Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A44D824CFB11F0AF1CFE89DAE4EC9C.roa
File: 24A44D824CFB11F0AF1CFE89DAE4EC9C.roa (raw, json)
Hash identifier: oq+i+HG/rr7c8fS6q1hOe50aeQq8wLAoTVfziOnpzNY=
Subject key identifier: 50:CD:5E:7D:4E:94:D5:C9:A7:19:C5:5A:E9:BF:8E:B8:0F:22:A3:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018778
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A44D824CFB11F0AF1CFE89DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:49:59 +0000
ROA not before: Thu 19 Jun 2025 10:49:52 +0000
ROA not after: Sat 26 Jul 2025 10:49:52 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100216 (0x18778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 10:49:52 2025 GMT
Not After : Jul 26 10:49:52 2025 GMT
Subject: CN=6853eb57-0770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:ee:e4:07:ac:2d:cc:a9:4d:72:66:76:67:
62:24:8d:84:12:b3:32:54:8d:84:49:cd:e1:c1:8e:
80:6a:51:d5:68:fc:28:85:e3:ed:79:f3:22:10:7c:
ea:06:5e:1b:8b:d5:9a:9a:ca:66:ef:47:77:e1:07:
27:34:82:08:91:ba:f4:30:b7:ff:de:a1:e8:37:ed:
33:32:9b:f8:29:4d:23:3f:3a:70:74:c4:1b:a1:1a:
1e:22:15:6a:74:6d:c8:4f:5f:eb:7a:d1:cc:be:e9:
3b:b7:5e:dc:5d:fd:31:b6:5f:e1:4e:97:f7:1f:26:
39:01:c9:c4:2b:5a:c2:00:a5:eb:2c:e9:12:63:4e:
9d:c1:b2:22:fa:e4:7c:71:d4:f1:82:6c:78:2b:67:
f5:f7:f8:18:be:59:66:65:1c:13:f5:b3:7f:fe:e9:
ea:81:71:ad:eb:13:8a:42:1f:1b:29:c7:06:a6:0b:
ce:32:7b:31:90:f4:29:fa:69:fe:7b:e1:4e:8d:a1:
64:03:5d:77:f2:57:2f:6a:8e:db:58:78:ab:72:c4:
62:56:5d:bf:78:63:d1:06:6a:bb:6d:be:67:f7:5a:
e8:f4:e8:25:82:00:20:42:e4:a9:21:8c:d4:68:bf:
c1:3d:26:c9:76:e1:16:48:e2:e7:28:ce:58:72:35:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CD:5E:7D:4E:94:D5:C9:A7:19:C5:5A:E9:BF:8E:B8:0F:22:A3:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A44D824CFB11F0AF1CFE89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e2:72:de:2e:c5:90:ef:d4:5d:54:1a:1b:3f:43:e9:4f:84:
14:77:15:fd:ad:87:ca:9a:86:59:9f:4c:a7:03:ce:4c:61:82:
83:43:a7:5d:8b:af:fc:f4:c3:f6:14:26:b6:e4:d4:89:8c:4b:
21:32:37:d2:56:49:6b:ad:df:9d:3e:eb:72:6b:d5:96:f0:fe:
6f:c9:fd:a7:9b:9c:eb:f5:e5:fd:53:09:64:ab:6a:55:06:7a:
9e:1b:10:07:eb:f2:60:f5:19:31:45:be:0c:c4:70:a1:13:e1:
cd:56:e3:c5:d9:e3:22:ae:4c:6a:fb:01:10:3c:a9:91:a7:29:
14:5c:1f:c0:b7:a1:4f:f5:56:e6:dc:9e:b2:3b:f7:f3:63:a3:
0f:b6:cb:39:d4:e8:88:1c:a5:85:65:ad:28:99:a9:3f:ef:db:
bd:4a:22:5e:0a:ba:55:49:0a:82:85:0e:a6:c7:68:bd:f0:29:
7f:ed:97:c4:d3:04:3e:5f:08:17:c0:b9:67:b6:e9:e6:9b:54:
56:0c:5a:5a:ed:38:09:d1:33:ce:d2:a9:1b:f3:c1:fc:89:f6:
8d:32:17:4e:6e:86:56:75:09:f6:a0:1e:00:12:57:b0:3c:70:
f8:bd:43:68:af:3d:b0:16:3a:64:a7:79:37:36:90:8c:af:22:
c8:71:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:43:44 2025 by rpki-client