Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A8BEBE841F211F0B53D04A5DAE4EC9C.roa
File: 1A8BEBE841F211F0B53D04A5DAE4EC9C.roa (raw, json)
Hash identifier: 7XupfbC1zC+0Nbnn98Lr3d29lc7GO38JExHPT1ZM6MY=
Subject key identifier: 8C:95:E2:CA:1A:C9:1E:3B:0D:BB:85:60:1A:1D:0D:15:EF:23:8B:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018500
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A8BEBE841F211F0B53D04A5DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:47:34 +0000
ROA not before: Thu 05 Jun 2025 09:47:28 +0000
ROA not after: Sat 05 Jul 2025 09:47:28 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99584 (0x18500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:47:28 2025 GMT
Not After : Jul 5 09:47:28 2025 GMT
Subject: CN=684167b5-49c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:69:5f:9f:5e:84:80:51:75:81:77:31:ec:
44:41:3c:55:8d:be:c8:d1:12:a8:ac:41:dd:fd:d8:
60:1b:de:1b:f9:44:53:0d:fa:6c:60:19:21:06:25:
7f:6a:d8:3f:5d:9d:13:80:84:a0:df:2f:da:22:74:
7f:59:e7:ce:c9:a0:b0:6b:bd:a6:c2:99:25:ee:36:
4d:fb:ff:25:39:68:af:07:a5:27:5a:fe:9e:22:5f:
1a:6b:77:af:6d:23:66:3f:0b:2e:2f:26:96:8c:b5:
00:e2:af:76:55:47:61:db:3b:af:da:c5:eb:69:0e:
d7:72:d6:f3:bd:a3:2c:5d:88:d2:3b:e0:4d:d6:ec:
bc:e6:a8:c2:f6:eb:1c:84:4c:66:0c:80:fb:d9:c5:
a2:4f:8a:d4:66:00:d1:77:34:f0:25:a3:98:ce:19:
28:18:25:b5:94:de:0a:8a:26:3a:6a:2d:fc:c3:a3:
a2:41:f5:f2:73:89:3b:cc:6d:b8:8b:7b:91:a7:67:
7f:1b:93:54:a5:8c:96:37:e4:8e:38:85:92:ed:9c:
ae:ac:d1:72:8d:00:e0:f1:00:d1:91:d3:27:8e:72:
f1:51:5e:50:f1:47:ac:fe:2a:88:44:6e:ee:c8:96:
5e:91:5c:ce:fa:d4:94:be:91:bc:b4:67:6b:37:46:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:E2:CA:1A:C9:1E:3B:0D:BB:85:60:1A:1D:0D:15:EF:23:8B:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A8BEBE841F211F0B53D04A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f8:7c:dd:69:1b:ee:7e:6e:db:65:9b:12:8a:0c:a3:ac:0f:
b1:d2:2e:02:fc:63:45:cb:63:15:78:81:ac:e8:da:41:10:15:
3e:eb:40:c0:a6:da:70:56:8a:51:1d:f0:95:97:f1:87:6a:c1:
f2:a2:b1:39:f2:ed:2c:e7:10:c5:1f:cf:e9:9a:b7:a3:9d:c2:
4c:6e:9a:d2:c3:3e:ed:2b:3a:57:0a:95:61:fb:a3:22:9c:c3:
a7:c7:47:de:b4:04:c8:27:94:ef:53:d8:81:07:5d:6a:80:11:
92:e1:74:2f:a5:ce:f1:89:3d:b6:6a:5e:aa:44:13:87:aa:78:
96:39:1e:3e:c5:cb:e2:c6:66:26:af:1d:52:ef:11:61:1f:fc:
7b:87:5f:d5:a7:d9:40:0e:2a:3f:35:01:6c:60:d7:64:a4:c5:
3b:40:c1:14:92:83:00:c6:85:ac:35:be:6d:b5:ff:4a:5b:52:
ef:67:4c:52:be:bc:ca:18:5d:4a:06:10:da:f5:0f:85:27:78:
6a:35:95:8c:f6:67:3b:80:ad:db:08:8e:46:ee:77:cf:7a:33:
91:ed:31:5b:64:b5:60:6f:56:61:05:54:0c:a4:c6:73:b7:bd:
a8:82:df:37:9b:a1:86:6e:7b:bf:81:50:74:c3:85:54:99:e8:
f8:e5:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:59:45 2025 by rpki-client