Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464563145B8211F0BAC25B81DAE4EC9C.roa
File: 464563145B8211F0BAC25B81DAE4EC9C.roa (raw, json)
Hash identifier: 4JhaxL8R+ans7FdarTu8OlEiX3kDNLbfT/GX/tVTRZY=
Subject key identifier: 56:F1:A9:29:E0:40:71:85:84:06:06:86:F8:CD:EB:2E:B6:FC:8A:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464563145B8211F0BAC25B81DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 22:32:34 +0000
ROA not before: Mon 07 Jul 2025 22:32:28 +0000
ROA not after: Wed 10 Sep 2025 22:32:28 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101496 (0x18c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 22:32:28 2025 GMT
Not After : Sep 10 22:32:28 2025 GMT
Subject: CN=686c4b01-e755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:fc:ad:44:9b:c2:37:fb:43:cd:ec:7c:a4:
71:78:d1:2b:a9:5b:1f:7b:46:84:db:11:2b:03:43:
8e:0f:fe:de:67:97:86:4a:df:af:8c:7c:e1:17:3e:
16:38:16:da:36:00:1e:42:5c:ac:e7:c9:6d:94:26:
c6:95:3c:61:0a:c9:40:5c:1d:50:a9:5f:9a:b8:8f:
af:56:fc:9b:6e:5b:87:9c:28:1d:8b:83:71:cd:91:
11:cc:5d:2e:f9:c7:be:50:96:60:f9:9f:56:5a:82:
f6:dd:ce:e3:7e:b6:3d:f9:99:d5:dd:f5:a1:e9:1f:
12:1f:54:3a:af:cc:5c:c8:03:c4:ee:4c:28:57:ad:
e0:82:fd:fd:6a:f5:54:5f:74:43:55:92:74:3c:a6:
e1:84:ee:0f:25:ac:7f:74:81:7b:7d:2e:fb:63:3b:
f2:55:c8:d5:62:9f:3c:b5:13:e2:18:97:cc:cc:ae:
ca:25:6f:ea:98:53:fb:5c:fd:10:71:57:9c:de:1c:
12:7f:59:d4:55:7c:55:a2:8f:a0:08:60:76:30:1e:
5a:78:02:f2:12:2c:18:98:a2:e3:1e:61:5d:c2:6f:
11:e8:d5:5e:a4:1d:d4:32:db:97:d7:b8:cb:97:8d:
fa:c7:8d:59:aa:9c:c1:7c:c4:3e:7d:6e:39:b6:eb:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:A9:29:E0:40:71:85:84:06:06:86:F8:CD:EB:2E:B6:FC:8A:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/464563145B8211F0BAC25B81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
c2:31:30:67:fb:c5:92:d6:10:0f:db:62:12:60:c5:66:12:5e:
a2:c1:04:59:0f:cb:11:8c:f1:c1:ca:ba:3e:04:7f:a4:48:3d:
4c:d2:fd:89:08:ae:e5:d6:05:19:e3:5c:1a:46:b0:c8:b3:cd:
7c:d4:06:dc:58:0d:48:20:34:97:d9:bd:e0:eb:d2:b3:6b:74:
9c:bd:d4:8e:0b:64:2b:23:d0:a5:47:b6:51:84:ed:2c:e7:ee:
36:90:94:9f:b8:63:4a:da:b4:29:e5:95:10:86:9f:83:cd:40:
3f:76:92:29:3c:39:30:68:b5:3a:89:a9:7d:23:d9:b0:b9:c8:
b1:ec:b1:bc:21:80:22:a1:11:56:cb:6c:70:f2:0c:23:8d:1c:
22:a8:1d:a0:31:3c:45:03:bf:0b:de:db:10:d7:fa:57:64:0e:
14:6a:22:21:60:d6:2a:f3:d4:ce:a2:53:03:fe:5b:6c:5a:eb:
bf:5d:b8:4f:c7:b1:22:a1:40:49:5f:1e:15:78:34:fc:83:20:
91:c2:47:17:55:50:d1:dc:ba:22:53:c0:0f:00:23:4c:5b:a5:
ba:4b:27:53:71:d8:0f:9a:50:2e:76:a4:72:23:39:7d:95:02:
06:1c:ec:3f:90:57:fe:5f:76:9f:a6:c0:4c:bc:63:aa:46:6e:
5a:57:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:21:28 2025 by rpki-client