Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8136848A58D511F080E8D89CDAE4EC9C.roa
File: 8136848A58D511F080E8D89CDAE4EC9C.roa (raw, json)
Hash identifier: mmWDfAnhvR7uMabvoiys6v+ohg/TQ6OqjQMrCV4aJkE=
Subject key identifier: 8A:41:31:7A:E3:29:F0:5D:F0:12:A8:97:66:25:B2:45:99:9E:BD:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8136848A58D511F080E8D89CDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:50:47 +0000
ROA not before: Fri 04 Jul 2025 12:50:42 +0000
ROA not after: Sun 12 Oct 2025 12:50:42 +0000
asID: 20473
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100954 (0x18a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:50:42 2025 GMT
Not After : Oct 12 12:50:42 2025 GMT
Subject: CN=6867ce27-6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:0a:f9:ea:74:14:97:14:b0:4b:b7:94:02:
30:e6:a0:b0:3b:89:53:f6:c7:5c:eb:e5:ee:15:0f:
d7:1c:39:0f:12:34:1b:39:ec:b9:76:94:b8:40:2a:
f0:a0:e1:d0:b7:be:c8:e6:41:cb:1c:01:44:af:90:
b1:fa:c6:36:38:10:9e:fe:7b:db:7b:10:9b:6a:ac:
19:0a:60:f9:64:65:d5:e9:d9:a2:20:8f:58:84:25:
b3:ab:c7:b3:65:4b:59:52:8c:28:cf:8c:a6:a3:1a:
c8:4d:47:cd:2c:ef:9c:91:9d:80:da:aa:24:f2:64:
7d:22:45:6a:bb:29:23:59:e3:86:35:13:b4:59:bf:
a3:67:9b:de:ff:11:a9:64:60:61:2a:b2:1e:f0:8d:
4a:33:01:12:c4:8b:f8:a8:5d:ff:a2:5f:2f:62:62:
58:fb:17:ba:65:08:0f:f1:fa:5f:26:b9:b4:6b:3f:
7e:d5:e3:fc:8a:4b:c7:ca:87:9b:f3:b1:49:fa:16:
61:db:08:03:38:38:ee:9a:d5:3a:66:f7:c6:03:6d:
90:4d:39:11:bc:d3:b8:45:92:59:92:90:e3:ce:b2:
b8:4e:bb:94:b8:73:00:34:5c:b1:c1:15:0e:02:d8:
69:b3:77:54:d8:38:3b:d8:e0:29:f7:2b:a4:0c:3e:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:31:7A:E3:29:F0:5D:F0:12:A8:97:66:25:B2:45:99:9E:BD:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8136848A58D511F080E8D89CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:47:04:c5:9c:f1:7c:e2:7a:88:5b:39:1a:94:1b:94:40:c0:
f0:e5:30:c7:0a:ec:05:ae:64:22:2a:23:e5:e2:2e:6a:4d:9c:
57:51:a0:e5:17:d8:c6:fe:2c:95:50:3d:d4:f6:77:a3:47:9b:
2b:8d:7d:b3:49:72:43:89:15:87:ed:93:95:bc:6b:3d:1e:b6:
52:33:cf:e2:12:d6:3a:28:76:10:45:4a:05:6e:ed:0a:93:3a:
78:8c:2c:f0:ff:36:78:f9:76:ce:3b:33:82:08:b3:6e:5a:5c:
38:d5:97:d1:6d:bf:25:cf:3b:5c:34:f3:18:a5:56:11:04:52:
e5:0b:56:9a:f7:cf:db:08:ec:03:6a:76:68:96:5e:64:45:0a:
52:f8:d7:b8:01:eb:95:79:58:ea:38:4e:3a:a1:39:d9:41:11:
d8:8c:3e:ad:5b:8c:e9:2b:48:21:98:cc:1f:e0:39:6c:9b:f5:
4f:cc:c4:9d:84:25:7b:c9:c6:5e:17:b1:45:70:55:c1:61:f6:
f6:f5:10:9e:11:40:aa:19:1f:58:89:86:6d:d4:56:c8:b7:40:
b0:97:04:12:57:5a:7f:a4:71:76:ea:eb:28:d3:28:af:ac:00:
14:0d:b0:a2:14:1a:d6:b9:2e:3f:28:37:df:4f:2b:d6:e4:1a:
32:13:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:29:22 2025 by rpki-client