:db:
9b:96:c1:60:0c:84:94:5e:bb:e2:60:31:e2:ff:fb:ba:66:3f:
ba:e0:a9:2c:2d:eb:65:63:ff:dc:f8:bf:cf:dd:06:b7:7e:0b:
f4:1f:23:92:4f:e9:d0:eb:4a:7d:2e:43:42:9d:85:e6:7f:2e:
8f:32:ff:c3:e7:6c:68:bb:2e:a3:2a:74:b5:2a:9c:63:a9:fb:
97:7d:39:ab:90:6f:36:0d:0f:62:80:72:ab:e3:27:f0:40:da:
6b:ab:a8:c9:78:3d:cd:aa:74:dc:da:31:30:fa:55:12:a2:be:
cf:08:3f:e5:fe:cc:8d:6e:ca:b2:3a:06:5e:a3:e7:bf:98:46:
39:af:5c:48:78:79:7f:38:35:82:11:2b:fb:16:97:63:17:74:
a1:86:dd:1f:3d:ad:8a:b7:23:59:77:14:d4:eb:9b:63:d7:2f:
49:f3:9d:51:0d:5f:18:6b:d8:b1:55:1d:5d:58:a0:11:03:d9:
1b:62:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:32:11 2025 by rpki-client