Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2175AE609A11F0BC06858DDAE4EC9C.roa
File: 8C2175AE609A11F0BC06858DDAE4EC9C.roa (raw, json)
Hash identifier: MVP1pXDGauZf5yuNA9XNRo3bQuEeu2q2kWQKLUI8wjI=
Subject key identifier: 1B:ED:20:5F:BD:DA:FE:1F:3D:B1:C2:FF:80:92:9B:1F:01:AF:E2:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2175AE609A11F0BC06858DDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:08:54 +0000
ROA not before: Mon 14 Jul 2025 10:08:50 +0000
ROA not after: Thu 24 Jul 2025 10:08:50 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101805 (0x18dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:08:50 2025 GMT
Not After : Jul 24 10:08:50 2025 GMT
Subject: CN=6874d736-1817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:bb:f1:69:8c:89:83:c9:3c:04:28:24:80:
84:ed:51:aa:68:53:90:c9:53:3f:04:f7:35:43:94:
74:24:31:95:b4:66:2b:31:fb:79:1d:93:0e:d3:f3:
fc:1e:94:fb:d2:9c:9a:ab:66:eb:0d:31:36:37:74:
5d:0a:db:40:93:f1:9c:3b:fa:b1:9d:01:c6:6c:03:
86:a3:04:aa:97:e8:a1:26:d7:bf:9e:4a:a7:b9:eb:
9e:0c:d5:21:52:d2:36:d0:d6:c7:ae:c6:22:e8:7a:
22:5f:82:4b:ff:5a:6c:32:45:ab:1c:5e:17:76:a2:
4f:e2:a2:1b:0d:88:32:5d:64:e1:8b:0c:be:8b:7c:
c4:d9:6c:f2:94:3b:1e:98:4b:b6:7b:55:a4:9f:3f:
18:1f:bb:f8:67:7c:59:e8:c6:9b:d0:6e:28:44:8c:
c0:d1:ea:df:ac:07:8e:22:a7:47:f3:a1:6c:bc:f8:
ec:f9:f2:d4:6b:3f:f5:f2:52:f5:78:ed:9b:21:5f:
fc:c6:08:32:0b:5d:52:7e:0f:90:75:1c:6e:96:93:
86:56:31:60:c5:58:04:16:be:ae:47:38:30:c4:1d:
a2:77:16:4d:5e:02:5e:88:73:ce:3a:a5:bb:95:d9:
1f:f0:44:be:c9:73:40:d7:28:c5:47:cd:90:6e:f3:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:20:5F:BD:DA:FE:1F:3D:B1:C2:FF:80:92:9B:1F:01:AF:E2:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C2175AE609A11F0BC06858DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
74:17:fc:42:6c:3a:9e:c0:61:a9:73:34:7b:89:47:0d:75:77:
a2:da:6c:4d:a5:05:42:5a:4a:48:30:9a:8c:70:bb:e8:3b:39:
79:41:bf:16:18:35:e2:72:c6:89:be:e7:88:2e:e5:36:01:d2:
4e:bd:35:f9:c6:84:54:14:4f:5e:b2:8e:66:30:c7:33:f9:6f:
53:51:59:f7:89:ee:e3:1f:c3:f3:f4:a6:93:16:15:38:f3:76:
2b:ff:34:68:f2:ad:de:97:e2:ec:c4:aa:90:a0:24:85:d5:df:
21:42:1b:e3:31:8b:4c:0b:b1:11:bb:af:05:83:9a:b0:b2:d2:
c4:09:d4:b8:63:3d:fa:8e:41:5b:82:f7:71:4d:0a:4d:de:4c:
af:34:78:a6:43:55:42:be:95:34:42:cf:e2:e8:2f:12:30:d7:
ab:61:43:69:63:6b:b1:01:61:8e:1e:b3:e9:6c:4f:e0:e3:66:
1a:ef:14:f1:85:53:63:12:c7:5a:ae:ce:8c:80:b8:ea:2d:a8:
ad:aa:aa:63:91:90:ee:84:d4:84:b2:49:17:4d:27:35:6e:68:
7c:16:ed:b3:5e:b6:33:4a:86:91:5f:c2:0f:97:22:12:49:5e:
86:9d:f1:98:bb:c5:03:07:e7:8d:0f:82:77:09:69:c1:fe:a8:
f6:fc:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:55 2025 by rpki-client