Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FE7482541C11F0A0260BE3DAE4EC9C.roa
File: 43FE7482541C11F0A0260BE3DAE4EC9C.roa (raw, json)
Hash identifier: eOjRTi6vFnUQEQHnsqjjWrCHlzGlkR8Z0bXm2X/16LU=
Subject key identifier: 7D:7D:85:D6:7B:43:1B:31:F0:74:23:D2:B7:DC:9B:5A:59:2B:FD:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018949
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FE7482541C11F0A0260BE3DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 12:34:43 +0000
ROA not before: Sat 28 Jun 2025 12:34:38 +0000
ROA not after: Sat 26 Jul 2025 12:34:38 +0000
asID: 150371
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100681 (0x18949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:34:38 2025 GMT
Not After : Jul 26 12:34:38 2025 GMT
Subject: CN=685fe163-1163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:3a:ef:3d:9f:28:fd:be:69:2e:b5:67:a1:
f8:7d:ff:0e:e8:3a:63:65:05:2a:6c:05:0d:ab:94:
21:10:c6:a0:b0:b5:97:f5:57:ff:ef:ec:f8:3c:e3:
81:fe:6d:1c:00:f0:58:5d:7d:77:14:9a:a9:e4:e5:
aa:e9:65:5f:26:db:9e:6b:c9:47:39:3e:5f:29:4a:
d1:d1:26:76:8d:fc:24:c3:db:57:87:e9:7f:04:87:
86:21:31:11:fb:e8:34:76:c8:d6:7c:29:d2:a0:dc:
1d:ec:41:b6:3a:51:77:be:8e:38:0b:d6:15:78:0f:
8b:cb:f9:ac:c9:dd:96:97:ea:cc:32:e6:75:83:ce:
a3:28:74:0c:36:17:6a:43:76:74:42:64:64:04:be:
dd:20:4b:3b:bf:81:db:ad:07:7f:71:92:fb:31:a3:
c5:f8:86:08:73:12:af:92:57:8a:1a:1d:d2:79:4a:
9a:de:41:8c:95:85:d2:8c:30:08:1a:b0:4a:a7:f7:
e1:84:cc:dc:32:52:6d:98:bc:99:7e:cc:3b:d0:f9:
23:33:2c:10:e0:83:57:84:85:80:94:3e:dd:5d:88:
4b:9c:80:3a:99:64:b6:da:56:10:a3:33:c6:e2:8c:
b2:68:3a:9e:f8:be:34:da:71:14:10:9a:31:15:1e:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7D:85:D6:7B:43:1B:31:F0:74:23:D2:B7:DC:9B:5A:59:2B:FD:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FE7482541C11F0A0260BE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:01:42:34:8d:45:68:f4:a6:87:e2:ca:75:e8:86:c9:8d:f9:
4f:b0:c9:78:50:57:8c:a1:6b:01:45:74:aa:34:a5:e1:c2:15:
42:f0:32:47:cf:35:ce:af:6a:89:61:a2:23:7d:01:83:d1:72:
e6:3f:57:23:16:70:85:26:10:19:54:f6:0e:15:ca:81:b2:bb:
65:15:69:d6:2c:e1:5e:40:9b:68:f0:a5:5e:73:6a:9d:67:db:
71:83:5b:35:9a:d7:62:4f:2d:86:35:64:0c:36:4d:f4:aa:f1:
6e:b3:35:c6:0d:82:79:f9:de:0d:18:1f:39:7e:3e:ba:35:b1:
ea:e6:04:74:60:29:6c:ba:6c:2c:43:32:94:76:e6:f1:0e:da:
0d:28:28:76:2a:ad:67:9e:6b:cf:37:e3:e1:6c:66:7b:eb:54:
13:ca:49:71:00:4c:91:5b:87:b9:1e:99:b8:d0:48:6d:a2:57:
c7:81:f7:06:60:7f:38:80:8d:54:ca:92:11:c5:7e:72:53:60:
e4:ff:75:fd:e8:ba:de:42:a9:13:31:76:2f:d4:42:50:94:9b:
2b:32:6c:83:ad:be:1a:19:9e:65:25:54:0a:62:c1:ee:d3:5e:
56:42:fe:76:27:83:ea:21:80:bf:c8:ef:04:cc:18:a0:94:2d:
ac:1f:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:08:19 2025 by rpki-client