Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFDC84510D11F0AE98B17FDAE4EC9C.roa
File: C8DFDC84510D11F0AE98B17FDAE4EC9C.roa (raw, json)
Hash identifier: 8g+z3ETOaPSoOdqRALbMruxL3KbF5xmTV5DO8OhHwJY=
Subject key identifier: BC:82:90:76:BE:E1:76:E5:4E:5B:84:8E:54:E2:C2:E2:D7:3E:3D:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018878
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFDC84510D11F0AE98B17FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:13:30 +0000
ROA not before: Tue 24 Jun 2025 15:13:25 +0000
ROA not after: Tue 05 Aug 2025 15:13:25 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100472 (0x18878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 15:13:25 2025 GMT
Not After : Aug 5 15:13:25 2025 GMT
Subject: CN=685ac09a-d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:8d:e6:7d:3c:e4:72:53:44:af:4e:81:2e:
63:92:ec:89:f8:07:59:03:95:b7:0b:0b:a6:28:12:
4e:9f:d6:cd:63:8d:ec:c4:a9:3e:3a:ef:68:3b:82:
fd:75:a5:81:ae:73:a7:49:e6:f2:6a:c0:86:7f:3c:
95:5b:0e:b2:33:b3:67:b4:a1:a3:61:00:a4:08:73:
de:4d:f4:29:3d:46:f3:cd:cc:ad:49:e2:3a:ef:87:
90:49:15:6b:20:0b:38:ca:e9:d0:20:46:f4:9c:d6:
ac:08:15:55:00:e0:74:f9:c2:ca:d2:cc:7c:20:d6:
ab:af:0f:cb:2e:09:4d:e3:9d:58:c2:b9:10:ac:30:
3b:b7:f1:cb:a0:4b:53:db:60:50:f5:95:bf:73:5b:
1e:d5:57:a4:44:39:92:63:38:63:ba:83:44:2c:1b:
35:6a:b2:21:08:72:b0:8e:9b:e8:66:1d:18:ec:7a:
5d:3f:da:29:76:ad:b0:e2:5d:01:14:67:44:7a:76:
25:91:10:41:75:fd:b0:2d:0d:6d:26:cc:64:1f:95:
af:93:98:fe:3a:bf:44:ac:0b:06:88:20:55:9e:8f:
9d:75:38:6b:3d:a8:62:df:e0:96:bf:6f:09:16:f6:
1c:34:56:fd:ef:60:1c:be:e3:46:04:55:b4:10:c1:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:90:76:BE:E1:76:E5:4E:5B:84:8E:54:E2:C2:E2:D7:3E:3D:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFDC84510D11F0AE98B17FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:e4:3b:7d:60:4b:f5:46:7d:c0:43:db:a4:0f:83:ec:7b:9d:
b6:ee:ac:46:2d:87:27:af:f8:41:4e:7a:09:d8:96:9f:c1:ba:
2d:5c:ea:1d:2a:a6:8b:17:a6:13:bc:a6:d3:51:2a:5e:86:0a:
f2:78:9e:3d:92:aa:53:d8:f1:33:35:4c:f7:b1:16:09:ca:57:
9a:fd:50:6d:26:00:2c:86:fb:6d:a0:65:05:79:d5:c0:fc:91:
5e:82:6c:f7:13:68:f4:e7:0f:0b:52:11:8b:30:cc:ac:43:83:
52:bc:ec:96:61:45:9c:7b:2b:08:f7:db:01:53:c4:2c:22:0c:
3a:67:2c:c3:50:10:77:2d:04:7f:b5:97:f0:c5:4e:71:1a:47:
b0:4b:43:a7:98:c5:85:f7:d4:16:17:cc:84:e0:2e:58:04:df:
c0:0f:e0:d4:9d:ea:f2:89:e0:b4:63:47:ce:d1:cd:24:3f:52:
60:27:8d:68:22:0a:eb:41:c3:88:67:54:21:eb:f0:b5:38:83:
22:b1:ac:78:a6:16:39:2d:59:50:4d:cc:17:db:ec:04:2e:f9:
7a:c5:2a:91:f2:51:3d:16:f0:6c:27:ae:f2:c4:72:ad:86:12:
62:48:d2:c8:43:3d:44:3a:a9:91:24:1c:7b:0b:58:e1:04:d3:
95:a9:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:08:17 2025 by rpki-client