Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF4FE2866B911F0A20369F5DAE4EC9C.roa
File: 1DF4FE2866B911F0A20369F5DAE4EC9C.roa (raw, json)
Hash identifier: mUsRcrhWSHX/OGMmbzi7EVk970oa3wRwHZCFq+ByovQ=
Subject key identifier: E2:BA:49:4E:61:D1:75:43:60:9D:FE:A8:46:78:3D:DA:63:58:5C:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF4FE2866B911F0A20369F5DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 05:02:51 +0000
ROA not before: Tue 22 Jul 2025 05:02:46 +0000
ROA not after: Tue 29 Jul 2025 05:02:46 +0000
asID: 271990
IP address blocks: 154.223.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102055 (0x18ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 05:02:46 2025 GMT
Not After : Jul 29 05:02:46 2025 GMT
Subject: CN=687f1b7b-e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:c9:09:09:12:94:f8:f8:3c:51:6f:ad:74:
40:91:ff:41:49:42:84:72:b7:67:fd:75:75:b3:7e:
0c:5c:58:94:a4:4c:f0:f7:91:b2:83:27:f8:95:10:
8f:71:5b:38:5a:32:7b:46:cf:9a:68:2f:bc:22:59:
42:2c:7f:69:10:6b:a5:f9:5d:05:22:df:dd:b8:4d:
29:63:32:f8:7b:9a:ad:19:43:c8:ce:99:28:b9:05:
39:60:aa:eb:56:bb:98:dc:d3:f8:84:bc:6b:8b:0c:
d0:7f:06:5d:80:60:df:c0:78:5f:11:89:bb:5e:24:
6d:f0:cf:a8:3f:08:6e:81:fc:00:37:1d:f4:35:d9:
c9:98:09:89:a7:7b:44:5a:63:94:c4:86:27:d4:2c:
82:17:54:73:26:d2:a2:a6:11:26:4e:11:ea:64:48:
68:fc:14:5c:fb:aa:22:80:8c:78:27:4e:ca:0a:27:
8a:10:e6:4c:05:54:f4:ad:2c:c2:d1:47:5a:d2:99:
4c:0d:27:34:74:d5:7b:49:3b:e1:03:01:d7:f0:2e:
53:82:65:da:6f:a2:f0:39:e8:14:3b:58:ae:2e:0e:
9b:33:81:db:f6:84:75:f7:ef:d3:71:17:44:5a:77:
87:42:7a:62:3a:44:9a:71:bd:ac:f5:92:10:68:67:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:49:4E:61:D1:75:43:60:9D:FE:A8:46:78:3D:DA:63:58:5C:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF4FE2866B911F0A20369F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.128.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b6:d3:29:59:11:59:ef:cf:4c:99:fb:87:79:0c:b1:15:29:
c1:7a:cf:4e:63:e9:90:fa:ae:41:8c:3d:63:90:7e:54:5d:80:
7f:7b:36:0b:5a:e0:8d:0b:1b:db:a5:2b:a8:ab:bd:75:fa:69:
0c:4b:90:83:d4:12:a3:55:3a:d3:09:ae:5f:75:25:0b:58:b0:
de:49:ea:5e:a8:2a:95:12:f8:30:7e:df:f1:c5:32:26:8c:16:
92:79:93:d7:3e:c0:0e:af:59:1f:7b:58:31:c9:81:46:d7:00:
d0:aa:d0:07:b4:99:e3:dc:67:24:40:f1:bf:4a:58:55:77:5c:
cf:21:d5:28:50:bc:f1:d9:18:51:87:b1:0d:69:2b:c5:7e:7d:
45:54:cb:65:4b:17:6b:f3:92:60:03:0b:4b:2b:c9:b4:55:01:
47:88:fa:99:92:4e:c6:23:c7:d5:b9:9b:f4:61:3d:6d:76:62:
31:cb:37:f8:bf:c2:5a:66:dc:b5:8f:76:3b:3e:5c:df:54:04:
81:c6:91:b5:0a:7f:1b:ff:7c:2e:c5:71:c8:b6:01:40:3c:dc:
c0:53:c2:25:9f:6c:92:4c:34:d0:95:a0:99:5e:2a:96:5a:05:
08:0d:39:69:1e:52:f5:63:62:29:b3:41:72:8d:d0:a4:77:3e:
5c:bf:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:41 2025 by rpki-client