Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28444EA6510111F09B9CB4ACDAE4EC9C.roa
File: 28444EA6510111F09B9CB4ACDAE4EC9C.roa (raw, json)
Hash identifier: 7y5wLEOfZxjScdkK9IcvaiIeAwFliXRtHi4H1mBRVfI=
Subject key identifier: 99:5A:17:38:85:23:A3:2E:5D:F2:11:0A:9E:9E:6E:67:92:E3:3C:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01885C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28444EA6510111F09B9CB4ACDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:43:06 +0000
ROA not before: Tue 24 Jun 2025 13:43:02 +0000
ROA not after: Tue 05 Aug 2025 13:43:02 +0000
asID: 49505
IP address blocks: 154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100444 (0x1885c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:43:02 2025 GMT
Not After : Aug 5 13:43:02 2025 GMT
Subject: CN=685aab6a-7a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:7d:ba:bb:7b:10:09:54:8d:6d:d0:a0:c4:
ce:e3:12:9c:3f:72:68:2e:96:c8:08:ff:1c:45:3a:
ad:2d:65:e0:71:8f:b3:a3:60:fc:c2:80:cd:1d:72:
e2:4e:48:0a:21:21:c1:79:70:6a:37:2a:09:15:f5:
59:49:f5:9f:b7:02:65:2b:bd:ce:38:5a:92:d0:c8:
76:2c:a0:65:bb:fc:1e:97:6d:30:92:33:aa:39:5a:
d3:bb:d8:38:6f:15:9a:db:1c:09:62:b0:df:3c:17:
9d:7e:cd:7b:52:3c:93:42:b0:37:09:cb:53:e5:87:
7e:58:30:3a:a5:a4:66:06:49:34:61:cd:4d:03:6b:
ca:d8:bc:df:0b:7d:5c:7f:db:9a:77:15:81:89:97:
c6:19:0d:02:30:5f:63:99:bb:c6:1c:e4:95:f4:93:
e9:96:07:54:ad:d5:ff:90:f7:20:92:ed:86:c8:3c:
61:6e:6c:c9:81:46:2c:55:54:f0:c4:2a:bf:51:07:
a2:32:c8:c9:32:fe:69:a8:d0:10:65:b1:70:c6:9c:
e8:83:a9:33:75:4e:e1:75:a8:ba:85:a2:62:ac:95:
3b:c2:a3:8c:59:3b:4d:09:6b:f6:9f:49:2d:c8:30:
7b:87:69:76:5e:68:e6:ff:5b:a8:1f:76:37:a6:fe:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:17:38:85:23:A3:2E:5D:F2:11:0A:9E:9E:6E:67:92:E3:3C:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28444EA6510111F09B9CB4ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.215.0-154.209.220.255
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
42:56:94:9d:7e:3f:e0:ea:e5:38:d7:01:af:92:d2:9d:bd:5d:
9b:b0:06:dc:83:e8:40:82:e1:00:56:1a:cb:51:62:9d:5c:eb:
26:f0:a2:87:c7:67:4a:ec:2f:12:25:0e:db:7c:ab:35:07:bf:
52:83:fc:ac:19:5a:37:69:f4:52:b2:70:b4:79:d8:ef:4b:0f:
56:8c:33:9e:06:f3:91:ce:be:16:ac:7e:42:24:49:97:e8:ec:
f0:4d:c1:e8:f7:d4:ff:c7:1e:4b:b1:5d:7a:dc:af:01:bd:ab:
e0:97:ea:71:ea:24:99:88:1f:b8:57:11:21:e9:00:0b:d0:af:
4e:ef:52:9a:e9:03:ce:c3:41:5c:8b:4c:6a:df:7b:26:78:68:
9a:83:ba:0e:cf:ce:1e:7b:b2:e2:00:0a:cd:a0:bc:2a:90:4d:
50:62:a4:28:7e:6b:8f:eb:44:ed:d3:97:67:c1:4f:c1:98:ad:
c8:2d:8b:7b:6a:6d:05:f4:f0:57:a1:fe:45:1d:0c:fb:04:d2:
60:4b:3b:16:7c:9b:df:c8:40:7e:73:7c:ce:5a:49:24:31:e7:
83:3a:1b:ab:ba:f1:f7:d8:cf:d5:71:d5:80:11:82:ad:96:90:
cf:7d:65:15:aa:28:48:8b:d2:d8:9f:7b:f8:93:36:1b:d7:b8:
11:a7:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:57:55 2025 by rpki-client