Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22C2F26608E11F08440D6C0DAE4EC9C.roa
File: F22C2F26608E11F08440D6C0DAE4EC9C.roa (raw, json)
Hash identifier: u+0gSnfV6QGNB0HOWv/roMlzP1ZrFivAOulEQCWd/8k=
Subject key identifier: B5:4E:46:F6:8E:EB:38:CF:1F:62:4A:20:BF:07:2C:A9:38:CD:1B:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22C2F26608E11F08440D6C0DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 08:45:52 +0000
ROA not before: Mon 14 Jul 2025 08:45:47 +0000
ROA not after: Tue 19 Aug 2025 08:45:47 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101797 (0x18da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 08:45:47 2025 GMT
Not After : Aug 19 08:45:47 2025 GMT
Subject: CN=6874c3c0-a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:f5:ed:5c:b6:9c:4a:ed:10:4b:52:b3:cd:
2b:20:d9:e2:4c:63:ce:4c:c1:24:01:e2:a3:ce:ba:
63:b0:24:af:c8:3f:df:51:48:a4:d7:f7:ca:52:c1:
04:04:49:48:79:19:7a:fe:67:be:cd:95:83:50:4b:
72:d9:91:20:49:d6:50:bf:97:77:03:04:79:3c:81:
28:d6:8a:3d:62:46:21:c4:9f:d1:80:ae:4c:06:3c:
e0:c6:2b:3e:13:d3:dc:9b:7d:93:ba:c7:34:a3:97:
0d:dc:37:25:ee:15:aa:8f:46:be:95:9b:f3:ff:d6:
4d:de:2a:49:3c:b7:5f:5c:8c:e1:fd:1a:bd:47:94:
71:a0:4a:3c:e2:b9:60:fd:f4:6f:1c:be:6f:15:de:
a1:c5:bf:6b:00:42:3f:cc:a5:b3:66:be:4d:d9:66:
1d:18:1d:db:45:8d:32:09:21:9c:31:6e:c1:05:0d:
d8:1f:86:bc:5a:d6:9d:05:f2:dc:23:29:2e:94:5f:
92:f2:78:51:8f:fe:54:39:84:0c:0c:a9:72:c1:67:
ef:9f:6b:52:8f:ba:58:24:37:c4:34:34:8f:16:bc:
08:e2:ce:1c:0f:b8:b7:57:7e:3a:65:9f:35:d9:a5:
3c:65:c9:20:f1:99:ca:cb:67:75:c8:12:d9:0c:a7:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:46:F6:8E:EB:38:CF:1F:62:4A:20:BF:07:2C:A9:38:CD:1B:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F22C2F26608E11F08440D6C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
9f:9f:13:4f:b5:d6:53:a4:06:33:2c:a1:c4:cb:0b:42:17:75:
17:21:51:23:42:d3:0f:f9:e8:f1:f9:d6:b8:8c:75:f1:d9:4e:
0b:f4:ba:dd:b4:4d:a1:55:0a:05:fe:64:70:d2:60:38:44:2d:
63:5f:6b:e9:a0:fc:bc:51:16:c9:cc:9f:97:6a:2b:08:34:16:
c4:ae:39:17:53:58:4e:5c:5d:23:ee:2b:2c:56:a7:b2:08:20:
03:b0:b0:f8:a0:8d:73:c8:1d:6f:e1:72:b0:b0:f1:61:60:18:
2e:b5:c8:1f:26:ef:7d:14:85:2f:f6:da:b5:96:c7:00:7c:4c:
b9:e7:5e:27:1d:e7:58:9e:fa:05:eb:56:58:b7:15:e1:51:ee:
fd:77:4f:c8:0c:ed:31:da:a5:19:7f:ad:dd:6e:a7:e6:02:ae:
33:8d:2d:a2:48:69:0d:e4:38:90:c5:fc:50:61:e1:80:a4:fe:
d9:5e:04:29:a9:21:fb:3d:9c:65:14:e1:a2:92:e0:56:10:dc:
cb:41:43:e9:17:33:11:57:8e:fd:a6:8c:80:79:d6:1e:ec:49:
b6:35:54:df:d3:db:22:75:68:18:9e:5e:67:8e:2d:fa:1e:53:
aa:f8:6e:8d:ce:70:69:04:4f:a6:a9:e2:25:ea:9e:9b:8d:be:
0c:2e:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:39 2025 by rpki-client