Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F07464DE411F0B18A7BF5DAE4EC9C.roa
File: C23F07464DE411F0B18A7BF5DAE4EC9C.roa (raw, json)
Hash identifier: L/IcqK2e54fUanwTztXC4QdeNMGTQoIvLAvF3fW1Nkw=
Subject key identifier: B1:07:5C:5A:E9:60:96:19:A2:FD:DE:17:28:82:AF:5C:EB:A9:74:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018797
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F07464DE411F0B18A7BF5DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 14:42:16 +0000
ROA not before: Fri 20 Jun 2025 14:42:11 +0000
ROA not after: Mon 28 Jul 2025 14:42:11 +0000
asID: 57043
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100247 (0x18797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 14:42:11 2025 GMT
Not After : Jul 28 14:42:11 2025 GMT
Subject: CN=68557348-573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:39:f6:13:f9:e2:cd:9e:20:f0:de:4e:7e:
91:5b:8a:09:eb:73:a6:d6:41:80:3c:89:eb:39:64:
1e:1a:f9:32:e7:90:e4:bc:7f:46:4e:26:9a:2c:9a:
1e:71:b2:c0:b6:42:85:3e:f5:73:78:bd:dd:25:33:
58:5a:ce:68:da:77:de:67:ef:d9:e6:08:e2:6f:de:
6f:3d:50:c0:a2:85:4a:d0:72:3f:cc:70:d9:4a:d6:
1a:28:64:44:98:25:17:18:54:7f:14:54:e5:aa:78:
4d:0d:f2:db:e3:e7:fd:41:fa:87:dc:1c:4a:79:bd:
9d:8d:a0:8f:73:3a:14:7d:92:6d:42:e1:9f:f2:96:
bb:93:26:e8:5e:85:e2:b4:48:0a:cb:70:ac:f4:46:
21:5e:8e:58:e0:eb:3c:6f:ed:1b:af:e7:b8:29:e9:
dc:fa:cc:37:f3:cd:91:92:08:d9:c2:62:0b:92:35:
80:f7:90:13:7c:8e:ff:38:ae:31:c5:72:42:ca:2c:
e7:68:75:01:cc:fd:24:41:1e:7e:5f:7a:4a:59:43:
1b:25:67:da:4e:17:7d:58:6c:ed:4f:d2:84:2b:d3:
b6:22:96:6e:29:bc:31:40:b2:ad:66:38:0c:82:fc:
3a:6f:71:10:71:a6:dd:84:1f:af:49:f0:23:af:e8:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:5C:5A:E9:60:96:19:A2:FD:DE:17:28:82:AF:5C:EB:A9:74:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F07464DE411F0B18A7BF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1e:0f:b2:cf:da:d0:70:38:cd:37:55:00:d4:c7:3a:fd:0b:
31:c2:0d:94:c5:b1:66:d4:20:bd:c1:73:0c:d2:da:3e:49:54:
8f:8b:db:4f:6a:c8:8f:2b:52:da:5a:78:7b:ce:25:5d:0a:36:
44:fc:bf:0e:3a:99:c0:f7:33:53:19:8f:4f:de:dd:a4:0e:d3:
52:20:9e:47:84:ee:26:32:a0:a6:e7:89:b2:0a:82:ae:62:ef:
32:07:5a:cc:bc:aa:59:7d:eb:cd:d8:fb:da:6e:c2:ed:08:46:
52:b5:47:22:1b:9f:d5:98:77:2e:bc:6f:6f:93:e5:6a:52:32:
e3:04:40:a8:9e:3b:ea:08:28:98:81:21:7f:93:8d:5d:62:01:
7a:b0:bd:c7:30:77:21:86:17:f6:c3:de:04:a7:0d:d3:e2:4d:
d9:d2:90:cc:19:8c:9a:40:95:fa:3b:7c:3a:6f:b9:cd:19:1d:
4c:cd:10:97:fc:69:2c:15:72:26:9e:25:2f:84:66:f5:22:75:
6f:25:70:30:88:7c:ef:20:7b:a1:c9:dd:fb:66:84:4c:6e:71:
3d:d7:6a:c9:18:33:67:0a:38:87:53:28:2d:a8:88:86:03:65:
e4:8a:87:af:29:f6:59:da:3a:35:cb:c9:b5:ee:68:bf:dd:52:
fa:c3:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 08:55:11 2025 by rpki-client