Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60DC248A5CCA11F0B5B36CE4DAE4EC9C.roa
File: 60DC248A5CCA11F0B5B36CE4DAE4EC9C.roa (raw, json)
Hash identifier: 8mRCIEgPTYgHPQZblZNl/49ygi+E4+CSPcvm8nODWp4=
Subject key identifier: 95:09:38:8D:EA:38:D6:77:CD:B7:14:9D:F5:CE:A3:BD:D0:AD:33:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60DC248A5CCA11F0B5B36CE4DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 13:41:13 +0000
ROA not before: Wed 09 Jul 2025 13:41:07 +0000
ROA not after: Sun 10 Aug 2025 13:41:07 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101588 (0x18cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 13:41:07 2025 GMT
Not After : Aug 10 13:41:07 2025 GMT
Subject: CN=686e7179-1ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:40:d8:cc:2b:e2:14:72:9a:98:9f:9c:aa:
b4:86:86:b3:0b:46:b0:92:bf:9d:bf:6b:15:6e:e0:
ef:cd:74:68:8c:27:b0:bc:1c:bd:d1:04:68:4e:d3:
41:ec:8a:de:78:e4:c5:22:3d:a9:a0:4f:c2:55:d9:
59:90:1f:50:33:0d:86:5a:44:d0:4b:ee:5f:ed:55:
16:22:aa:34:2d:90:69:65:c8:77:ee:f1:a3:5f:06:
c0:99:6d:30:6c:32:48:44:8d:c7:2b:37:ff:3b:60:
c0:3c:ba:07:d1:a7:47:9d:be:ac:a1:23:8a:39:4b:
69:11:4a:b4:78:c8:eb:85:ff:16:50:f8:1b:02:93:
3c:36:9e:4f:08:2e:6d:bb:3d:95:2b:29:79:0e:18:
34:47:ec:8a:98:88:3d:09:cf:b7:1e:c8:7d:ea:7d:
3c:59:69:81:6d:f6:b1:48:4f:e8:ec:26:c4:17:d2:
34:1a:bd:b9:75:59:23:d2:34:4d:99:33:09:8e:ff:
34:2d:5a:dc:ef:57:bc:9e:49:25:54:a0:d1:dc:bb:
29:7a:d0:27:b5:12:e3:01:9e:c0:98:eb:5f:fc:dd:
e5:de:46:3b:76:ae:c1:77:d1:50:dd:84:35:35:6b:
18:15:f3:ef:79:eb:1e:37:4a:23:c3:f3:37:2d:95:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:38:8D:EA:38:D6:77:CD:B7:14:9D:F5:CE:A3:BD:D0:AD:33:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60DC248A5CCA11F0B5B36CE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
22:1c:ab:e2:2a:6a:f8:37:62:a1:dc:23:be:01:ce:11:66:3d:
d2:fd:7d:06:99:db:b2:50:65:4a:d2:3e:20:d6:7c:70:da:e8:
7a:3e:1b:15:1b:94:1c:89:84:b6:34:39:7d:02:7b:63:e7:75:
5e:4a:3a:50:2e:6a:a5:73:de:fb:94:c1:dc:24:7d:79:b1:65:
b7:0d:5a:cb:3a:7b:0c:dc:41:cf:c7:df:2a:f9:f5:49:15:38:
8d:6f:d1:ba:94:61:1f:61:16:ac:7f:55:ba:56:0b:e4:63:93:
60:12:33:fd:8b:a0:bb:f2:67:2d:b5:60:72:a0:e7:c2:cc:29:
df:bf:d6:0b:eb:18:ec:c0:45:66:bf:93:af:df:2f:f8:5b:85:
28:cd:14:81:d8:7d:c9:85:a7:24:d1:03:66:a0:cc:89:d1:79:
db:60:65:70:22:13:b9:36:11:d3:c8:a9:e1:4e:61:39:4a:56:
88:65:cd:92:f0:12:c4:12:d9:d7:85:92:7a:a6:05:40:33:69:
96:4b:07:9b:03:98:e8:2a:2f:a3:19:c0:8c:74:c8:89:b5:de:
1b:7e:34:d5:84:23:72:6b:5d:eb:3f:47:b9:8d:bd:bc:67:1a:
57:14:7a:e8:8c:19:41:e6:59:b7:57:5c:6a:6e:90:21:9e:6e:
c9:5a:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:05 2025 by rpki-client