Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773FCC22518F11F0AE372AD3DAE4EC9C.roa
File: 773FCC22518F11F0AE372AD3DAE4EC9C.roa (raw, json)
Hash identifier: z4UflyoKlGK7KYZkZE1MjgW1r6Jse+b2slm/7z4AZHc=
Subject key identifier: 45:1A:12:E9:80:C9:99:37:4C:B5:BB:49:E2:CA:A1:D7:6C:9A:52:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773FCC22518F11F0AE372AD3DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 06:41:47 +0000
ROA not before: Wed 25 Jun 2025 06:41:42 +0000
ROA not after: Thu 25 Sep 2025 06:41:42 +0000
asID: 2914
IP address blocks: 154.214.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100581 (0x188e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:41:42 2025 GMT
Not After : Sep 25 06:41:42 2025 GMT
Subject: CN=685b9a2b-7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:7d:3b:4e:1b:4e:12:a9:bd:df:25:ad:5b:
c6:e7:93:93:90:fb:05:23:5b:74:3c:e3:4c:ef:3b:
2a:a7:06:c9:46:20:fc:24:48:50:6a:9a:32:03:74:
bf:66:f7:69:65:7a:c3:e2:4a:fa:f6:74:e6:9c:2b:
86:46:5a:cb:82:91:ef:54:a0:7a:f2:54:b8:53:4e:
d7:e9:a8:7c:64:32:a1:24:b2:62:83:ee:dd:cb:68:
bc:17:a6:c1:d4:de:b5:6e:d0:0a:ce:f5:74:db:01:
58:80:4e:5a:b1:aa:30:e2:89:d9:65:0b:c3:9c:4e:
ff:9f:39:d3:61:41:7c:ff:7a:74:2e:50:de:48:c6:
82:90:4b:a9:e6:de:95:06:5c:ab:bd:16:be:b1:1a:
d8:b9:0e:88:0a:e5:71:2e:82:95:33:8c:77:86:7d:
6d:41:a6:e3:33:c1:57:36:fa:5a:7d:dd:f8:08:8d:
d7:63:e9:21:cb:8e:6b:6b:75:31:ec:b0:cb:06:e3:
23:36:84:f6:9f:e1:69:b3:7a:62:41:0c:22:31:e2:
0b:62:07:23:5e:6c:67:39:67:ae:a0:a2:46:42:43:
a9:8a:a7:7f:ca:86:c5:fa:8a:e2:29:d5:52:03:d2:
56:98:c2:6b:02:05:6a:cb:29:18:81:71:30:7f:5c:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:12:E9:80:C9:99:37:4C:B5:BB:49:E2:CA:A1:D7:6C:9A:52:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773FCC22518F11F0AE372AD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.223.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cb:30:6e:22:b2:ff:e9:de:be:c8:01:52:82:bb:c1:1a:ee:
e7:38:4f:b8:5e:dd:e6:88:90:68:c9:11:3d:ac:ae:8b:c8:a4:
f6:01:35:ba:df:18:a9:09:ba:ec:6e:d1:a9:5b:db:8c:db:a2:
82:0f:90:07:b3:79:4d:c6:3e:08:9c:55:bd:67:c4:e8:cd:96:
93:d3:6a:43:e2:eb:5c:a6:79:27:b6:27:ea:85:ba:36:51:00:
28:a1:3c:89:6b:d4:46:54:bc:fd:6f:58:a4:fa:5c:fc:c8:6e:
b1:be:a2:06:28:78:d3:e0:a4:c8:2e:3b:27:ed:03:98:db:19:
4c:ec:39:60:98:c5:94:67:ce:8d:da:90:51:ab:3b:16:94:98:
93:0e:5f:18:49:e6:30:a2:c7:96:ff:50:6c:6d:01:fe:16:a9:
4c:b3:2e:a9:2b:e0:0a:d1:5f:6a:f1:41:e2:50:b8:73:a4:c1:
a1:90:08:81:80:c4:ec:7d:cd:7e:83:17:25:89:87:61:7d:d0:
ee:c7:b7:7e:4f:f1:93:a3:59:86:88:13:76:4c:bc:65:45:0a:
3c:44:ef:d9:cc:9b:eb:88:06:82:6d:76:1e:6f:85:cc:2f:2a:
0c:e7:11:a5:60:b5:4a:94:24:e4:d1:34:ee:71:53:6d:c7:07:
ac:b1:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:41:44 2025 by rpki-client