Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6C03864C4D11F0B0546A98DAE4EC9C.roa
File: 1A6C03864C4D11F0B0546A98DAE4EC9C.roa (raw, json)
Hash identifier: zIxdyaOA0jc88jxkomL6EaHGse+pabuSQeDEYW8Gru8=
Subject key identifier: 31:F3:31:F2:74:15:D0:93:30:DE:A2:5E:34:91:ED:C5:35:BD:26:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01874B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6C03864C4D11F0B0546A98DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:04:09 +0000
ROA not before: Wed 18 Jun 2025 14:04:03 +0000
ROA not after: Thu 24 Jul 2025 14:04:03 +0000
asID: 400619
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100171 (0x1874b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 14:04:03 2025 GMT
Not After : Jul 24 14:04:03 2025 GMT
Subject: CN=6852c759-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:f2:f2:3c:39:0b:68:1f:62:e6:15:44:e3:
48:4e:22:63:a1:d2:c5:1a:a4:8c:9d:82:bf:5f:6d:
a6:90:f8:18:ce:c1:cf:9a:e8:4f:ac:ca:a7:25:c7:
83:16:34:1a:88:0d:ad:a0:b1:2c:f4:8a:53:a7:d8:
d6:fd:3f:3e:a9:83:1f:eb:f5:18:85:3d:82:f9:c5:
8e:d4:c4:84:6a:9f:7a:1f:32:3a:b4:79:1d:fb:b3:
84:dd:42:b2:17:c0:8e:fc:13:3b:78:67:9e:0e:d8:
a0:f4:3d:f6:29:9d:02:cc:e2:9e:8f:cb:c5:63:38:
3a:85:6c:2a:73:5a:7d:bc:de:83:d5:83:05:3f:2a:
77:86:fd:ba:0d:81:bc:0b:6f:80:fa:a1:c9:f0:d7:
fd:c4:9e:fa:a3:d8:7b:52:9a:ac:e0:d7:f1:81:34:
37:26:d2:cd:74:9b:87:96:50:07:fe:f9:94:34:5a:
bf:ca:18:6f:dc:b6:e2:45:ba:95:37:40:f2:d1:9e:
80:0e:ac:61:a0:c3:9d:4b:27:65:eb:df:a2:ab:65:
a4:ff:0c:27:34:23:51:d1:46:4c:87:9a:90:fc:c5:
51:13:d4:11:0b:73:b7:0e:e2:6a:0e:0e:27:7e:16:
85:8b:46:4e:40:aa:ad:2c:49:02:5d:d5:ff:e8:54:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:31:F2:74:15:D0:93:30:DE:A2:5E:34:91:ED:C5:35:BD:26:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6C03864C4D11F0B0546A98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0-154.202.127.255
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
3c:ed:3f:3d:d7:d3:f0:d9:19:df:2b:d0:c2:86:1c:40:e4:f0:
f0:ed:a9:97:29:45:a0:61:1b:08:99:c6:8d:ff:49:63:56:e0:
df:3d:92:8a:1b:d1:ac:90:22:7f:62:c3:94:0b:f9:7c:02:1b:
ff:27:ff:d7:80:62:25:a6:a8:58:58:eb:69:c2:94:64:47:34:
5f:c8:98:f7:85:6a:ee:ce:c5:81:55:ec:60:ec:87:f8:2f:20:
07:c3:15:7d:09:23:21:1c:ff:56:d5:bd:ce:e4:0c:d3:94:b0:
80:b0:d1:82:07:43:22:b6:30:3c:36:9f:d0:61:64:39:56:df:
fd:0d:3a:03:34:c4:8f:13:5c:40:4a:c8:95:b0:3a:6d:ab:77:
c8:e4:6d:86:9e:ae:c1:0d:44:6a:82:09:81:34:40:8f:3f:f3:
61:53:51:d4:0a:cf:b6:3b:8f:5d:a6:3b:25:16:ec:f1:e1:e2:
56:48:34:64:3e:d8:1d:1a:b1:14:f4:57:76:71:d1:3e:eb:42:
4d:14:ec:2d:c1:33:73:2e:94:2b:64:94:8b:6b:63:22:23:7a:
df:bb:ec:42:65:93:32:a4:f4:6e:6c:a0:f2:0e:05:3f:13:ef:
ed:d8:ee:5d:c2:bc:ac:fa:d5:4e:2f:48:3f:23:04:8e:d0:1e:
8f:eb:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:22:31 2025 by rpki-client