Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700991204C5511F0B433D7CCDAE4EC9C.roa
File: 700991204C5511F0B433D7CCDAE4EC9C.roa (raw, json)
Hash identifier: 2U+IBxyHE0HPHwNvk7N7cwMMA0ccfcDoHCVhabRFfTQ=
Subject key identifier: 75:D3:9D:99:E0:F8:92:4F:47:18:DC:1E:64:55:E8:38:5C:C5:53:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018757
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700991204C5511F0B433D7CCDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:03:49 +0000
ROA not before: Wed 18 Jun 2025 15:03:42 +0000
ROA not after: Fri 25 Jul 2025 15:03:42 +0000
asID: 203020
IP address blocks: 154.194.214.0/23 maxlen: 24
154.194.232.0/23 maxlen: 24
154.194.242.0/23 maxlen: 24
154.198.174.0/23 maxlen: 24
154.198.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100183 (0x18757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 15:03:42 2025 GMT
Not After : Jul 25 15:03:42 2025 GMT
Subject: CN=6852d555-1541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:8e:2b:c0:82:27:97:4e:ad:20:5f:e0:5b:
f7:58:09:94:94:0c:b7:90:8b:9a:88:d6:98:36:96:
55:07:7f:5c:2e:a1:72:04:88:ee:60:99:43:b0:14:
ed:5e:c2:09:fb:a9:87:85:4b:c4:ec:35:40:0f:dc:
60:36:15:77:f9:14:ad:f9:da:37:88:a3:24:2d:25:
6c:e0:55:02:66:e5:0b:ee:8d:42:a9:0e:e1:f5:d3:
2b:6d:2c:af:99:be:d0:dd:0c:6f:c8:c1:3b:19:79:
41:d7:a1:5c:4e:a7:76:84:a7:2b:25:d0:12:88:0a:
ad:be:b9:ea:a3:4b:1a:ec:0a:fc:e6:80:86:fa:ff:
9d:73:84:dc:3f:86:f3:5f:52:de:e8:fb:9d:a4:25:
fe:91:47:9f:07:14:de:66:3a:11:86:e6:74:80:ce:
18:73:14:65:05:fd:00:a2:de:71:ad:ae:f5:d9:0c:
b7:02:90:96:f1:ed:e9:d4:9a:b8:41:3c:74:a2:ad:
99:2c:d9:cc:24:4d:3f:7d:eb:37:37:51:e9:21:e1:
12:95:eb:5e:79:a4:3d:74:0c:5e:dd:4b:c2:ec:0d:
0c:cf:73:c3:72:09:7c:0c:62:88:f2:75:2d:64:9c:
aa:23:98:30:11:9b:c9:fc:6e:b7:45:83:d4:e5:f1:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:9D:99:E0:F8:92:4F:47:18:DC:1E:64:55:E8:38:5C:C5:53:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700991204C5511F0B433D7CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.214.0/23
154.194.232.0/23
154.194.242.0/23
154.198.174.0/23
154.198.184.0/23
Signature Algorithm: sha256WithRSAEncryption
20:46:75:25:1c:de:73:42:1d:f5:cc:e5:c6:e2:a0:d8:77:ec:
ce:b5:9a:65:16:4a:a6:eb:76:f8:4f:af:0f:b2:7b:9d:71:3e:
16:b4:2f:59:8a:0a:5d:1d:7e:a9:d9:ae:87:ee:4b:57:92:0a:
7f:c2:58:63:36:29:a0:e5:c6:e4:ef:39:2a:d5:8b:94:0c:fb:
98:27:9c:e6:a3:db:4d:59:ff:26:a4:c1:ef:5f:95:2e:d5:6b:
52:00:49:3c:98:cf:ea:9a:a1:c6:0b:1b:cb:52:52:9b:87:17:
4e:67:ac:2f:be:db:d3:c4:23:70:7f:17:c6:15:2d:b9:1b:1f:
c0:b9:d0:92:61:ec:f6:dc:97:8d:77:a9:c3:19:1c:ba:0f:ab:
f2:80:66:8c:b6:93:2f:bf:08:2e:7d:01:8b:9e:a6:d1:10:ba:
25:e1:dd:ee:fb:19:77:9d:83:bd:94:01:4a:f6:16:68:e8:f1:
8a:45:0c:6e:50:81:b7:6f:e4:ba:93:25:ef:8f:ef:7f:e9:85:
33:be:89:13:e7:ab:e7:ac:0e:10:e7:08:51:9e:13:d6:9c:2d:
18:f8:58:f1:6a:9d:a4:43:42:e4:15:15:81:e1:39:4c:7f:b2:
13:d1:91:b3:7c:81:05:86:c0:d3:34:99:89:c2:43:74:4c:2d:
84:a6:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:49:58 2025 by rpki-client