Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF30FF2514011F097C3B2BDDAE4EC9C.roa
File: 0EF30FF2514011F097C3B2BDDAE4EC9C.roa (raw, json)
Hash identifier: XH88opaAVMvR3fxIdr3bsng0lNMJOX3x+Qi5HDMoIf4=
Subject key identifier: 74:38:DA:8A:63:54:CB:3B:96:CA:37:3E:91:42:5E:8C:38:02:8F:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF30FF2514011F097C3B2BDDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:13:22 +0000
ROA not before: Tue 24 Jun 2025 21:13:17 +0000
ROA not after: Tue 05 Aug 2025 21:13:17 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100544 (0x188c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:13:17 2025 GMT
Not After : Aug 5 21:13:17 2025 GMT
Subject: CN=685b14f2-3cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:52:b9:5b:38:5e:f4:15:33:ab:1b:58:08:
93:ac:cf:e3:11:6f:b1:a9:50:9c:60:df:e3:63:80:
e3:ef:75:6a:3f:49:be:b6:23:5c:68:5c:2a:cd:16:
fc:6e:45:44:15:15:68:88:3f:c3:3e:08:57:8d:98:
d1:39:dd:c8:4f:ac:e6:d4:f9:81:f0:d7:b4:ae:52:
e8:b6:9c:51:eb:1f:7c:9a:bd:e9:0f:e7:97:40:bb:
ae:29:50:89:96:46:a9:2e:58:46:cf:23:bb:4f:51:
8d:c3:22:bb:3b:6e:3b:3b:8e:0a:60:74:71:06:a4:
07:d0:5b:5c:5d:1a:09:0e:14:62:ac:3f:bc:30:86:
ae:a2:bc:cf:82:b2:a1:24:d1:8c:41:6c:4e:fd:b6:
c1:49:ce:e4:3a:3c:4e:0c:ec:47:ab:e9:95:4f:a6:
41:55:06:7b:ad:2f:39:d2:32:37:19:8a:51:cf:8a:
5b:f6:d0:c4:eb:48:70:df:f6:ea:1c:4b:96:ff:ba:
57:94:15:0d:3e:10:a7:62:33:10:db:21:c5:c4:f3:
a7:33:18:e9:91:bb:bd:91:29:77:2d:1e:78:33:47:
c0:ac:23:b3:02:32:38:43:13:51:df:56:8b:c7:71:
26:1e:2f:2d:66:5a:0c:7d:5d:d8:bb:0a:b2:16:fe:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:DA:8A:63:54:CB:3B:96:CA:37:3E:91:42:5E:8C:38:02:8F:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF30FF2514011F097C3B2BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:81:7d:e5:67:f4:56:03:a1:08:e6:da:72:f7:3f:1b:ef:13:
68:c7:d6:82:7b:47:c8:b5:d7:26:5d:66:aa:99:22:23:46:cc:
2d:40:c2:87:08:8d:6e:a8:01:f9:28:09:ea:0a:c5:9a:7f:59:
22:bb:a9:92:67:49:82:7a:bd:4d:b8:e5:ee:ce:40:4f:43:4b:
3b:31:60:2c:88:9a:5b:bf:7c:14:e7:9e:b4:c0:98:e9:28:5c:
e9:39:4b:68:70:25:44:d3:9d:f0:f6:b7:a4:12:14:cb:b8:14:
f1:e5:d1:18:e7:10:e0:23:eb:fc:ee:ed:d4:d1:03:28:46:a9:
12:f1:f0:2d:70:32:bb:bb:77:f4:76:b4:10:6a:3e:07:0a:93:
a7:8b:a2:44:4b:a2:c3:22:3a:0b:71:59:ba:ff:53:57:ad:58:
53:af:fe:1e:a2:47:2d:36:1f:1b:0f:f1:0e:c2:e4:a8:61:18:
ae:5c:bd:fe:ba:fd:6c:f7:a0:6d:63:ea:7c:69:10:53:14:69:
70:b2:24:5c:d8:25:8d:3c:13:78:d8:d0:0b:74:3f:a9:6b:2d:
3b:c1:60:58:01:e6:3b:13:74:43:34:67:e4:fc:64:ef:d0:81:
6c:b6:cd:8b:86:f1:96:f7:3f:2d:c6:b3:64:8d:e4:b6:7d:7a:
1a:d9:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:33:33 2025 by rpki-client