Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C08C515858BE11F0869EA58DDAE4EC9C.roa
File: C08C515858BE11F0869EA58DDAE4EC9C.roa (raw, json)
Hash identifier: avDqa8s/xciO36nE1UdCKwgg7tGAEk42h8Dl0ktUU7o=
Subject key identifier: FF:74:0F:26:A9:8D:A1:C6:0D:72:B6:C0:78:AC:FC:AD:57:D4:03:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C08C515858BE11F0869EA58DDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 10:07:55 +0000
ROA not before: Fri 04 Jul 2025 10:07:50 +0000
ROA not after: Thu 07 Aug 2025 10:07:50 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100934 (0x18a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 10:07:50 2025 GMT
Not After : Aug 7 10:07:50 2025 GMT
Subject: CN=6867a7fb-f536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:42:db:a1:d0:91:88:56:1e:16:a4:26:f9:
74:4b:55:bb:1b:e9:1b:75:9d:a1:f2:9b:f8:73:c8:
79:87:df:dd:a1:de:ba:2e:88:00:e0:0a:36:05:2d:
8a:9e:0d:5f:0d:37:22:a0:e5:8c:2f:c0:00:fc:43:
1e:ae:81:1c:0f:b4:3f:9f:9e:01:fb:29:23:3e:80:
a7:55:cc:8a:f4:c7:bb:bc:48:96:31:be:06:bb:f2:
1f:c1:28:6c:5a:06:4f:fc:78:d1:f8:cd:24:cc:55:
05:5e:f7:07:76:63:fc:30:87:dc:00:52:5b:53:98:
10:d1:a6:a1:4b:16:27:d5:74:72:02:22:d8:6d:11:
9a:38:63:6f:a8:eb:03:f9:fd:38:30:12:01:62:60:
d6:88:8f:20:2e:d4:a1:89:49:8b:ee:55:e7:ca:e7:
f7:11:dd:fb:a2:b8:9f:aa:46:42:ca:08:b9:14:de:
11:b8:ba:31:be:b9:d0:45:26:4c:64:42:ad:1f:51:
f5:e5:4d:ee:6e:01:0f:9f:f2:dc:dd:a4:4d:8b:f1:
ae:28:74:27:d9:cf:88:71:21:65:9c:0b:c8:d9:17:
6b:e5:db:58:cf:44:70:ba:25:a2:b9:40:6e:49:42:
27:9a:f6:09:67:67:ab:74:a5:9e:85:f6:9a:12:91:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:0F:26:A9:8D:A1:C6:0D:72:B6:C0:78:AC:FC:AD:57:D4:03:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C08C515858BE11F0869EA58DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:40:3e:55:e6:48:3b:a3:ac:8f:ad:10:9a:e5:01:c3:17:03:
e3:13:20:d7:9b:40:2d:73:52:84:48:03:f2:89:72:c0:d6:48:
7b:2c:7a:08:67:d0:0e:d6:a3:08:e2:f4:46:03:b5:28:54:eb:
d0:77:ab:8e:57:a1:fc:0e:99:c4:b4:07:e6:16:07:95:31:6e:
42:9a:a6:12:76:32:bc:f7:08:a9:a6:3a:b4:e4:89:25:6a:8e:
47:62:4d:ed:3d:6e:1d:5d:e7:1b:ea:6c:05:84:a6:54:f0:b5:
3a:da:d3:b2:13:9f:c6:bc:ec:ce:f4:a5:a9:97:e7:8f:ed:9e:
28:eb:0b:10:41:01:f2:24:d3:18:7c:b1:08:19:6d:f6:c8:18:
ad:a2:3c:28:de:b6:1b:21:d5:80:f2:71:60:78:79:80:c9:9c:
b5:d9:c4:3b:18:8f:af:af:17:ff:03:14:be:76:31:e5:8d:9b:
5b:ee:99:57:28:1f:d8:b9:6f:85:f8:71:4b:f8:b4:8e:cd:50:
a3:16:56:a3:c5:d3:fb:a5:e4:3e:09:e2:10:df:48:3b:35:a9:
ed:5e:74:0d:57:63:a4:76:20:dc:06:01:2f:e2:8f:da:88:e6:
3a:ee:16:45:8f:aa:0a:2e:49:08:a9:97:10:13:ce:00:b9:c6:
c1:08:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:50 2025 by rpki-client