Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F2C23A525811F0ABA695F0DAE4EC9C.roa
File: B4F2C23A525811F0ABA695F0DAE4EC9C.roa (raw, json)
Hash identifier: a+iQPQXD6G3nZuzTNvesxmUmGtEQ9d3aHhVI5RgXFJ4=
Subject key identifier: 22:C2:63:83:0D:87:BC:AE:31:7B:50:3A:23:6B:50:13:5A:45:C0:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018910
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F2C23A525811F0ABA695F0DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:42:20 +0000
ROA not before: Thu 26 Jun 2025 06:42:15 +0000
ROA not after: Wed 17 Jun 2026 06:42:15 +0000
asID: 153706
IP address blocks: 154.193.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100624 (0x18910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 06:42:15 2025 GMT
Not After : Jun 17 06:42:15 2026 GMT
Subject: CN=685cebcc-2537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:fa:51:b3:eb:02:86:f4:78:72:31:ac:84:
c2:b9:32:a9:56:b4:1d:18:b5:af:a3:cf:b0:81:28:
5a:cf:bb:70:ce:bc:8f:b6:10:38:ce:39:b9:84:bb:
a9:5f:c9:60:b4:88:d2:27:d4:03:33:53:dd:ba:55:
73:3c:e3:20:17:5f:9e:3a:ca:9d:2f:24:0e:90:94:
e2:71:8d:62:5a:f0:af:fc:c7:97:b9:40:fd:53:bf:
47:97:5c:2d:d9:42:37:45:ff:62:53:6b:b8:d2:7d:
83:59:d8:22:c0:b4:83:7c:15:8c:1b:ee:61:fe:1b:
c8:28:f0:24:ce:69:c4:f4:02:2c:08:cf:5d:18:3d:
0f:a8:cd:f0:8a:f8:4f:46:31:a7:50:c6:33:81:ad:
8b:27:84:5a:99:35:2f:67:8e:6a:af:8d:b7:29:82:
f9:c5:36:23:0b:99:dd:b0:87:24:7b:8d:29:87:cc:
57:15:25:25:39:41:18:56:e7:c0:89:6c:9a:18:5f:
27:bd:30:3a:8f:f1:03:60:c4:5f:7d:d3:7c:94:2f:
42:3a:2c:82:8d:62:5f:16:9b:c3:8a:92:08:df:e3:
76:49:9f:a2:e6:2f:f6:9e:75:e7:c6:af:aa:80:9a:
58:0e:19:a2:0f:53:a5:6e:04:f5:81:6e:b8:7b:51:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:63:83:0D:87:BC:AE:31:7B:50:3A:23:6B:50:13:5A:45:C0:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F2C23A525811F0ABA695F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a6:e9:4f:3b:8a:eb:4d:f2:f9:50:df:f0:c5:c7:f6:f9:39:
94:ff:77:c2:58:66:1e:52:6d:88:69:31:11:34:f4:d1:cb:1b:
0f:a9:70:b0:71:47:4a:28:ca:f2:ea:e6:f5:bb:cc:a6:76:2c:
3f:14:d2:59:29:8d:f4:76:52:c1:13:b2:03:2e:92:25:0c:4c:
32:c3:b8:c8:28:3b:97:95:65:43:81:28:54:6f:8c:4e:b7:56:
12:bd:e0:0a:1d:a9:79:7c:de:59:e9:b4:21:30:0b:20:4b:59:
9d:48:08:6d:9d:69:59:ea:9d:48:5c:8c:78:d8:60:7b:6f:85:
03:43:06:78:4f:35:74:03:91:57:b7:30:f3:6f:49:9a:35:89:
ab:7b:29:6b:78:38:8d:87:2f:6b:6e:0f:e2:e6:f9:1d:3e:c6:
b1:b4:a0:2e:95:11:f2:c6:e6:23:95:30:11:a6:9b:77:a8:85:
45:24:73:87:40:24:29:3e:7e:31:2a:48:67:b3:b5:77:ca:76:
71:54:e8:88:e7:f6:8e:97:a1:17:d2:db:a8:46:1c:97:09:b7:
af:b2:bf:df:fc:1b:d2:36:0d:01:12:d0:0b:24:66:8a:d5:53:
88:94:93:49:d1:a4:4c:bc:87:fc:5e:ab:70:8d:1d:a7:82:12:
a3:50:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:50:43 2025 by rpki-client