Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F1DBA46A411F0B9672AABDAE4EC9C.roa
File: 267F1DBA46A411F0B9672AABDAE4EC9C.roa (raw, json)
Hash identifier: 5NT0dxsfw9TQBkx+7BAMwdiwfBUbP7qq+QC4lKNu2/k=
Subject key identifier: 5E:6C:76:9E:2D:44:5B:F7:3D:0C:71:E5:84:CD:47:A4:F1:61:84:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018606
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F1DBA46A411F0B9672AABDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 09:12:09 +0000
ROA not before: Wed 11 Jun 2025 09:12:04 +0000
ROA not after: Mon 31 Aug 2026 09:12:04 +0000
asID: 138995
IP address blocks: 154.196.2.0/24 maxlen: 24
154.196.3.0/24 maxlen: 24
154.197.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99846 (0x18606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 09:12:04 2025 GMT
Not After : Aug 31 09:12:04 2026 GMT
Subject: CN=68494869-a9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:e5:e3:36:62:55:84:34:8a:4e:58:21:fb:
53:3d:d4:f0:2f:cc:f6:da:c8:14:02:2c:e2:99:db:
74:93:b5:e3:1f:c5:dc:ae:7d:42:b1:70:e8:7f:3d:
d9:eb:3b:ed:b2:78:55:be:51:8b:74:1a:fe:0e:37:
91:8c:be:e1:eb:59:13:60:2b:75:d4:ce:48:d1:90:
05:80:cc:f7:9b:30:96:47:21:ad:b5:8f:c4:20:f5:
06:f6:35:e7:4c:52:fb:2f:13:0a:25:24:8a:53:7f:
dc:8e:78:0c:3a:47:d3:39:4d:b4:11:7a:11:ab:e2:
ac:dc:0e:0a:29:7f:40:be:4d:63:d0:51:26:a8:93:
17:9c:c7:b9:c0:4b:b1:ad:67:15:6a:94:03:47:e6:
63:e5:1b:e7:0f:d1:6f:49:c4:d2:55:2d:7e:78:6a:
24:db:8b:87:85:00:d8:97:29:9a:f3:b4:d5:c0:ec:
a9:5f:cf:fc:8f:66:fb:2d:4d:24:aa:19:c0:f7:94:
45:0c:0e:19:7e:2e:be:6c:90:15:0d:95:d2:04:ac:
01:b1:45:d8:88:bb:2f:d7:92:8b:80:c0:f1:7f:70:
da:75:80:c5:f9:ae:29:86:74:d2:0c:68:6f:5d:46:
8d:85:d1:f2:11:3b:1f:ff:3d:bb:9d:b0:03:7f:eb:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:76:9E:2D:44:5B:F7:3D:0C:71:E5:84:CD:47:A4:F1:61:84:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F1DBA46A411F0B9672AABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.2.0/23
154.197.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:09:41:5a:36:e3:1a:49:09:d1:f7:bf:2c:e2:23:c0:45:ca:
4a:d4:d4:06:b0:ec:ef:e0:8a:f1:40:70:15:cd:33:1e:3e:18:
c3:03:f8:92:ef:53:0d:35:3c:61:6b:87:84:f1:17:0a:92:de:
2d:ec:37:d2:ed:3e:5b:ba:81:96:76:4a:09:60:57:2a:db:a5:
37:94:d4:6d:6c:15:4a:ae:5f:4e:4d:5b:df:fc:f5:2a:c6:18:
e5:9a:0e:87:00:41:96:24:d5:03:a9:e8:8a:e1:c0:d8:3a:e2:
1d:14:ce:7f:65:bd:29:68:52:c7:bc:bc:fd:24:b5:57:d5:a6:
48:8f:98:23:2f:78:2c:2c:c3:37:4e:70:88:4f:9b:7d:bb:7f:
10:64:71:72:1f:c5:78:21:3b:27:4e:83:2a:d4:06:b2:1c:40:
61:23:27:68:71:19:7c:21:d7:08:51:a1:f6:cf:0b:8d:2d:57:
76:a5:d3:69:b3:0f:91:29:3e:9b:c7:3f:e7:c6:1e:ff:38:1e:
1d:d3:85:71:a0:6b:a2:8e:09:cb:b3:4f:2b:ff:18:22:b3:f4:
1f:81:75:39:08:00:8b:bc:99:9a:26:ac:2f:d7:aa:2d:d5:c5:
8c:68:47:f0:54:87:95:e7:f3:1c:c8:22:ff:16:53:6a:05:eb:
df:07:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:02:20 2025 by rpki-client