Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EC4D8223A0911F0A09F6CB8DAE4EC9C.roa
File: 2EC4D8223A0911F0A09F6CB8DAE4EC9C.roa (raw, json)
Hash identifier: 0Lecxz48J7OtkfVOkzLVhoPwTF1U7RvuWXiDSJCiLD4=
Subject key identifier: 2C:68:90:11:EF:F3:C5:EE:65:61:BB:9A:F8:44:14:5A:60:70:49:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EC4D8223A0911F0A09F6CB8DAE4EC9C.roa
Signing time: Mon 26 May 2025 08:12:37 +0000
ROA not before: Mon 26 May 2025 08:12:32 +0000
ROA not after: Thu 03 Jul 2025 08:12:32 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99023 (0x182cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 08:12:32 2025 GMT
Not After : Jul 3 08:12:32 2025 GMT
Subject: CN=68342274-5a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:aa:ee:16:ea:32:87:7c:97:9d:a3:8a:5d:
c3:29:85:fe:1d:91:34:2a:db:cb:f1:33:75:2e:f2:
7f:71:1d:c2:aa:18:9e:31:6f:d2:b8:23:45:8b:9b:
9c:fe:85:1e:21:f7:02:e0:34:77:84:63:23:7d:4e:
4f:93:46:8c:3a:1c:a6:d9:59:d2:0d:0d:47:f2:3d:
70:ff:ee:a1:0f:5b:72:85:c1:91:50:7c:de:3b:09:
c9:86:0e:86:33:29:e6:1e:a9:92:55:09:be:a7:1e:
75:bf:00:9e:56:ee:8b:cc:3c:c2:94:9e:83:df:fd:
51:5a:29:3c:8a:2e:9b:5e:e7:47:61:ac:c6:48:79:
ae:ac:1a:a0:89:96:60:6c:50:bd:ca:cf:0f:42:77:
3a:66:33:11:3e:da:38:94:3b:de:92:1c:82:fe:48:
d0:79:06:18:92:ed:99:b2:a9:63:24:8c:01:6c:f2:
f8:c1:f2:46:30:16:6d:7a:fa:53:fa:fc:5d:3a:4a:
34:d6:2f:45:dd:41:0e:2e:73:a4:e3:89:f6:b4:1b:
46:bd:fa:99:eb:ba:f6:8c:7b:de:09:96:d8:07:aa:
ac:bf:f8:5a:68:7e:20:43:f5:f9:ed:1b:e7:ad:3d:
0b:d2:f3:76:31:b3:ae:3b:e8:2e:c3:b1:be:6f:7c:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:90:11:EF:F3:C5:EE:65:61:BB:9A:F8:44:14:5A:60:70:49:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EC4D8223A0911F0A09F6CB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:26:e8:22:46:54:9e:a0:60:9a:63:47:6c:db:98:3a:6e:fc:
a4:5c:20:8f:7a:87:97:41:fd:0a:e5:ed:3e:65:8f:f1:63:d4:
84:96:e3:b2:59:f5:f2:ac:3f:e8:25:77:b6:71:46:f6:c6:4b:
37:ed:cf:3f:27:cc:53:9b:cc:e0:a3:34:fe:46:b6:37:61:4a:
85:35:7a:1f:2e:90:fb:6f:5b:2a:c8:45:1e:30:bc:65:3d:fd:
ec:1d:af:cb:73:a5:61:57:c0:36:a0:c1:05:53:89:58:7e:d8:
2a:b0:cd:6c:c9:ed:0f:51:61:08:c6:26:35:32:27:2b:c5:45:
05:38:2d:1f:2a:49:85:77:f8:f1:2b:d7:82:7e:4b:91:19:1f:
fa:03:56:62:c7:23:f8:ed:f2:4c:80:3e:a6:ac:47:4f:85:1e:
89:89:37:82:24:7a:a7:54:ce:a4:7d:a2:78:88:7f:ae:e7:b9:
2c:2d:13:4f:8e:7d:28:31:bc:78:90:59:03:f6:27:80:b3:4f:
1a:90:02:31:71:9b:15:07:2a:dc:bd:d7:dc:ca:47:f7:1d:8d:
85:24:39:4b:6f:b2:ba:d4:29:84:15:0d:48:bf:1c:23:17:91:
a1:a6:52:96:ac:5d:5c:af:3a:a7:43:49:4c:70:6b:2d:b3:1d:
e0:00:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:29:24 2025 by rpki-client