Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DA9186510011F0847334A8DAE4EC9C.roa
File: 42DA9186510011F0847334A8DAE4EC9C.roa (raw, json)
Hash identifier: cFHxTyVR2WPWUANNfKJughggUr2No5DpTSiqgb1fqxQ=
Subject key identifier: 0C:29:42:57:11:C0:23:D8:E7:1D:86:19:C5:9B:BA:28:1B:12:E7:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01885A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DA9186510011F0847334A8DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:36:42 +0000
ROA not before: Tue 24 Jun 2025 13:36:37 +0000
ROA not after: Tue 05 Aug 2025 13:36:37 +0000
asID: 49505
IP address blocks: 154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100442 (0x1885a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:36:37 2025 GMT
Not After : Aug 5 13:36:37 2025 GMT
Subject: CN=685aa9e9-f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:f3:dc:7d:0e:de:f0:94:42:3a:fa:74:3d:
09:5a:98:8b:e3:93:e6:0e:62:1d:bc:0e:35:64:95:
88:67:14:db:7a:f7:41:ff:03:21:b8:7a:8d:c0:c9:
1b:4a:65:5b:10:cf:a9:1d:6e:93:bf:a6:e7:fc:64:
c4:51:d7:37:69:38:b7:b2:a6:96:47:92:c9:ee:8f:
b4:eb:2a:a9:1c:b9:8e:39:33:41:71:63:36:92:ba:
f9:5f:48:d7:9b:ff:b8:a5:6a:36:11:61:20:fd:04:
06:45:3f:5e:9c:23:a4:c0:87:32:9e:40:0f:03:a0:
5a:97:4f:9d:6e:93:a6:6f:f1:1b:25:4f:f4:f0:67:
b2:03:94:aa:b7:9a:ca:01:a1:0d:85:43:98:66:57:
d5:70:4d:9e:4a:32:55:92:8d:7b:d3:d3:ec:7f:01:
03:37:2e:20:fb:00:72:09:c6:0a:92:fd:a1:d1:75:
9e:b8:c6:b2:ca:9f:32:68:ab:c3:b7:f7:45:20:3a:
2c:a5:23:e7:16:37:ec:05:87:ed:36:f0:dc:69:38:
35:6e:cb:e7:03:4a:5b:1e:d6:39:e6:90:cb:df:10:
f0:35:7c:b2:ab:e6:e7:f9:1c:53:04:0d:5e:16:52:
f3:93:eb:75:6e:50:3b:e2:e5:74:a0:32:67:08:50:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:42:57:11:C0:23:D8:E7:1D:86:19:C5:9B:BA:28:1B:12:E7:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DA9186510011F0847334A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.9.0-154.211.11.255
154.211.16.0/22
154.212.28.0/23
154.212.31.0/24
Signature Algorithm: sha256WithRSAEncryption
81:01:3a:44:7b:11:18:19:7e:82:dc:e9:7d:bc:36:bf:b8:ac:
1c:0a:42:62:1b:1d:a1:5d:cc:09:42:f4:64:1b:24:22:9e:3b:
ea:29:47:4b:ac:2b:e1:45:eb:73:14:a1:18:7d:3f:d4:76:2d:
7b:ee:cd:72:d9:32:20:f0:ad:54:72:85:e2:5b:c5:8f:85:6e:
17:a6:b3:03:42:cc:2c:27:d3:25:e3:29:38:ae:1f:e3:aa:b1:
6a:da:88:69:87:e1:17:5c:c1:77:1f:1f:35:15:71:14:fe:0a:
94:c2:dc:fa:bd:58:4c:0f:f0:7a:cf:26:24:ef:f0:a0:38:6e:
08:a9:0b:0a:3a:c7:8e:68:3e:7e:24:8c:04:4a:d1:1a:bd:af:
91:8a:14:e7:49:ac:33:a3:8b:f2:32:67:30:ac:1b:30:c1:df:
c4:f4:3f:ed:94:37:6f:50:21:0c:75:73:6b:13:8c:67:4d:b6:
5f:85:91:7f:74:ec:90:25:b4:a6:9c:21:17:e0:d6:66:c8:b5:
da:c6:52:ed:e7:5d:f3:95:0e:0c:09:b9:97:b7:20:cd:e6:42:
b4:f1:e6:36:6b:39:d9:88:fa:8f:ab:99:f0:16:72:14:91:95:
15:58:af:76:75:f4:15:7a:dc:71:d9:d7:24:57:cd:ce:33:7c:
ab:ac:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:35 2025 by rpki-client