Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ABDF164E7411F099AB0DA6DAE4EC9C.roa
File: C2ABDF164E7411F099AB0DA6DAE4EC9C.roa (raw, json)
Hash identifier: l7EqC5L8GUX4wku6xv1KX8tHddhOHoW/hdBp7GdfnMc=
Subject key identifier: 9C:2B:0F:75:14:BF:D7:83:21:65:67:D2:23:60:EE:CE:7C:41:EC:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ABDF164E7411F099AB0DA6DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 07:53:04 +0000
ROA not before: Sat 21 Jun 2025 07:53:00 +0000
ROA not after: Sun 06 Jul 2025 07:53:00 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100266 (0x187aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 07:53:00 2025 GMT
Not After : Jul 6 07:53:00 2025 GMT
Subject: CN=685664e0-611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:d9:17:a2:6a:82:7a:7b:ce:e7:13:a3:7c:
9f:bd:61:05:ff:92:bf:3d:53:46:58:a3:83:9f:55:
6a:a0:3e:cf:62:ad:8f:55:9f:21:a0:c3:47:24:1a:
3d:ef:19:43:0d:65:f8:8e:5d:64:e5:47:63:ae:e0:
87:b6:c8:16:c3:2e:5e:54:c4:27:f8:3c:31:c7:69:
a4:51:86:7f:b6:08:05:5a:29:c3:ce:60:e1:aa:dc:
04:d7:fa:4c:37:96:58:8a:73:0e:cd:d2:4e:20:33:
20:28:7d:ea:c7:ce:39:9e:2b:e4:ba:d5:bd:39:08:
a7:9d:4c:9a:ba:e4:b1:07:b8:62:38:d8:37:c8:76:
ea:55:14:8b:a2:b5:2c:2d:00:4e:e9:34:68:17:8f:
2c:53:ce:6d:6d:88:a5:ba:26:0a:fe:14:44:ce:e8:
a4:9f:76:ee:3f:fc:9f:0a:00:82:22:bb:0b:1e:a0:
bb:fc:e5:77:03:c2:d6:99:af:ad:e8:63:46:a3:1a:
55:f1:fe:1b:0f:d6:d1:d0:10:4d:4d:f3:c7:a2:a5:
ca:08:a8:84:a8:09:95:6d:fe:c4:3c:20:f7:7f:73:
23:3e:8b:33:51:a7:90:c7:21:ea:97:60:23:93:26:
e6:d7:3c:f8:1e:b6:68:81:19:02:2f:c9:bd:12:85:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:0F:75:14:BF:D7:83:21:65:67:D2:23:60:EE:CE:7C:41:EC:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2ABDF164E7411F099AB0DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:44:43:74:1d:73:8b:eb:f2:cf:1b:67:ab:02:4a:0a:e1:2a:
1d:2d:c1:5f:82:c2:59:56:3a:46:a9:3b:48:4b:40:0c:d0:a6:
61:ef:6f:9b:8b:52:14:11:f7:d0:f7:63:c9:ed:ba:f2:82:f0:
f1:f3:06:5d:5e:32:2e:5c:7a:a7:54:ba:b3:78:cc:d3:74:b9:
30:21:a4:10:57:93:1c:66:74:5e:fa:d4:f0:68:5a:9e:df:1b:
27:47:c0:1a:dd:16:0e:c4:8f:5d:39:f2:82:dc:2d:17:a3:e4:
d2:8c:ff:36:ff:89:e2:89:f2:6a:b3:a9:54:fc:92:6b:dd:e2:
21:cf:da:c5:c1:10:1a:a3:22:77:06:61:b7:8f:64:b1:e9:c4:
5d:d4:1f:2a:b1:41:2d:d5:35:e5:60:b6:7c:12:e4:6c:f1:72:
a7:6d:20:22:6e:18:a8:91:69:02:8c:9e:8d:9f:aa:2b:66:74:
05:dc:be:7a:59:b6:86:83:88:6b:12:3c:04:d2:51:0e:2e:61:
02:b9:39:46:cb:79:7c:10:4d:bf:5d:03:1d:3b:7f:9d:d9:21:
2e:bd:ce:d2:aa:11:4c:d5:18:cc:0b:96:e8:90:5b:c1:89:f5:
0b:ba:d6:fa:3b:06:60:2a:02:8d:9a:6b:70:02:fe:3d:f2:d9:
13:45:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:59:16 2025 by rpki-client