Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB71BCA512511F0BA2BAC94DAE4EC9C.roa
File: 2CB71BCA512511F0BA2BAC94DAE4EC9C.roa (raw, json)
Hash identifier: LpiNNvEB1AKtTmYDdBS6yG3LBiMTe+cYmoj03n3CAWs=
Subject key identifier: 5E:10:4B:D6:B0:62:07:A6:21:4C:2F:9B:B2:11:AE:62:7F:62:09:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018888
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB71BCA512511F0BA2BAC94DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 18:00:56 +0000
ROA not before: Tue 24 Jun 2025 18:00:51 +0000
ROA not after: Sat 09 Aug 2025 18:00:51 +0000
asID: 138915
IP address blocks: 154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100488 (0x18888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:00:51 2025 GMT
Not After : Aug 9 18:00:51 2025 GMT
Subject: CN=685ae7d8-4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:fa:cc:e9:55:e0:bd:a3:7f:b4:14:95:0b:
05:27:a9:ca:85:b1:dc:05:16:47:cd:11:fd:c2:97:
5a:aa:f9:ea:cc:4f:2c:57:87:87:cc:e9:10:27:60:
d7:ab:7e:4b:2b:87:df:90:78:e3:5b:b4:e8:2a:fc:
fc:fa:b8:4e:e2:c0:ad:4e:40:b9:e0:5f:c8:36:7c:
22:0c:22:18:fc:1f:f7:2e:e7:c6:92:95:68:09:36:
fc:c3:14:fc:33:15:3c:9c:2e:b0:f7:1c:06:9b:97:
36:15:ac:e9:72:db:4d:71:e0:54:3f:c6:66:5f:a2:
a4:5c:bd:09:fb:e5:c3:7d:af:8e:8e:10:fa:b5:5d:
58:8d:27:12:e7:3e:86:37:67:59:03:2f:1f:6a:2f:
05:00:03:8f:14:a9:ce:ce:ee:92:f8:50:b5:0b:20:
84:d2:37:ba:a0:2b:be:92:05:80:11:3c:c9:72:df:
bd:97:05:17:13:2a:cc:6f:1a:39:ff:6a:e9:66:6e:
bb:e5:1c:8f:98:aa:8b:cc:51:0b:6e:54:5b:bf:a2:
04:32:f2:e6:d8:0e:cc:09:2c:9b:57:4b:58:66:bf:
69:c1:f4:f5:0a:2e:a8:b5:e8:78:13:c8:e7:d6:19:
67:3c:10:a7:68:17:4c:c8:e7:49:bc:da:08:e9:82:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:4B:D6:B0:62:07:A6:21:4C:2F:9B:B2:11:AE:62:7F:62:09:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB71BCA512511F0BA2BAC94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.17.0-154.223.24.255
154.223.26.0/24
154.223.28.0-154.223.30.255
Signature Algorithm: sha256WithRSAEncryption
79:29:13:2d:4a:14:24:5c:96:04:8a:ed:a2:23:b1:a7:05:5f:
2b:4a:3d:a1:b5:7f:a3:d2:75:a3:d0:d9:17:2d:3c:db:60:65:
a8:ae:dc:e1:eb:04:f2:4f:81:c0:8f:6f:2c:b4:c5:d9:e6:fc:
a7:b8:cf:cf:47:92:35:0f:5b:fe:d6:a1:77:43:7f:76:7d:2c:
2f:57:f0:b7:fe:24:22:7d:3d:c0:d9:e0:4c:58:1c:d3:25:dc:
59:80:6b:49:19:ba:a2:ee:a3:59:c1:bb:9e:3e:47:ca:70:c1:
40:91:ee:41:57:a3:4a:17:b8:7c:c0:ed:ee:1c:46:98:cc:4a:
68:5d:90:a4:3d:55:52:74:13:ac:f6:61:24:4a:dc:8f:3c:73:
06:bd:71:a9:6c:b5:f2:3c:6e:63:69:9b:d5:88:ab:e5:51:61:
4c:f5:2e:fd:60:83:0e:e9:44:5c:87:93:68:67:28:17:6f:96:
13:0e:12:90:f3:5a:99:11:b8:2a:61:91:f4:30:77:84:4c:66:
d5:b2:60:fb:58:c9:44:ad:36:32:e1:2b:d1:8e:85:13:a3:f3:
10:88:93:f0:27:ea:6d:a4:87:ae:de:ae:a3:e1:f4:95:b2:a0:
85:2c:98:85:a9:71:5b:48:2f:2b:40:15:2a:df:de:24:97:8f:
e0:43:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:45:34 2025 by rpki-client