Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32670638532911F0A7707ABCDAE4EC9C.roa
File: 32670638532911F0A7707ABCDAE4EC9C.roa (raw, json)
Hash identifier: +7b1Nd+ZaTnHIXwWxkS42vVaoiKzaL9z5ux7QeWEMYY=
Subject key identifier: 2F:DA:9D:5F:AD:A3:37:CD:86:C7:0A:72:2D:B2:AE:3E:27:40:A6:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018936
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32670638532911F0A7707ABCDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 07:34:46 +0000
ROA not before: Fri 27 Jun 2025 07:34:41 +0000
ROA not after: Sat 02 Aug 2025 07:34:41 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100662 (0x18936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 07:34:41 2025 GMT
Not After : Aug 2 07:34:41 2025 GMT
Subject: CN=685e4996-dbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:46:41:48:f1:5e:6e:c0:e1:58:b1:c6:39:
8f:6b:12:7f:f6:86:d9:e3:5c:43:24:c4:14:70:8e:
52:92:d3:d2:cf:ee:5d:3b:a1:df:ff:70:fc:f0:3f:
ec:57:e5:07:e1:59:d5:23:22:b9:80:34:e7:e1:8e:
62:54:14:44:b6:d8:81:44:9e:0b:c8:b7:12:3c:e4:
cc:18:06:b1:d8:54:68:c0:98:50:1b:21:13:d2:2f:
bf:46:a9:a5:9d:be:8f:b3:7c:65:54:d0:93:63:b1:
21:cb:70:1d:b3:f1:d7:44:24:dd:6c:70:f3:2f:21:
b3:23:f7:3f:f5:07:6d:5e:05:ae:aa:7a:ce:11:88:
29:71:fb:ce:d3:58:ac:db:90:01:0f:dc:72:36:b8:
b2:02:c1:20:80:cb:73:bc:38:61:e4:5f:50:d7:5a:
32:10:b6:65:81:ce:f4:bf:40:7e:0f:d1:04:48:51:
18:b8:2d:67:4e:a6:92:76:45:4b:22:73:fe:8b:60:
ea:7f:cf:e1:aa:01:ef:ab:e4:03:3b:08:56:bf:ff:
16:5a:87:d5:d9:e6:3b:28:8b:04:a1:f4:16:9f:e7:
ab:4a:56:19:52:67:8d:3e:15:a7:8e:c2:ae:6f:bb:
45:8c:c9:dd:79:b4:4e:62:0b:f0:6d:90:85:78:5e:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:9D:5F:AD:A3:37:CD:86:C7:0A:72:2D:B2:AE:3E:27:40:A6:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32670638532911F0A7707ABCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
74:0a:9e:e6:c4:e1:65:ce:ee:9b:f4:36:2d:ec:4b:1d:7b:7e:
f7:a2:7e:bd:4d:d6:59:a0:d7:bc:f9:07:a1:7c:89:57:9c:04:
89:97:59:4e:5b:e5:29:ba:f5:a0:01:cb:de:18:01:37:a1:ae:
db:37:39:59:b7:43:d7:f8:7b:c8:74:5c:ae:3c:b0:ad:43:a5:
82:02:86:7d:70:6f:90:0a:41:af:00:58:cd:7e:8a:ca:91:46:
0e:67:29:ed:81:32:ee:b5:e4:df:9e:0b:9f:ea:a8:b6:b2:39:
4d:ac:7f:26:ab:87:e2:12:9a:e7:ce:04:ae:52:f0:c0:a7:bb:
17:fa:cd:24:70:18:5c:d4:99:1c:7c:74:97:55:6f:fb:b3:6f:
5e:40:dc:c1:e8:fa:93:39:a1:fc:df:27:0f:66:87:77:a8:90:
42:93:d3:3e:0d:e8:2f:9c:06:5b:47:a6:da:9c:2a:5c:a9:86:
43:78:4c:2e:3e:44:bb:62:48:8f:a5:e3:74:0c:71:94:80:bd:
fe:b2:fb:e1:2f:e7:0e:31:59:37:3d:17:be:18:e7:78:32:37:
ab:0b:22:be:81:d8:d2:d6:9e:42:dc:9d:ee:cd:ce:1e:d8:1e:
38:cd:35:45:e8:74:f1:40:77:04:2f:cb:32:a2:1e:69:3b:0c:
71:ea:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:43:12 2025 by rpki-client