Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2376F24E50D811F081E08BA8DAE4EC9C.roa
File: 2376F24E50D811F081E08BA8DAE4EC9C.roa (raw, json)
Hash identifier: OCnydQI2gJVkk5g3aoL1sCJUZ8SgkaQit+3DGk8pjME=
Subject key identifier: 64:AE:3D:7E:54:80:66:BB:18:A0:A3:01:C6:69:77:D2:97:9C:B5:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018836
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2376F24E50D811F081E08BA8DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 08:49:29 +0000
ROA not before: Tue 24 Jun 2025 08:49:24 +0000
ROA not after: Mon 30 Jun 2025 08:49:24 +0000
asID: 23764
IP address blocks: 154.209.21.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Jun 2025 08:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100406 (0x18836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 08:49:24 2025 GMT
Not After : Jun 30 08:49:24 2025 GMT
Subject: CN=685a6699-11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:c3:6b:1d:71:34:79:e1:d5:e2:1f:eb:e1:
6d:14:4d:06:2b:71:6b:82:8c:f4:a9:74:c1:77:03:
ab:7b:00:df:dd:db:16:ac:54:81:a2:0b:99:6f:7c:
e6:f7:68:d3:a0:ec:db:cb:0d:25:33:16:c7:e5:b5:
63:91:c9:79:f0:bd:04:dc:68:8c:37:e3:7c:dd:5e:
04:9f:2a:d5:92:0b:79:cc:ec:7d:fa:bf:7c:1d:bc:
f5:f9:42:e7:31:38:94:61:2a:1d:19:a6:70:2d:be:
78:e0:d7:a6:08:2e:a5:d2:6f:1a:b9:40:58:25:5e:
34:4d:3b:a8:a9:8f:f0:2f:77:9c:11:e6:2e:c6:53:
26:b1:f4:78:2b:94:0c:a4:3c:98:8c:49:55:97:8f:
09:7d:3f:4c:6e:7a:be:31:9f:90:11:41:cf:45:be:
18:04:45:2a:21:fb:64:e0:fd:6d:2c:c8:e8:fc:4c:
60:21:65:0a:ba:b3:d1:f7:bd:3c:93:f6:96:f2:51:
54:f6:e7:1f:dd:17:bb:48:2f:2f:2c:35:7b:c7:92:
f7:ef:8a:6d:af:6d:01:f4:1c:fc:5c:31:0f:48:22:
61:1c:47:48:da:16:25:00:88:31:39:e0:d6:f8:d0:
94:1c:1a:13:d9:56:e7:f3:e4:fd:58:b4:a2:82:db:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:3D:7E:54:80:66:BB:18:A0:A3:01:C6:69:77:D2:97:9C:B5:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2376F24E50D811F081E08BA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.21.0/24
154.209.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:86:e5:88:50:ae:d0:ea:ba:42:e5:79:e0:cb:84:db:59:f2:
8b:e4:e3:fc:62:6b:97:42:3f:c7:b6:5a:00:e1:41:5b:76:63:
18:16:80:30:00:69:64:3a:6c:76:aa:1d:16:cb:33:1a:2b:16:
7a:5f:fa:46:8e:1f:70:d0:fd:69:9b:3c:7f:55:23:0e:ce:7c:
fa:fe:5d:0a:74:ea:53:e5:c4:8f:4d:24:54:7e:8a:f6:9a:de:
b6:37:d1:f0:be:ac:9f:27:0d:b9:b8:4c:39:71:06:b4:3a:70:
c9:48:47:63:93:4a:f9:b3:6f:d2:aa:de:53:8b:20:a0:ba:1f:
5f:e3:41:69:26:5e:88:52:4b:17:5e:f5:32:d9:c4:d5:5d:e0:
6c:3d:a9:18:af:98:3d:d0:d8:e9:d1:00:6e:e3:2c:79:87:8a:
c0:10:b0:f1:16:6a:75:c2:03:c0:1f:31:ff:11:b0:d8:c0:ae:
3d:d8:ca:c7:21:0d:18:7c:53:d7:a7:67:cc:9e:63:77:f5:e9:
6a:1a:73:7c:b3:d5:6a:3b:8c:7b:6b:dc:8b:f4:77:de:49:ec:
7f:f4:aa:da:94:3c:24:92:15:a1:f3:db:77:48:ae:e0:e4:77:
ad:6d:ed:01:c1:2e:c2:64:2b:7d:5c:cd:4a:29:4a:b5:85:0a:
d8:ae:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:52:34 2025 by rpki-client