Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C501627CDA11F08541B1ABDAE4EC9C.roa
File: 24C501627CDA11F08541B1ABDAE4EC9C.roa (raw, json)
Hash identifier: 0BtDtoNCrICmc89hkyhWAICQm9U0/KBX2oDM0q9jSBU=
Subject key identifier: AF:EA:5B:DA:D1:D3:32:5B:BF:80:07:02:74:F0:D8:29:68:70:48:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019230
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C501627CDA11F08541B1ABDAE4EC9C.roa
Signing time: Tue 19 Aug 2025 08:54:41 +0000
ROA not before: Tue 19 Aug 2025 08:54:36 +0000
ROA not after: Thu 28 Aug 2025 08:54:36 +0000
asID: 211392
IP address blocks: 154.219.2.0/24 maxlen: 24
154.219.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102960 (0x19230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 19 08:54:36 2025 GMT
Not After : Aug 28 08:54:36 2025 GMT
Subject: CN=68a43bd1-f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:26:a3:66:f5:f5:51:8d:6b:c3:af:94:52:
cc:b0:42:9a:6c:d2:57:03:87:4c:10:25:ae:64:bf:
29:a3:5f:23:69:a0:fc:d5:1a:59:e1:33:88:ab:41:
b4:77:5b:b6:23:bd:88:82:f7:9c:1f:0e:26:56:89:
68:0a:3e:cc:dc:cc:33:e6:67:be:17:d8:5e:5c:3c:
4f:30:ba:5a:ea:84:ad:0e:83:a1:82:0b:11:57:d5:
85:19:43:06:a2:3a:7e:ad:d5:96:1f:1c:76:87:b9:
4c:9e:7e:42:f2:0d:78:67:23:43:4c:1a:c7:c0:cb:
7d:f0:c0:bd:72:e3:eb:8b:ba:64:bd:6d:54:e1:e8:
3b:c4:fd:4c:e1:cb:09:87:e4:63:7e:fd:db:68:73:
8b:2d:2b:cc:78:9f:5e:26:32:b4:08:be:b5:c5:cd:
21:f5:af:de:f1:7f:9c:aa:40:9c:ea:0f:8b:0f:97:
a1:80:fc:18:c3:e7:8d:d6:df:a5:69:aa:89:31:58:
f8:ea:e8:4e:b1:5b:43:ff:fa:7c:72:16:88:b5:ec:
0c:d4:59:aa:4f:24:9c:73:64:3c:c6:d5:10:cc:f9:
07:0e:6e:0c:57:e3:cb:07:7d:bb:08:53:ef:0c:4b:
76:98:5c:96:d0:c7:e0:d6:b6:59:c0:39:26:ab:56:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EA:5B:DA:D1:D3:32:5B:BF:80:07:02:74:F0:D8:29:68:70:48:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C501627CDA11F08541B1ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.2.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a6:56:1d:e2:a7:26:43:65:51:4b:52:5e:4d:c8:67:b7:04:
05:78:52:e7:c0:b4:ad:f5:84:6c:2b:3e:c5:52:d1:19:a8:bc:
df:a3:a2:6d:de:2e:6a:67:df:5c:8d:69:d6:9e:24:94:4c:34:
de:4c:86:9c:8e:24:8d:b1:a9:62:8e:5a:ed:0a:53:f9:34:2b:
ce:3a:bc:07:bf:47:1b:b9:cc:26:22:30:05:8f:1b:f0:64:a1:
09:da:07:a1:37:d4:1f:8a:07:57:b0:19:04:e9:ca:91:b1:b8:
67:59:da:a6:a0:59:59:d9:92:bf:92:24:17:71:78:44:5d:e1:
f0:ca:8e:a1:1c:4b:cd:e4:b3:60:bb:ae:b7:68:2f:07:d6:69:
e6:46:f5:1b:f4:28:09:bb:74:06:27:8a:0b:43:a6:b1:82:7a:
0a:f3:95:53:d9:51:26:65:3a:e3:fe:aa:1b:88:e6:bf:88:5b:
a5:e3:29:d5:4f:bd:80:85:c7:a3:92:3c:3c:19:d8:1f:13:49:
e5:b9:ea:40:e5:7e:04:7e:81:a0:9f:ef:a9:19:9b:9b:6a:89:
7f:69:34:c5:17:77:cb:c1:c4:85:84:4e:36:8c:d2:72:16:e6:
fe:1c:67:a3:d0:97:19:4e:b3:f1:e9:e1:f2:20:09:9c:56:2c:
19:47:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:24 2025 by rpki-client