Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F5EFBCE510A11F08E0157E6DAE4EC9C.roa
File: 2F5EFBCE510A11F08E0157E6DAE4EC9C.roa (raw, json)
Hash identifier: 7coM2d2LFMrfvWvlemkcb5enJ2t5w5W2tb0P/i4jkAg=
Subject key identifier: 1E:AB:A2:16:F2:0F:76:55:4C:4E:49:B0:E9:9C:F0:12:7B:0E:AD:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018870
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F5EFBCE510A11F08E0157E6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 14:47:44 +0000
ROA not before: Tue 24 Jun 2025 14:47:39 +0000
ROA not after: Tue 05 Aug 2025 14:47:39 +0000
asID: 202656
IP address blocks: 154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100464 (0x18870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 14:47:39 2025 GMT
Not After : Aug 5 14:47:39 2025 GMT
Subject: CN=685aba90-53d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:5f:36:d5:fd:e8:28:23:0a:71:ca:92:6a:
bf:04:95:36:61:83:6d:8a:b8:40:11:2d:4f:ce:5c:
6c:24:39:cd:e2:ae:a8:cc:25:5d:4b:19:c4:47:8b:
7e:fa:74:44:b3:fc:5b:f5:af:e2:fb:e6:fc:f4:e1:
4a:d3:41:03:6d:66:c1:2c:6b:9e:74:39:49:72:2b:
61:7b:63:b9:6d:f1:33:a8:e9:32:bb:e6:59:ec:0b:
eb:57:42:ed:87:b4:67:e6:59:f9:50:45:79:df:d4:
b4:54:0b:5b:fe:ee:a4:27:4c:cb:d9:89:17:80:07:
8d:06:b1:0c:84:8a:ba:2a:80:cf:5f:f2:bf:5e:f6:
22:41:2c:be:55:02:3a:7e:43:39:e9:12:21:6e:25:
50:95:2c:09:8c:f5:61:8c:cf:2f:85:54:bf:34:39:
d8:12:76:32:f5:35:56:9a:6c:ea:fa:bc:e7:dd:5d:
73:94:aa:38:a0:1e:bf:3f:89:13:64:bc:49:0f:49:
d6:d5:3e:f1:be:c3:4a:ff:3c:70:60:13:50:96:52:
3c:89:fe:37:7e:55:e4:89:d8:35:35:f7:52:ac:49:
46:d7:56:9b:a5:46:00:d2:e1:e2:e7:e1:6d:45:98:
ec:d6:5f:02:0a:ea:95:da:30:e1:c3:42:6f:5e:46:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:A2:16:F2:0F:76:55:4C:4E:49:B0:E9:9C:F0:12:7B:0E:AD:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F5EFBCE510A11F08E0157E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.225.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
Signature Algorithm: sha256WithRSAEncryption
7f:60:87:b9:07:5a:c8:e8:58:00:c2:cd:29:6e:03:5d:86:f7:
17:77:18:bf:3a:a4:df:74:8c:b6:ae:9a:2f:b4:f8:78:bd:c7:
ad:b6:21:52:55:a5:9d:5f:48:d0:be:2d:5b:27:40:a1:e2:ad:
dc:11:c9:1f:08:b1:34:3b:0e:3a:a8:99:bd:61:d6:5d:24:9f:
e5:b4:c2:b2:c7:6e:3d:9c:d3:ec:7b:24:ed:5e:b1:ad:51:94:
4d:20:dc:bf:af:b6:c8:2e:2f:d9:f5:15:2c:ce:c4:32:0c:ce:
c2:53:ae:3a:04:b4:af:94:95:4e:a0:35:61:c0:f6:a8:53:34:
53:eb:50:47:d7:76:f1:2d:67:87:85:ba:69:8f:52:0d:14:e6:
4e:3e:de:b1:0c:3c:98:5b:59:9a:ec:9c:47:89:95:73:5a:95:
bf:d3:ec:38:97:b6:0a:82:cb:02:43:1b:3d:a5:82:d7:0e:9d:
15:53:80:e3:5a:3e:09:e1:06:e6:2e:ee:1c:ba:04:09:28:af:
66:b7:c6:fd:30:71:20:ae:2e:8a:33:ef:39:f3:88:72:82:4c:
d9:6d:94:93:36:fa:c2:53:65:f5:e3:8b:f7:b5:49:bb:b2:f2:
61:6b:5b:0f:38:9b:33:61:e5:71:c8:54:1e:1c:d7:de:c2:64:
9e:40:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:53:20 2025 by rpki-client