Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE49CE9C533111F0838F1DF3DAE4EC9C.roa
File: DE49CE9C533111F0838F1DF3DAE4EC9C.roa (raw, json)
Hash identifier: xiw2BlrEbsipGDsWV736M3c2XzFcEQMRhF3/9FbWnQo=
Subject key identifier: 71:51:0B:79:41:6A:9C:60:3F:6B:54:AF:5A:C2:0E:55:95:CE:93:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01893E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE49CE9C533111F0838F1DF3DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:36:50 +0000
ROA not before: Fri 27 Jun 2025 08:36:45 +0000
ROA not after: Sun 10 Aug 2025 08:36:45 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100670 (0x1893e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:36:45 2025 GMT
Not After : Aug 10 08:36:45 2025 GMT
Subject: CN=685e5822-0741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:24:93:9d:31:b2:5e:b9:6e:ff:ce:e7:7d:
76:cb:27:e8:46:2d:bc:5b:6b:b2:34:f3:60:2f:9a:
86:fd:33:80:e7:df:4b:80:a9:e9:9d:2c:d5:9a:ef:
d0:16:05:5b:6a:83:a8:68:34:ec:47:c8:44:4e:8e:
c7:cf:f7:e8:0e:ed:2c:b0:46:65:31:d2:a7:72:f3:
30:f7:8f:04:ca:0d:b5:3d:2e:10:13:2b:e6:11:23:
bc:7c:04:78:c6:48:99:6a:05:bb:b0:f6:af:a2:23:
42:f8:ef:e7:d8:b5:d1:48:1b:46:3a:9e:49:3d:5e:
bd:63:77:92:5f:25:2f:2e:e4:ff:a3:78:8b:6d:6e:
76:fb:1b:15:e5:d1:1f:1e:7c:de:2c:bd:a9:47:4a:
9c:10:f8:27:12:53:38:8b:d2:67:f6:f5:75:aa:75:
7f:ca:ac:78:5e:fd:39:6b:69:96:6f:00:43:74:fc:
ca:b9:86:5c:47:c3:c3:fd:83:da:af:ab:25:28:54:
dc:ff:e7:5d:1b:e3:30:3d:57:54:bc:32:c9:18:34:
36:3f:2e:09:9f:e3:94:a0:4c:1a:01:f5:2e:f1:16:
e1:45:91:8c:6e:7e:a9:24:6a:80:59:30:42:4e:62:
3c:fb:a9:e8:9f:c7:ab:c5:a4:a3:b3:1e:2a:70:4e:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:0B:79:41:6A:9C:60:3F:6B:54:AF:5A:C2:0E:55:95:CE:93:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE49CE9C533111F0838F1DF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a4:56:f1:09:95:c5:15:f9:8a:f4:46:f4:09:6c:78:f9:12:
14:f5:d2:72:0d:9a:26:03:39:9b:cb:b0:9a:7a:02:32:42:51:
91:29:e2:d3:df:e0:a1:38:0f:e8:3c:09:be:9d:0f:de:61:19:
a5:c7:fc:4a:2e:0e:fa:b9:28:73:e6:4a:49:a3:85:31:9a:da:
f3:97:e2:5e:54:96:50:29:21:10:fd:7c:1a:ea:7f:8b:64:e2:
c1:a7:01:6b:1d:cd:ff:63:5d:a9:1f:13:c6:02:ea:31:1d:79:
3f:07:8b:d3:a3:53:fe:aa:07:4f:d2:b9:fc:24:ac:c0:05:14:
85:39:31:48:dd:ee:a2:aa:17:1c:25:d8:9c:7d:88:05:56:c9:
c1:5e:3f:23:d8:ff:65:76:78:bc:4e:1c:6e:af:b9:79:e1:9f:
79:a5:58:a9:9b:44:a6:e0:77:8f:99:9b:c5:8d:25:89:84:e5:
81:b9:16:c0:36:fa:81:a6:f1:4e:65:b3:ed:ac:d4:2b:b0:ba:
28:18:e2:2f:b4:59:46:e7:92:e7:58:d2:2a:0b:55:da:16:d2:
36:57:3d:14:f6:44:7b:81:52:9a:31:ce:f0:68:35:0c:98:88:
4f:28:5b:6a:55:56:0c:ab:6a:64:22:63:0e:26:60:07:f8:32:
45:cf:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:47:25 2025 by rpki-client