Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191204D059E111F0865DABE8DAE4EC9C.roa
File: 191204D059E111F0865DABE8DAE4EC9C.roa (raw, json)
Hash identifier: BXy/fueOq5EUfrSxeuAG78k9PpBqqVO7JMUkRd7RuJY=
Subject key identifier: C1:32:56:57:BE:C0:C4:88:71:FF:41:9A:1F:E3:48:16:E5:37:D2:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191204D059E111F0865DABE8DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 20:46:18 +0000
ROA not before: Sat 05 Jul 2025 20:46:13 +0000
ROA not after: Fri 17 Jul 2026 20:46:13 +0000
asID: 54600
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 23:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101210 (0x18b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 20:46:13 2025 GMT
Not After : Jul 17 20:46:13 2026 GMT
Subject: CN=68698f19-2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:ed:f3:25:45:f4:0f:7e:4b:a3:f2:2f:0a:
d0:9a:17:2e:24:30:30:3a:e7:f5:ff:e0:b4:20:dd:
47:93:84:45:fd:c2:17:0d:0e:e6:91:32:bc:99:84:
84:85:9a:97:63:14:50:05:d4:fb:0e:83:41:10:d6:
9d:2d:8e:97:21:e4:b1:9c:ca:61:00:09:9f:2b:ec:
4c:20:da:2b:57:8a:0b:99:23:8c:64:ac:d1:8b:d8:
39:a8:48:06:b5:12:3a:1f:da:84:4a:01:f1:78:4b:
8f:cc:95:07:09:26:5e:42:69:59:70:9d:fd:71:cd:
d7:cf:70:2b:c8:8b:29:99:da:c1:d8:02:37:2c:67:
f0:56:da:30:33:54:db:86:7f:20:06:e7:41:98:b2:
81:5c:42:4c:4c:a6:00:b5:a7:05:b2:df:3d:76:1b:
7c:35:ad:6c:9b:0c:84:f4:a8:cb:f4:cf:51:43:44:
f2:08:10:1f:17:23:1c:b1:de:4a:77:5a:7e:6f:af:
94:3b:2f:7b:14:73:df:58:97:16:6e:ea:03:a4:22:
50:de:24:6e:7b:3d:f1:e6:cb:12:35:28:97:a9:2f:
62:e5:58:8a:fa:d3:b7:11:e4:30:d2:d1:58:d0:37:
ca:4b:a1:0d:2c:50:e7:72:d3:99:67:27:0b:4b:cf:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:56:57:BE:C0:C4:88:71:FF:41:9A:1F:E3:48:16:E5:37:D2:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/191204D059E111F0865DABE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:66:e8:dc:be:d6:f6:28:67:e1:7d:2e:95:6b:18:dc:bc:3b:
d7:9b:ea:24:67:88:a8:a6:77:7a:8f:41:0e:f3:41:a6:1e:9e:
e5:5a:35:2e:f5:34:db:ba:0d:61:6b:de:79:1f:b2:2e:4b:41:
f4:f9:6b:e1:06:b7:4b:6e:8d:b2:72:98:4e:a3:ca:43:14:f1:
77:a5:cf:4c:5c:a2:58:44:6c:7e:4b:db:c4:f8:60:96:46:a8:
a7:1a:a0:2e:2c:e6:2b:f1:9f:e9:0c:2d:56:7b:8c:60:8d:af:
33:d6:c8:d6:48:44:97:02:d6:29:ec:53:ce:81:6c:f0:0c:e4:
2f:e4:00:7a:d2:43:98:59:af:7a:84:46:27:2d:21:3c:bd:f0:
c2:6d:2c:db:55:61:72:42:8b:21:3f:5d:69:88:89:41:5d:6b:
63:b5:0b:0d:ec:75:82:1a:17:00:6f:3f:85:78:1a:b5:db:12:
cb:0d:51:ab:c4:02:95:28:d2:7d:40:0f:1f:71:bb:64:b5:e6:
87:c8:41:36:7f:a2:4c:4b:e4:cd:70:47:24:65:ea:30:46:d7:
0c:ff:e7:a6:55:f2:64:2c:66:b9:f5:0f:4d:e5:9b:79:ef:5d:
3c:7f:67:d6:bc:16:a6:da:1b:e0:2f:13:f9:c6:6d:f0:01:01:
d6:5d:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 01:43:29 2025 by rpki-client