Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D205BAFC57FE11F08E053DA7DAE4EC9C.roa
File: D205BAFC57FE11F08E053DA7DAE4EC9C.roa (raw, json)
Hash identifier: KmcvojWaAKoCA3AmYzaMpQcMEQbjIGfoiz9yBrqyZr0=
Subject key identifier: 22:CE:88:D0:87:7D:E6:21:7A:04:FA:6E:05:65:C6:56:23:4C:ED:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D205BAFC57FE11F08E053DA7DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 11:14:01 +0000
ROA not before: Thu 03 Jul 2025 11:13:56 +0000
ROA not after: Tue 05 Aug 2025 11:13:56 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100869 (0x18a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 11:13:56 2025 GMT
Not After : Aug 5 11:13:56 2025 GMT
Subject: CN=686665f9-c22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:5b:ef:e1:6a:f1:6d:f3:d6:33:78:30:01:
79:f4:06:0a:5c:3d:56:fa:83:91:78:8d:16:ee:59:
af:5f:dd:ef:31:1f:b0:6d:d4:e3:17:6d:84:7d:20:
51:92:0d:72:24:6a:f5:84:b8:ef:22:1f:fa:9b:f3:
3c:83:92:d1:80:ef:ca:99:5e:6d:ca:1f:86:49:93:
3f:27:35:af:fb:b0:df:09:d5:e0:40:42:3a:6e:9d:
3d:b6:fb:20:a0:55:d6:c2:b3:90:ae:dc:2c:98:f3:
3c:a9:bb:7f:41:eb:9e:ab:7e:95:64:f6:0f:0f:7c:
25:c8:a0:ab:e4:29:03:60:e1:b0:ce:aa:70:03:31:
f2:cb:82:7a:c8:b5:96:68:ff:9e:6a:0f:f8:62:79:
b6:f0:70:a0:a4:f8:68:46:69:30:67:7b:81:ef:09:
d6:70:01:ef:06:1b:cf:e5:2d:f2:ba:ea:b5:48:db:
2e:47:fb:b1:a5:4d:9f:fb:fd:fb:e8:7c:f5:4d:ba:
a9:24:69:69:13:31:c9:64:a7:b6:5f:ac:86:d6:67:
05:c3:79:93:0c:2f:07:44:97:7c:8b:db:f7:a4:eb:
f3:3d:8f:1b:82:e4:8e:ba:e0:92:f5:6c:04:b2:14:
8d:e7:b8:29:a6:bb:64:37:31:82:f9:70:c8:85:ce:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:88:D0:87:7D:E6:21:7A:04:FA:6E:05:65:C6:56:23:4C:ED:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D205BAFC57FE11F08E053DA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:21:00:5f:ce:ff:be:94:c0:cb:56:02:bb:96:ae:23:29:d8:
ce:4c:0f:ea:90:3a:38:06:ba:3f:71:91:d6:cf:30:31:9b:02:
05:f8:be:cd:0f:19:6b:77:f3:78:f7:f7:da:91:83:fe:c4:fc:
a0:e3:71:54:0f:af:f4:f2:7f:9e:f3:93:ae:38:15:dc:73:a6:
97:17:62:fc:03:f0:91:7a:d7:3d:85:5c:68:c3:d5:33:b5:55:
74:d8:5e:e7:59:fa:93:1f:a9:0b:0a:e2:6e:0e:3f:b0:13:9b:
32:1f:f0:11:d7:b6:64:db:bf:73:81:3a:c3:ea:eb:f9:5d:ea:
54:57:ed:9d:6f:53:2b:71:a1:dd:e9:45:97:26:29:df:03:03:
54:af:3a:c3:5d:c3:49:97:26:ba:4a:8c:62:80:2e:b3:11:db:
38:33:fc:ff:21:00:3c:ea:0d:cb:1f:ee:58:d9:86:55:d1:e1:
0a:ca:04:d7:0c:d6:43:4c:5a:8d:3b:76:12:9c:60:3d:90:9e:
ec:57:18:25:4a:1c:91:93:cc:51:f3:de:87:ef:a6:fc:e7:26:
ce:d5:b7:86:9e:6d:1d:a1:13:74:a3:b3:c9:c8:98:a1:6b:d2:
23:d9:60:db:5e:fd:b1:5b:6b:72:d3:7d:6d:54:3d:d0:90:8d:
12:f6:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:05:02 2025 by rpki-client