Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15268F9A510C11F08D5753F3DAE4EC9C.roa
File: 15268F9A510C11F08D5753F3DAE4EC9C.roa (raw, json)
Hash identifier: vD7ki1UD5YHb3UcdcWhojqT5oHcihhMjkAKd6Svo+pw=
Subject key identifier: 4E:59:BD:E7:41:57:DB:C9:C4:B2:71:4E:2A:68:05:75:EF:46:58:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018874
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15268F9A510C11F08D5753F3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:01:19 +0000
ROA not before: Tue 24 Jun 2025 15:01:13 +0000
ROA not after: Tue 05 Aug 2025 15:01:13 +0000
asID: 202656
IP address blocks: 154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100468 (0x18874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 15:01:13 2025 GMT
Not After : Aug 5 15:01:13 2025 GMT
Subject: CN=685abdbf-905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:6e:4f:75:41:61:33:b5:f1:1f:86:be:65:
69:78:06:a0:1f:07:d3:96:d8:cf:c8:8a:ec:62:c0:
2a:6f:ff:5d:10:ec:36:ab:b8:51:a5:fe:d6:d0:0c:
27:ba:bd:8a:00:af:1d:75:00:cf:cf:c3:15:e1:c8:
28:58:46:0e:07:e2:8d:4b:02:6d:b9:dc:91:1a:d0:
02:7a:c1:17:a3:5e:d1:aa:47:08:e2:62:f6:be:06:
79:fb:6b:04:21:62:02:25:ea:f0:b6:94:e2:6f:a3:
dc:a0:53:b3:64:83:8e:98:55:c4:6b:84:9a:fe:cf:
18:d6:f7:1f:1b:21:20:ad:ab:74:56:2d:b3:9e:9f:
54:69:fb:c2:b4:44:b8:e3:98:11:e1:99:bf:b7:b0:
1b:6f:20:d4:d0:bb:93:87:65:17:c5:87:79:43:81:
82:e1:8e:32:82:cb:f5:1b:62:b6:7a:24:0e:de:50:
98:52:2b:26:4c:75:09:62:d7:93:c2:f8:d1:53:b4:
46:1b:d6:ac:b2:9e:27:42:0a:98:fa:82:e5:9f:6e:
ae:ef:47:a3:32:36:0a:ea:3d:81:2a:e2:6f:7e:38:
96:a3:03:bd:50:a3:fc:3f:2f:af:ef:89:d3:cc:1a:
d3:d6:e4:71:a1:b3:20:ea:ad:04:fd:a9:5b:16:29:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:BD:E7:41:57:DB:C9:C4:B2:71:4E:2A:68:05:75:EF:46:58:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15268F9A510C11F08D5753F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.26.0/24
154.218.31.0/24
154.221.50.0/23
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
cc:b1:5b:ee:19:db:c0:49:ba:f0:d8:91:fc:1e:b2:53:db:6e:
d2:fb:a0:96:0b:77:01:27:63:82:38:f6:b0:e7:f2:23:75:54:
45:0b:ae:18:62:6c:1b:55:a1:27:56:a7:e5:6a:1a:d7:27:5f:
2e:9a:b2:ec:67:0a:0d:c1:56:da:44:f3:04:2e:f1:bc:e9:96:
a0:06:26:2c:44:c7:bf:cd:6a:aa:e6:f6:1c:f8:e4:cd:77:62:
92:61:1a:ee:b0:39:d1:d2:05:aa:ca:01:71:06:dc:a2:f0:e2:
55:68:bd:63:0d:9f:ba:0e:b6:70:75:22:c2:48:75:84:67:79:
01:c7:1f:19:87:d5:28:c6:64:86:18:6f:35:59:c1:0e:71:05:
2c:02:6f:ec:ab:b7:f7:d5:af:85:34:cb:32:98:5f:09:d3:f1:
5f:27:f0:12:f7:fb:00:54:b9:c2:3f:20:af:dd:24:8b:63:ad:
f6:50:95:bd:fe:04:a5:14:d7:88:f5:0f:11:0c:01:23:3f:8b:
b7:f3:b1:fe:8b:4b:6c:e3:65:4a:bf:44:7d:ee:61:5a:a3:b7:
60:91:d9:62:20:61:7b:9a:d5:ec:82:d1:c4:02:20:92:1b:5a:
2e:c3:9f:a0:3b:24:d0:82:c3:a6:00:e2:35:da:e0:46:2d:6f:
a1:61:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:33:50 2025 by rpki-client