Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DE1FDC616F11F0BE5CAFF2DAE4EC9C.roa
File: 67DE1FDC616F11F0BE5CAFF2DAE4EC9C.roa (raw, json)
Hash identifier: tcF9aloH+U0P1XF+jgCY52lkEeMUW1JqmycjBgg/ThM=
Subject key identifier: 9B:AC:3F:02:D6:FF:D2:3E:78:AE:C4:1D:62:B2:3B:1F:D4:C9:C2:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DE1FDC616F11F0BE5CAFF2DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:32:36 +0000
ROA not before: Tue 15 Jul 2025 11:32:31 +0000
ROA not after: Fri 15 Aug 2025 11:32:31 +0000
asID: 21859
IP address blocks: 154.193.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101832 (0x18dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 11:32:31 2025 GMT
Not After : Aug 15 11:32:31 2025 GMT
Subject: CN=68763c54-4d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:2c:86:8a:d8:c4:2f:0d:b7:3b:a5:8e:cf:
1f:ec:e9:6e:c8:07:c6:c8:b8:fc:37:11:88:a4:5e:
85:e9:d7:a2:f5:a9:f1:18:f1:8e:c2:0c:aa:67:2a:
67:7b:8b:a8:87:cf:b9:a3:dd:d4:03:7e:b3:b6:01:
0b:78:c5:54:15:90:d0:45:5d:55:20:b3:21:14:ed:
03:08:ba:c7:9e:f4:23:6a:22:eb:0d:00:76:3e:dd:
76:06:eb:5b:2d:ac:1a:03:e4:42:e7:da:6b:c8:07:
67:07:44:8f:22:6d:97:12:2a:b2:5b:fc:a1:5a:ac:
19:3e:1a:0c:c5:2d:0e:70:83:1c:15:28:24:c4:d2:
f0:1b:85:72:56:21:93:8c:df:b1:f5:5e:5c:20:17:
6b:2d:8c:ba:52:14:26:b4:97:86:73:ac:61:5d:32:
ee:ef:88:8c:36:22:fa:d3:b2:45:30:d7:49:70:a9:
5a:b9:9a:d7:a4:06:8c:29:df:c3:b2:f5:99:ef:ab:
bf:22:5c:05:6e:09:92:4b:29:22:59:c0:db:33:f3:
ae:21:b2:97:b9:17:da:d7:11:ca:78:75:6d:02:10:
65:ef:a4:b1:66:03:b8:e5:7a:0c:32:d0:fd:55:a2:
7c:2e:b6:38:0b:0c:bf:6a:96:78:ec:4f:32:f4:14:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:3F:02:D6:FF:D2:3E:78:AE:C4:1D:62:B2:3B:1F:D4:C9:C2:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DE1FDC616F11F0BE5CAFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a3:c5:c0:a4:68:68:b7:ad:15:ef:ca:c4:e0:ce:85:73:cb:
b6:0c:d8:6f:6a:af:f3:55:b7:08:1a:85:fa:1b:29:3f:e7:6b:
9b:f4:a1:6e:c7:ff:29:39:67:9e:ff:7d:12:44:18:a8:9e:82:
d3:2a:11:77:e4:35:d5:2c:28:9b:f2:1f:dc:d1:46:43:a0:7b:
06:31:54:57:67:02:0b:61:02:a0:06:6a:57:a7:76:96:e5:25:
cd:9a:9a:de:40:e7:ab:95:ad:92:e0:8e:2c:67:97:f0:3c:1a:
a9:e3:9e:84:1d:d7:a0:c3:4c:4a:9b:7b:97:76:06:3b:be:2a:
b5:50:00:2b:64:3e:48:38:c4:aa:73:0b:36:ef:a4:62:1d:c7:
7e:c6:91:47:fd:0b:25:89:15:23:17:aa:95:45:a7:77:46:0a:
1d:35:24:91:04:d5:4b:f1:97:89:f9:3c:17:f5:a5:38:27:75:
33:ab:a5:26:39:bd:c1:d1:af:8c:7a:8e:aa:95:02:f3:c3:35:
04:75:a2:81:68:64:d0:7d:bd:4a:e8:40:45:3a:92:42:78:ce:
90:e8:6d:b1:8e:c5:f1:50:10:ba:56:82:d6:41:9a:c1:f4:2a:
93:8e:3f:04:b9:ed:a7:50:3b:eb:63:ba:39:d8:71:96:a7:64:
1e:e5:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:47 2025 by rpki-client