Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E28282609B11F09633A392DAE4EC9C.roa
File: B6E28282609B11F09633A392DAE4EC9C.roa (raw, json)
Hash identifier: s4d2f5iz1pL80rzKqX9cXfrqX9l8pLzN1hOi0bSNcZs=
Subject key identifier: 24:13:7A:13:A3:CC:1A:01:3F:DC:D3:67:A2:00:55:F5:3D:DE:2F:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E28282609B11F09633A392DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:17:16 +0000
ROA not before: Mon 14 Jul 2025 10:17:11 +0000
ROA not after: Wed 20 Aug 2025 10:17:11 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101809 (0x18db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:17:11 2025 GMT
Not After : Aug 20 10:17:11 2025 GMT
Subject: CN=6874d92c-c68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:9c:17:5a:75:8b:53:65:54:93:7d:ab:85:
ba:0c:14:ca:b6:30:91:79:76:b5:af:f1:58:47:9a:
72:c1:88:82:5a:f1:52:8a:f7:b8:3c:8e:c0:4f:c9:
ff:c8:84:ba:45:78:89:28:1d:b4:e5:38:e9:cd:54:
e5:b5:98:70:67:ab:07:ff:d1:31:3c:d9:c1:a0:c6:
29:04:02:4b:fa:6b:5c:64:11:e2:84:9e:26:89:f8:
78:4e:cf:1f:33:74:74:1f:ec:63:49:89:f5:ac:ee:
3e:d2:0e:67:7f:31:a0:9f:87:84:c8:66:c3:fd:1e:
c1:96:68:27:42:46:0e:bd:07:3d:42:80:4a:75:c5:
d7:a0:85:d0:23:4c:7f:5c:67:e0:79:4a:eb:7f:7c:
2e:78:9d:9c:82:e9:8a:fd:6d:02:b6:31:ab:8a:6f:
86:15:98:5f:e6:bc:b7:86:82:b1:d8:48:4b:d3:31:
7d:5e:b3:c1:58:3f:d9:50:73:b7:3b:bd:ad:39:d3:
9e:d6:0b:24:3f:45:eb:38:33:71:25:79:c2:f8:6a:
ec:d9:f7:61:0f:d6:32:68:07:3e:99:04:95:3c:e5:
f6:e2:8f:b9:07:2f:8a:7b:57:24:ed:c0:76:ee:8c:
0f:76:fc:fc:fc:5c:a0:cf:74:b5:cf:52:02:96:80:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:7A:13:A3:CC:1A:01:3F:DC:D3:67:A2:00:55:F5:3D:DE:2F:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E28282609B11F09633A392DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:99:54:53:11:e5:d7:d3:20:81:80:3d:b8:6e:03:5d:02:13:
39:88:ec:5c:a7:19:28:95:07:c2:c6:7a:e0:36:b4:1b:44:72:
e6:59:2f:06:e0:10:7f:4e:43:6e:5f:c1:45:0a:e5:39:8e:c9:
01:0d:5c:b4:e0:17:12:f3:4f:54:21:7f:53:32:07:cc:b6:fc:
a2:14:fb:e9:55:40:90:63:55:c3:b0:c4:00:c6:51:93:9d:7f:
a3:22:67:32:89:4b:27:f8:3f:4d:a4:40:1f:61:b4:a1:27:fb:
96:fd:10:c2:13:fe:90:98:22:3d:0c:47:1e:b6:55:4b:68:90:
c0:71:2e:65:95:bb:12:e2:0f:e3:fe:2e:91:d9:a8:85:65:bc:
57:98:c3:07:f8:18:c1:b2:53:7c:9e:81:d1:d2:c9:3c:05:bc:
ec:e9:95:dc:5a:1b:ef:4b:f4:74:42:f1:72:8c:c6:9e:fc:09:
7d:a4:03:97:bb:ed:94:37:b2:59:3b:ea:9d:14:7d:b3:b2:00:
cd:3a:f3:de:a2:7f:50:2f:21:28:d9:aa:cd:d6:48:07:52:29:
d7:0e:10:bd:8d:10:46:c7:9f:71:93:57:68:15:12:14:83:da:
3a:4b:8c:19:ee:46:52:8a:4b:41:1b:ee:e8:1b:9f:e0:59:6f:
13:03:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:37:19 2025 by rpki-client