Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371E1C4E5CF111F096886CDEDAE4EC9C.roa
File: 371E1C4E5CF111F096886CDEDAE4EC9C.roa (raw, json)
Hash identifier: PRlNUR5fqxt0oIFUgBsAm8kzChdX+Q0SEski/6HjfYg=
Subject key identifier: 3D:9E:ED:A4:8E:0B:A1:F4:6B:1F:4D:21:05:7A:CB:F7:70:A8:23:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371E1C4E5CF111F096886CDEDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:19:13 +0000
ROA not before: Wed 09 Jul 2025 18:19:08 +0000
ROA not after: Tue 12 Aug 2025 18:19:08 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101628 (0x18cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:19:08 2025 GMT
Not After : Aug 12 18:19:08 2025 GMT
Subject: CN=686eb2a1-7df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:76:2a:cf:e8:27:2e:37:7c:9b:0e:e6:ac:
22:b4:e9:af:70:71:c2:02:20:91:22:0a:41:98:4a:
77:50:e9:ac:7a:22:95:90:b3:8e:ed:91:0d:0d:fa:
b6:2c:31:df:97:62:b3:f6:5f:3f:a8:d9:f7:59:6f:
cb:5b:fb:79:ad:fa:ea:50:27:a1:61:c4:cb:f9:15:
4a:a4:52:a7:d6:f8:12:0b:df:be:6b:8b:c2:59:63:
39:a0:f8:cb:aa:fd:9b:71:cf:c0:e6:12:34:28:85:
55:67:a1:86:07:65:bb:f9:cd:db:73:f3:74:67:a5:
b3:f3:df:f5:1e:26:55:d3:9d:2f:5b:2c:5d:5a:c3:
98:b6:7a:18:16:5b:0e:28:23:ad:8e:58:52:8e:f4:
0f:7d:24:2b:f4:dd:20:78:18:8a:38:9d:73:70:90:
d7:bc:a6:17:e0:82:d4:a3:f9:18:57:8b:4a:38:09:
5b:4e:28:ed:11:47:e1:ae:4b:16:37:0f:da:54:f0:
74:75:45:f0:fb:e3:58:cb:85:5c:0f:68:19:5e:82:
5a:cd:ac:ec:c6:b7:2a:10:04:0a:7a:d5:57:67:15:
ef:ab:05:5d:d0:36:5e:dc:74:00:e9:b8:1d:8e:7e:
db:9f:88:63:d8:5e:09:19:8a:32:51:de:ff:a5:31:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:ED:A4:8E:0B:A1:F4:6B:1F:4D:21:05:7A:CB:F7:70:A8:23:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371E1C4E5CF111F096886CDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6f:12:9e:91:92:0b:73:b9:b5:69:84:29:c7:19:9a:fc:69:
bf:dc:26:15:58:33:f6:96:cf:c6:13:c9:eb:5d:93:35:fa:ec:
16:71:15:88:54:6c:d9:d0:cd:e7:5b:eb:67:89:e1:6e:ea:20:
9a:ca:71:1f:fd:11:5e:61:62:32:00:79:45:cb:1b:42:75:1c:
1b:fe:95:62:85:c5:7b:54:0f:81:82:70:bc:dd:e7:7e:13:81:
70:95:50:ca:40:c1:6d:30:db:11:db:22:5d:06:da:ed:25:46:
0d:6e:18:47:08:23:dc:5d:ee:62:59:27:1c:9a:50:79:6e:e0:
96:23:28:13:fa:df:8a:32:ee:91:ef:71:3f:63:d8:9f:bc:f3:
74:43:1b:e0:59:03:62:9c:dc:12:01:f1:a0:ac:23:22:b9:57:
31:0e:4d:9e:18:e4:31:ad:b0:6f:a7:8a:b8:d8:ec:ec:da:37:
2a:ca:1d:a4:cb:55:ef:1f:de:af:32:ae:53:3a:71:4f:e6:c6:
0b:e0:02:9e:97:69:95:2d:f8:e3:98:a3:90:69:04:fa:d8:fe:
18:1d:06:89:af:03:9f:98:26:e9:9e:13:e9:75:6e:97:04:6f:
f5:0b:3c:99:ee:77:7b:8f:50:07:97:17:c5:ab:0e:d6:3b:48:
bb:87:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:23 2025 by rpki-client