Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0ACF9A37DF11F0A8E5D598DAE4EC9C.roa
File: 7D0ACF9A37DF11F0A8E5D598DAE4EC9C.roa (raw, json)
Hash identifier: BntTlwNzp2RDMaldSbGsFBKNB9tRy3h96upD+xHoULY=
Subject key identifier: 80:2A:DA:57:6E:39:E6:24:BB:5B:88:3F:F7:DD:0F:A7:5B:8C:EA:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018215
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0ACF9A37DF11F0A8E5D598DAE4EC9C.roa
Signing time: Fri 23 May 2025 14:09:07 +0000
ROA not before: Fri 23 May 2025 14:09:02 +0000
ROA not after: Tue 29 Jul 2025 14:09:02 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98837 (0x18215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 14:09:02 2025 GMT
Not After : Jul 29 14:09:02 2025 GMT
Subject: CN=68308183-9c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:2c:33:42:c6:62:27:d3:60:36:65:e1:46:
71:84:f7:70:00:a4:e6:b9:a0:a5:9b:8c:d1:a2:51:
67:c2:fe:e8:38:69:a1:41:77:80:aa:1d:74:2a:37:
75:6f:b1:b8:8c:0f:c2:db:d8:2f:0f:35:3a:25:fd:
84:c4:7c:a8:df:b3:2d:1f:2f:7d:61:a7:d6:9e:17:
ff:79:19:db:3f:d9:c1:e8:2c:c6:2e:23:fa:59:d8:
fe:fe:4e:ab:82:11:92:e8:cd:7e:f8:ee:97:74:c4:
60:36:1c:52:22:03:39:5e:a3:44:1d:a2:21:fb:7f:
32:87:3b:a1:8a:41:ca:1f:b6:12:4d:c5:71:2b:a8:
24:57:2a:78:93:e3:b5:df:42:4f:de:97:da:fd:85:
c8:3c:2a:0d:89:5a:df:19:0e:06:ea:d2:ee:e0:5e:
bd:be:79:d2:4e:d0:ee:96:4a:81:56:ea:a5:bb:a2:
82:46:52:01:2b:94:e8:19:a6:c5:ea:ca:5f:40:a2:
06:52:d1:3a:fb:2d:be:22:22:a2:05:2b:b3:2e:82:
82:87:71:1b:2c:37:84:8b:7d:ae:df:18:58:8a:35:
01:ba:08:33:de:fb:a6:91:43:90:e3:a0:b9:de:dc:
33:ef:8a:7a:48:98:dc:5c:0d:95:bc:cf:0f:ac:a8:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:DA:57:6E:39:E6:24:BB:5B:88:3F:F7:DD:0F:A7:5B:8C:EA:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0ACF9A37DF11F0A8E5D598DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:76:dd:e4:a5:84:e6:93:e2:e9:f6:cb:47:ba:4f:41:10:57:
90:d3:40:b5:55:52:fe:c8:65:6e:da:bd:71:33:46:f0:81:55:
ab:f6:3a:45:19:55:f0:3a:fc:96:d4:e8:2e:b4:49:c4:0f:b1:
05:e9:1c:0e:43:c1:48:74:ef:04:63:7b:5c:cf:f2:51:d5:d1:
70:d7:9b:44:f7:3a:b2:12:06:00:fc:c9:eb:fc:1b:be:77:43:
a1:bf:1b:e9:60:70:ff:93:30:fd:37:79:66:a8:46:87:cf:89:
25:e7:c2:ea:69:e7:6b:9c:fe:69:cd:08:47:d8:59:c2:6d:ed:
da:47:28:1f:61:bd:a0:1d:4e:88:13:58:9d:5e:55:97:61:c9:
3e:5c:24:98:ba:3f:cc:e1:4d:f2:2c:b1:03:c2:2c:cf:cc:19:
a8:1e:88:8a:1b:bd:f0:85:09:81:5a:1b:37:9e:ed:2f:8f:db:
8e:d0:8d:ae:53:7e:af:a5:53:ba:bc:30:42:90:c9:0a:af:a8:
54:67:f9:71:a4:ce:b7:f0:8e:4f:9b:0b:ce:ef:05:7e:83:86:
5b:af:ea:83:9e:f7:56:8e:ac:5c:3e:ac:93:c9:29:28:25:f1:
5a:42:51:02:1d:32:2d:e4:bd:a3:8a:11:93:09:99:98:13:16:
3e:41:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:33:50 2025 by rpki-client