Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B78EFA50DD11F0952F87CBDAE4EC9C.roa
File: C1B78EFA50DD11F0952F87CBDAE4EC9C.roa (raw, json)
Hash identifier: 8a6SzsMGpSfh4cIZaJNP521uC3D4QwnTlNNNOowi2b0=
Subject key identifier: B0:48:A0:89:F3:9D:A2:7E:A2:B6:F5:67:D0:FD:2C:1F:9C:55:C1:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01883A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B78EFA50DD11F0952F87CBDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 09:29:42 +0000
ROA not before: Tue 24 Jun 2025 09:29:37 +0000
ROA not after: Sat 26 Jul 2025 09:29:37 +0000
asID: 134489
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100410 (0x1883a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:29:37 2025 GMT
Not After : Jul 26 09:29:37 2025 GMT
Subject: CN=685a7006-3969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:e3:50:17:9e:56:5b:f9:ac:59:b7:66:65:
20:a0:11:5c:13:7b:a1:76:ed:45:6c:67:29:8d:49:
d9:47:05:21:0e:7a:a6:6f:86:84:48:83:9b:b0:bd:
68:7c:cd:f8:6c:1f:db:39:39:af:a1:11:30:8c:4a:
c5:81:04:81:e2:b8:c3:30:4a:8f:1c:83:a4:a6:d5:
de:e2:eb:bd:ad:b8:fb:ae:62:9e:c1:c0:51:96:56:
b7:b8:01:c4:32:dc:55:a5:68:93:8a:13:86:d9:2f:
6a:12:34:58:ab:74:16:ce:37:42:f0:89:93:93:9e:
3d:18:c3:a7:c9:07:0c:88:cf:b9:c2:a5:f9:28:71:
39:90:4a:8b:54:8b:37:d5:d7:18:2f:39:3e:6b:61:
5c:0c:8d:e7:50:a3:52:5d:f9:8b:7c:31:a1:8c:93:
9e:02:d7:b8:f4:20:21:2d:f5:ae:5d:65:24:54:ca:
e4:f2:c4:cf:f1:1b:7d:67:37:8f:3c:25:7f:39:c2:
4a:03:bb:9e:13:3f:86:45:ad:76:e8:bc:74:11:aa:
4a:87:45:5f:6d:09:0c:b8:be:b8:b2:4f:02:7f:d7:
58:d0:61:75:ca:0f:93:52:5e:99:1b:ac:6f:d1:74:
ce:68:65:5f:a8:b5:36:74:bf:88:aa:6c:18:be:77:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:A0:89:F3:9D:A2:7E:A2:B6:F5:67:D0:FD:2C:1F:9C:55:C1:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B78EFA50DD11F0952F87CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:79:eb:73:c4:13:b3:4c:90:3b:e1:a0:c6:ff:dc:1b:74:
ed:b8:fc:c5:6f:da:69:83:1e:21:ff:57:f0:e6:45:77:6f:7a:
68:d2:d1:ab:c0:20:8a:b9:dc:22:68:94:d0:93:7b:e9:42:0e:
6f:a9:a8:6c:75:4b:2f:d8:d2:84:6e:53:9e:55:84:81:8b:e8:
19:1d:0e:5b:44:67:63:34:f7:fe:1d:02:a3:32:18:e7:e2:d1:
ba:8b:9b:81:d6:d3:ba:3c:43:0b:a5:60:7e:cd:4c:4d:31:2b:
2c:4e:a0:dd:5c:98:fe:a7:41:b4:84:86:4c:d4:06:e8:2c:1b:
20:f9:60:74:68:70:f0:fe:ba:e2:73:4b:48:79:57:4d:fd:fb:
9c:9d:2a:67:98:82:97:ec:99:ea:87:09:71:f0:4f:15:8a:96:
77:88:50:27:d0:14:b9:4a:9d:ed:97:be:06:07:cd:36:13:56:
82:ff:42:10:f9:dc:bb:b2:0b:82:35:2a:89:a4:60:aa:08:71:
e0:22:f4:0c:95:ed:01:f6:82:23:d5:99:5a:32:bb:8f:88:e9:
25:81:7e:a3:b2:9b:15:fe:2e:d3:46:33:ce:1b:fe:c3:0e:c2:
70:d6:8b:3a:d5:07:3a:7e:34:c9:0a:0d:bf:ac:12:44:c7:d1:
e3:19:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:04:20 2025 by rpki-client