Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC171D2C624911F0A39A3483DAE4EC9C.roa
File: FC171D2C624911F0A39A3483DAE4EC9C.roa (raw, json)
Hash identifier: tvgEvoAziyBcX//MG6cPwPP6PpA7dek5BNpGpcY07R4=
Subject key identifier: E2:73:BA:04:3C:78:E7:EB:2D:83:89:36:32:B0:B4:48:51:38:15:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC171D2C624911F0A39A3483DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 13:37:15 +0000
ROA not before: Wed 16 Jul 2025 13:37:10 +0000
ROA not after: Fri 25 Jul 2025 13:37:10 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101893 (0x18e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 13:37:10 2025 GMT
Not After : Jul 25 13:37:10 2025 GMT
Subject: CN=6877ab0b-4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:ae:73:73:a9:4a:cc:60:69:17:06:96:55:
bf:86:e0:18:f4:aa:fa:6e:fa:1b:32:ec:0f:3e:6e:
61:ba:a6:8b:59:42:44:8c:d1:2c:11:e5:17:72:fa:
0e:fa:16:a6:e2:5e:f4:4d:b0:ab:f6:aa:46:50:3c:
20:8d:eb:87:a5:51:5f:8c:7e:e0:51:67:d5:fb:e9:
08:b8:1a:26:a5:84:64:11:71:80:ff:da:e9:08:c4:
b9:92:82:99:70:ad:4a:b6:37:98:f3:9b:bc:41:99:
49:6c:87:59:fb:28:35:02:7d:8b:2b:ee:13:e0:36:
4f:2e:75:21:c7:9d:82:ce:d3:44:07:1e:25:52:15:
ff:f1:3e:ee:a2:33:2b:9f:9b:97:ce:32:7c:d7:98:
b7:c6:9b:0f:fb:02:1d:8c:fe:93:a0:e6:2b:30:ff:
fe:56:29:8b:05:7a:09:2b:0d:55:0e:be:bc:e4:33:
88:9b:b9:35:2b:af:12:85:50:03:31:50:47:d3:fe:
79:2d:8b:c0:b0:7d:37:ed:3a:49:0e:7f:79:98:6b:
34:af:d7:87:40:a3:83:18:32:ca:0b:82:52:63:ca:
ec:74:37:b6:c4:94:e9:f6:24:f9:89:7e:90:01:fc:
e0:0b:e1:3f:f8:53:2f:ee:a2:ec:2c:43:bf:2d:ac:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:BA:04:3C:78:E7:EB:2D:83:89:36:32:B0:B4:48:51:38:15:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC171D2C624911F0A39A3483DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:6d:de:b4:c3:2a:4c:a4:87:59:c1:31:cf:4d:e6:95:e9:07:
71:ed:69:06:94:23:93:b2:ca:ba:a2:78:08:bc:6b:5f:e8:fe:
98:5d:0b:48:a9:d9:c3:95:fb:02:1d:b0:89:ae:49:72:03:61:
52:12:f4:01:62:e2:e9:d8:b2:50:bb:5c:85:47:e6:12:0a:f4:
3c:ef:77:79:79:ff:3d:1f:5f:6b:ce:4f:30:26:d5:78:3c:a4:
ce:59:6f:a2:11:7e:35:59:6f:f9:b5:37:3e:90:38:3b:af:bc:
2d:d8:3b:19:d5:5b:51:f0:6e:01:ab:e1:dd:85:ff:b2:70:6d:
85:ab:2b:11:28:e4:50:8e:9c:3b:be:2e:e9:60:b5:3b:83:b5:
4b:92:18:72:3e:7e:c7:ad:d3:b7:59:12:59:fb:e0:11:62:33:
84:0b:eb:7f:a8:15:40:9a:0b:4a:21:48:64:0f:87:06:33:5c:
ad:a2:70:e7:42:b2:8e:a0:83:b2:38:8f:a0:aa:ee:d2:ed:df:
e6:c9:43:70:8d:c6:a1:8a:59:2b:54:a0:fc:0b:be:d0:03:ef:
8b:69:c1:64:74:b7:12:aa:2e:47:c0:d2:af:85:8a:aa:cb:a1:
b8:50:64:19:98:c3:73:a8:f6:d2:b0:d8:66:f0:22:a0:2b:6e:
b0:81:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:41:41 2025 by rpki-client