Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5C78BA511011F0AC910193DAE4EC9C.roa
File: 9F5C78BA511011F0AC910193DAE4EC9C.roa (raw, json)
Hash identifier: ratq+qz2wNfk6KkJNCypJo9T1I+zZdERrVf1lkkmVmU=
Subject key identifier: 0C:97:F5:41:3C:71:B3:FB:C1:7B:E6:EC:88:40:D3:E8:21:F6:FC:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01887E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5C78BA511011F0AC910193DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:33:49 +0000
ROA not before: Tue 24 Jun 2025 15:33:43 +0000
ROA not after: Tue 05 Aug 2025 15:33:43 +0000
asID: 48031
IP address blocks: 154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100478 (0x1887e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 15:33:43 2025 GMT
Not After : Aug 5 15:33:43 2025 GMT
Subject: CN=685ac55d-2632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:ec:fc:c5:ad:39:05:e6:fd:bc:08:30:02:
a2:63:59:41:40:f6:ca:75:db:97:5f:cd:85:ff:b3:
cd:8f:71:bf:d1:51:6c:64:f9:32:2f:c7:94:c1:1d:
53:29:8a:62:5b:34:32:9e:a3:7d:2d:5c:4f:6e:7b:
dd:e7:68:43:32:7e:af:1c:c6:6e:1a:69:9c:4d:fa:
33:07:76:7a:a8:89:7f:80:d4:d5:ad:56:90:3e:76:
40:31:97:ac:03:fa:83:37:e5:03:a1:a2:a7:49:70:
a3:30:56:5c:65:9e:4c:67:d8:51:97:3c:96:13:a5:
6d:3a:29:46:ff:80:5f:af:b5:c0:54:f9:ee:69:99:
cb:f9:ea:f6:b0:18:c5:3d:51:ba:30:ed:38:81:78:
ce:83:bb:fb:f7:b2:8a:18:2a:a1:3d:6f:35:bb:51:
db:ea:d4:47:09:bb:56:8f:4d:57:5f:78:ea:d2:70:
16:28:c1:4f:75:42:b1:cd:d9:85:8c:52:13:b0:98:
fe:79:08:5e:60:52:9f:1d:f3:9b:2c:02:57:78:e5:
ce:96:07:8a:20:6c:ac:6e:15:91:1d:ce:31:76:bd:
1f:60:19:e0:2d:8f:ee:66:00:d8:31:c3:bd:71:d8:
d9:36:71:63:02:72:ec:b9:8d:07:63:ab:c5:35:1d:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:97:F5:41:3C:71:B3:FB:C1:7B:E6:EC:88:40:D3:E8:21:F6:FC:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5C78BA511011F0AC910193DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.213.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.247.255
Signature Algorithm: sha256WithRSAEncryption
85:b8:4e:53:0c:58:42:ed:bf:ce:07:a4:4a:93:24:08:fa:6d:
4d:9a:e6:5c:f7:45:12:d0:c2:db:56:3f:f1:48:5f:bb:5c:7c:
13:9b:c1:e2:c7:23:37:ab:b1:44:fa:9f:fb:0d:92:54:d0:b5:
e5:cd:a2:7b:7e:df:fb:62:a6:06:94:2c:1d:b6:c5:76:74:81:
be:51:f6:a4:69:4e:72:d3:f5:c1:93:b8:32:c1:45:56:63:06:
22:76:56:fd:2b:84:a5:b6:35:36:dd:23:40:e0:92:33:5b:b7:
24:5b:d8:a9:50:31:76:73:2c:df:5d:93:8a:61:87:49:77:ee:
42:c2:ee:1d:c3:fe:5f:b7:f8:57:77:81:1c:d1:92:42:4c:47:
b5:2b:f1:e1:60:7a:70:b6:92:cd:88:d4:e1:5e:31:98:fe:4c:
5f:53:bf:5c:fb:ab:34:3a:49:6b:33:e8:85:9a:1d:93:98:f5:
41:dc:0f:3b:b6:f0:c8:f8:c6:a5:83:0e:70:08:0b:65:98:6d:
0a:7c:53:1e:5b:d5:9d:93:db:dd:b4:17:03:2b:76:c9:3b:f6:
a3:42:75:38:54:67:2a:13:5b:99:5c:de:9a:c7:9a:88:ab:af:
5a:be:75:04:60:b5:ae:8d:d0:9e:45:90:d4:87:69:cf:fd:1d:
5c:21:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:23:03 2025 by rpki-client