Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A34D265B6911F093517CDFDAE4EC9C.roa
File: 32A34D265B6911F093517CDFDAE4EC9C.roa (raw, json)
Hash identifier: avzJuXkIxvukJCf+Tjx+dVmw+l2WxmJ1EF1Yk8C2NDQ=
Subject key identifier: 9D:BF:9B:77:11:C4:4D:BD:CB:F8:5A:42:C9:09:FF:E3:47:71:9A:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A34D265B6911F093517CDFDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 19:33:03 +0000
ROA not before: Mon 07 Jul 2025 19:32:58 +0000
ROA not after: Wed 03 Sep 2025 19:32:58 +0000
asID: 135845
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101456 (0x18c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 19:32:58 2025 GMT
Not After : Sep 3 19:32:58 2025 GMT
Subject: CN=686c20ef-86a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:46:39:a8:a1:73:5f:88:2e:45:ff:ba:45:
2e:7a:01:92:4d:68:bd:af:4f:ce:d6:3a:35:93:19:
a7:67:69:8e:08:1c:57:ac:f5:ff:30:e8:0a:2f:09:
c1:ee:e9:57:2f:f9:e6:4d:02:50:c6:21:18:18:db:
f9:6a:e4:68:56:ab:5e:95:d8:c0:de:92:69:4e:7e:
f7:08:3d:88:82:b2:47:e6:ac:7d:ea:a4:bd:57:08:
85:2c:99:87:ab:ad:6b:b8:59:9b:16:37:a0:8f:13:
0c:e5:b2:40:35:2b:9d:36:27:fa:ee:4e:ef:ff:c8:
a9:8c:4b:5a:92:c8:28:46:3f:21:66:83:74:04:d7:
39:ef:b5:e1:4c:75:a3:88:2c:dc:25:3e:97:86:21:
b1:d9:2b:49:bf:2f:59:ea:ab:d4:36:91:e5:c0:80:
a4:56:52:cf:2d:5f:1f:19:ef:0e:7e:9f:4c:c4:e4:
43:19:82:d8:d3:cc:b3:d9:42:63:ff:a1:73:97:5b:
ad:39:f5:16:2a:10:00:61:8b:d4:84:28:fb:26:a8:
9c:e1:21:7f:e6:cf:0b:db:c6:5d:d0:66:ec:7e:47:
ad:41:0b:58:1d:86:46:09:a3:79:9b:c5:2d:2f:04:
b3:5d:20:c6:f6:fe:3c:7f:42:5a:e0:d7:b8:d0:49:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:9B:77:11:C4:4D:BD:CB:F8:5A:42:C9:09:FF:E3:47:71:9A:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A34D265B6911F093517CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
34:a7:ec:76:98:c0:0d:52:c7:e7:22:ca:23:d5:cf:47:fa:85:
fc:45:7b:2e:91:23:db:a1:ce:05:82:2c:82:09:b4:1c:b9:73:
34:43:bd:3b:db:95:0b:bf:3c:6e:c5:7d:78:ff:35:b6:94:cf:
85:7a:56:3e:47:8f:56:ba:69:69:6a:6e:21:ae:5c:fb:59:a0:
9d:ef:5c:ca:56:e3:27:cb:4e:75:84:20:89:62:58:cf:0b:b2:
9e:f0:74:00:7d:f8:ce:e9:bc:4f:b8:17:f7:4a:f1:ca:db:15:
3d:58:e4:80:c1:d0:1d:87:76:c9:be:6f:e1:4c:55:e8:69:09:
a0:22:ce:bc:ae:aa:d6:4f:c3:b7:ec:1f:80:95:11:66:96:39:
88:dd:82:e6:6a:40:2d:f3:3c:80:4c:40:b3:ab:0a:ff:a3:0a:
81:db:b7:5e:1a:1d:7f:67:cc:55:27:97:11:55:b3:7e:9b:80:
80:fc:36:74:40:a4:bd:f6:d7:51:e2:2c:f7:5e:07:22:34:87:
ab:60:a1:07:1f:00:a0:e7:75:1d:b3:23:9f:ab:e4:0d:45:9a:
a2:fa:84:ec:79:91:d3:af:15:6d:34:9f:c1:b9:08:c7:dc:68:
f9:c4:d6:09:e9:10:5f:43:5c:b5:46:3c:38:40:4b:c0:84:7e:
b0:91:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:14 2025 by rpki-client