Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374BBC4C574911F08E74EB86DAE4EC9C.roa
File: 374BBC4C574911F08E74EB86DAE4EC9C.roa (raw, json)
Hash identifier: nZ+Zv1bX+2tGnIqJ6CiDFz6kWtHn9Ls+ArbbJQsbmos=
Subject key identifier: 1A:3F:16:5D:93:98:41:1C:4B:47:63:EA:70:03:4F:D5:0F:2F:09:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374BBC4C574911F08E74EB86DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 13:34:02 +0000
ROA not before: Wed 02 Jul 2025 13:33:57 +0000
ROA not after: Sun 24 Aug 2025 13:33:57 +0000
asID: 55020
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100808 (0x189c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 13:33:57 2025 GMT
Not After : Aug 24 13:33:57 2025 GMT
Subject: CN=6865354a-341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:2f:ed:57:8e:90:d5:33:72:0c:04:a2:d1:
14:19:ff:60:10:b2:55:29:10:f0:8e:d5:cc:06:0a:
d9:2f:16:3e:68:fb:40:48:a8:3e:62:ef:f6:25:9e:
c8:5a:f4:0f:50:fd:7a:08:fd:b5:e7:ba:11:53:8f:
2f:ae:dd:e4:61:e7:8e:73:78:31:1f:56:85:82:95:
3c:d3:17:85:b5:82:84:df:e8:f3:8e:5e:3e:ca:b2:
d1:ec:0b:db:41:71:b1:ce:07:96:8e:0d:06:2d:4d:
70:a0:f7:73:ea:30:c4:df:e4:62:27:79:0a:8e:92:
2a:41:1e:b6:84:a1:45:5c:0e:b0:37:87:93:3c:4a:
8b:f9:6a:12:91:69:b7:be:08:97:4c:e9:8a:bc:99:
9e:38:9d:3b:79:b4:b3:24:57:2e:21:50:5a:5c:03:
59:47:04:93:0c:9e:fe:47:24:31:79:f8:e6:9d:04:
fc:db:8f:04:98:ec:b2:4d:ca:d0:73:b2:b0:b6:a2:
87:8a:48:9e:5c:e3:db:bd:05:c0:04:50:a7:c5:08:
74:ea:5f:a2:80:75:c8:a9:9e:af:85:8d:37:3e:06:
6e:cf:b4:dd:76:06:1c:ab:47:45:64:df:95:fb:07:
54:0a:a3:1c:39:9f:2d:63:05:81:e1:dc:bb:5c:a7:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:16:5D:93:98:41:1C:4B:47:63:EA:70:03:4F:D5:0F:2F:09:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374BBC4C574911F08E74EB86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
88:95:41:6c:d2:db:b7:66:10:b7:fc:87:3f:d9:a8:74:d9:02:
86:3c:a1:6b:e6:34:b9:7c:a1:6d:41:62:96:b6:fa:11:b3:41:
9c:58:7e:36:e5:aa:72:21:52:3f:7d:99:ee:f3:a8:81:d4:37:
4a:d5:71:82:2a:24:97:11:d7:b0:e2:74:0d:cc:9d:a4:16:4d:
54:b2:66:e1:f0:47:f8:aa:15:d9:35:28:82:ea:12:6b:e6:65:
8c:ba:d3:09:04:a5:49:6c:00:03:2f:05:31:a9:38:f6:55:ef:
88:0f:05:d9:ee:f4:2f:6d:86:75:30:34:49:50:c8:74:39:cd:
4a:3b:70:a7:54:87:11:92:2f:22:7e:4e:a1:45:fa:1f:3d:21:
e7:66:7d:33:5c:99:92:65:f2:ae:ba:df:9f:87:2c:2e:ad:15:
dd:26:ef:e1:e5:5b:7d:ca:f3:d3:f6:b1:90:76:8c:ba:09:d0:
6f:ca:82:d7:fa:37:f2:55:75:f2:98:2b:62:cb:dd:8f:9a:db:
77:dc:b1:84:90:12:85:3e:ec:e8:a9:d1:67:95:1c:4f:7e:56:
5e:86:c7:7d:59:34:7f:56:52:f6:e6:33:af:3c:18:02:ab:b6:
e3:86:d7:31:bc:e1:f2:08:c0:32:58:68:e1:20:e3:08:46:97:
62:d1:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:45:56 2025 by rpki-client