Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F12C0BE85D7111F0901E17AEDAE4EC9C.roa
File: F12C0BE85D7111F0901E17AEDAE4EC9C.roa (raw, json)
Hash identifier: hUNT47Kjvjj2zZbowYnDCEpGxwaMFM+BYDrac9W9ajA=
Subject key identifier: DE:24:54:BC:50:AC:45:1A:27:01:C4:C9:49:2C:03:79:DD:7C:10:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F12C0BE85D7111F0901E17AEDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:40:41 +0000
ROA not before: Thu 10 Jul 2025 09:40:36 +0000
ROA not after: Sun 17 Aug 2025 09:40:36 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101684 (0x18d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:40:36 2025 GMT
Not After : Aug 17 09:40:36 2025 GMT
Subject: CN=686f8a99-5843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:18:93:ba:77:74:72:c8:b4:9a:04:e1:37:
e1:cf:ee:a0:6f:56:d7:80:59:45:e1:45:27:d9:8f:
37:f7:e7:8c:6d:1f:68:ee:b8:08:d5:71:2e:d6:c0:
c6:b5:8a:5f:09:a1:2d:c0:da:c5:a2:93:78:7e:72:
04:91:56:62:97:44:ac:f8:f2:ea:f4:42:60:7b:71:
ba:ba:65:85:f3:b8:2f:b4:48:2c:66:9e:f9:0f:37:
7b:5b:55:78:db:23:e8:d5:9a:97:da:c0:36:77:0e:
71:0f:e4:8d:03:d1:1d:1a:2c:9a:c7:93:4b:1f:e6:
cc:36:0d:6a:c1:4e:83:c2:ca:52:78:54:28:94:7f:
1d:de:d3:bd:2d:11:67:74:19:0b:dc:43:e2:21:af:
71:e1:a5:4c:1b:2b:fb:0e:82:ed:c6:2f:90:bd:9d:
6c:a3:93:04:73:49:44:f3:b1:ed:bd:88:53:eb:b4:
04:60:a4:65:57:bd:d6:67:26:93:ac:8c:1f:5d:59:
4e:b6:33:da:76:b9:c7:92:f6:1c:3a:74:fb:f6:a8:
97:b8:6a:89:53:06:fd:05:67:a7:30:25:35:4a:82:
0d:f4:59:13:b2:2e:4a:6d:fe:68:64:5f:d1:a6:34:
fa:9c:13:0d:6a:b1:e4:24:cb:71:05:9b:e9:c9:ab:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:54:BC:50:AC:45:1A:27:01:C4:C9:49:2C:03:79:DD:7C:10:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F12C0BE85D7111F0901E17AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ab:9a:23:af:f4:c2:87:99:b1:a4:44:9c:57:9c:f4:42:ea:
d4:45:ac:3f:48:81:f8:6c:5b:03:bb:0a:a0:0f:b7:bb:11:be:
4b:41:b5:b9:58:c4:d4:53:99:47:f0:9d:ae:fd:38:a9:1e:33:
2f:58:88:4e:5d:3d:80:f6:d1:31:89:ca:f9:70:e6:14:0b:ab:
78:23:3a:fa:61:ed:a1:9a:c1:26:ca:f5:72:dc:b9:93:08:e2:
b8:90:7f:83:80:32:47:9f:e9:89:99:b7:98:66:7c:d5:9d:b0:
d3:4f:b8:01:19:f5:66:d3:7a:16:3f:23:09:88:a9:c1:73:7d:
65:8e:43:77:84:ec:b3:93:b2:65:7a:50:a4:7e:d5:c3:ec:03:
49:a3:51:b1:cd:e5:7f:d5:00:35:b0:f5:6d:49:4e:04:c2:4c:
69:e1:20:82:fa:d3:de:ed:51:e7:81:5a:fe:4c:22:fa:9a:16:
ef:4e:b4:99:ab:58:f2:91:1a:55:b4:4a:b7:13:33:ab:6b:51:
ca:97:19:13:03:86:de:1a:75:ab:6b:4f:d8:6e:d7:52:2f:62:
d8:6d:3d:28:a4:b1:e2:45:fe:88:e3:45:4f:1e:37:7b:2b:27:
eb:0b:9c:b2:07:c0:96:24:73:a8:5f:0b:e5:b6:2a:3f:c8:a4:
7a:ec:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:20 2025 by rpki-client