Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D2294B6590011F0BB2CB7B0DAE4EC9C.roa
File: 3D2294B6590011F0BB2CB7B0DAE4EC9C.roa (raw, json)
Hash identifier: JdHuHWp5ed8ht4A586mOpIOGPDyhzV0X8GgR7bAuvRg=
Subject key identifier: 9F:F5:56:F8:1A:2D:89:56:4F:BA:75:BA:17:65:38:E7:A1:32:FF:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D2294B6590011F0BB2CB7B0DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 17:56:41 +0000
ROA not before: Fri 04 Jul 2025 17:56:37 +0000
ROA not after: Wed 03 Sep 2025 17:56:37 +0000
asID: 139490
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101010 (0x18a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 17:56:37 2025 GMT
Not After : Sep 3 17:56:37 2025 GMT
Subject: CN=686815d9-5702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:37:c0:c5:cd:b2:a0:92:6f:38:18:d1:27:
0c:94:f1:4b:81:60:63:fb:a9:6d:f5:97:b7:03:e5:
a1:91:62:58:0a:2a:50:0b:51:c8:1b:41:a6:2d:13:
4b:f8:0d:dd:84:59:d6:ce:84:24:03:60:56:e8:4c:
1a:3a:3f:c9:4c:8c:8b:91:d8:68:5f:ab:ea:d0:d1:
75:7c:f7:7f:e6:a9:f0:36:14:15:49:d4:85:db:77:
3f:e1:0c:88:e1:9c:34:5f:d1:d6:b7:f4:d4:5e:e9:
32:48:74:e7:7e:a0:a4:96:57:e8:17:d8:e0:3f:21:
00:48:4a:df:05:70:4a:a1:46:5b:1a:30:62:35:54:
ff:5c:b9:2d:61:11:aa:31:c1:c4:87:e2:3d:b8:e8:
60:c7:fc:f4:27:02:8d:9c:80:11:2b:6c:a3:c0:47:
51:05:fb:87:e5:a2:0f:f7:43:fd:28:c3:a2:c8:c3:
96:8f:8c:78:af:90:f0:b8:e2:17:02:61:7a:57:e1:
f0:c5:81:8d:7f:45:7a:26:f8:25:1b:21:8a:4f:14:
57:84:35:f8:47:46:91:20:cf:86:52:0c:05:6d:8f:
c0:7d:b1:ae:28:5d:56:b9:68:cb:13:88:7c:7e:0e:
b3:f0:72:65:61:89:dc:49:1f:5c:d6:43:be:97:e8:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:56:F8:1A:2D:89:56:4F:BA:75:BA:17:65:38:E7:A1:32:FF:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D2294B6590011F0BB2CB7B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a1:1c:2d:3b:c6:38:a8:62:7a:bf:57:20:92:e9:b0:89:8c:
0b:5b:8f:38:75:e5:8a:2b:d4:e2:7a:49:34:db:ba:ac:d6:26:
16:0a:40:de:15:8b:cc:cd:d2:9c:6e:67:dc:86:8f:f9:2d:eb:
42:58:7c:69:ab:3e:8d:86:c1:38:7c:78:1a:a4:24:11:4e:37:
42:94:4a:d3:f8:52:3d:4d:00:63:14:47:30:22:65:99:80:5c:
6a:79:9b:00:7b:9a:b9:55:76:fa:c1:df:37:64:e7:68:58:07:
db:2e:6b:4b:8f:94:6e:cc:bb:43:e5:22:27:b6:a3:a6:dd:fc:
1f:7a:77:d3:58:95:cb:15:40:f3:38:cc:2a:71:c7:79:60:e1:
6c:3e:70:e2:4a:97:16:4e:60:87:ee:d2:23:f0:a9:75:db:dc:
00:a1:44:df:c1:61:18:a4:07:bd:29:bc:a4:85:38:86:59:78:
e4:4a:19:7e:77:d5:fa:b9:f0:31:bc:a0:2b:12:fd:14:a6:cd:
6a:ce:34:7a:d6:87:1f:da:b2:28:8e:f4:34:86:ef:64:0f:c4:
5f:76:55:6f:9c:90:44:59:f5:8b:f3:2d:86:e2:62:5e:25:17:
4f:e8:09:16:36:5b:10:9d:9c:7e:34:36:a6:72:a6:bc:53:b4:
39:9b:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:07 2025 by rpki-client