Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EA3AF250EE11F09014ECB7DAE4EC9C.roa
File: F2EA3AF250EE11F09014ECB7DAE4EC9C.roa (raw, json)
Hash identifier: wXJoiVgtHz3l6f2Qyvm/oCz5ULJo+QnWqwnM2FerW5E=
Subject key identifier: 8D:7A:1D:49:52:27:40:53:6A:00:B5:93:68:69:25:07:DE:41:27:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EA3AF250EE11F09014ECB7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 11:32:46 +0000
ROA not before: Tue 24 Jun 2025 11:32:41 +0000
ROA not after: Thu 31 Jul 2025 11:32:41 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100436 (0x18854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:32:41 2025 GMT
Not After : Jul 31 11:32:41 2025 GMT
Subject: CN=685a8cde-3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:eb:72:d1:fe:d1:76:84:c9:27:67:4b:a9:
34:74:e3:53:87:35:8d:22:ba:32:02:e8:1f:71:f8:
a0:ea:06:18:e6:b6:0d:c5:2c:e8:57:d3:ee:4c:de:
e8:70:53:b1:07:1d:2c:c2:93:49:99:87:60:8c:9c:
da:af:16:7c:5d:84:58:8f:d5:d3:10:a0:1b:e2:e4:
51:7c:a7:db:cf:c2:f4:93:aa:90:37:a1:85:d6:c5:
17:0f:13:c7:cb:f9:91:70:a5:5e:31:c9:70:83:44:
ab:da:44:08:19:2d:10:9c:50:fb:de:78:a4:86:cd:
43:e7:97:7d:c2:83:4d:3a:0b:70:a1:bc:5d:b1:0c:
ca:71:04:a9:2d:50:85:0e:ee:e0:cd:b2:73:78:c5:
a6:93:2c:1c:9d:c7:e4:db:15:20:9f:ed:b3:9e:2b:
8e:ee:30:1e:9d:76:6b:73:f9:3d:f4:5c:3d:04:b8:
34:f7:f7:26:b1:5b:cc:96:f8:0a:0a:e8:a5:9b:fb:
da:93:fd:69:8c:80:ec:72:e8:51:fc:21:5e:cd:90:
63:e5:41:29:0a:2f:a7:1a:09:e3:01:fb:b2:4b:b1:
82:08:c4:89:8a:8e:eb:cb:72:2f:88:8f:41:22:d8:
17:20:24:ea:30:f0:81:fe:90:2b:8d:04:d1:90:f1:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:1D:49:52:27:40:53:6A:00:B5:93:68:69:25:07:DE:41:27:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EA3AF250EE11F09014ECB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
7c:20:e9:ec:56:e1:ec:4e:cf:7a:39:f7:e4:56:dc:a7:d1:86:
a6:cc:23:85:c9:5a:87:26:b9:c8:1d:dd:c1:25:01:d4:44:f7:
d3:36:47:6b:af:a4:90:fa:f2:2f:5f:2a:22:fd:f4:d4:1a:9b:
8e:11:a7:3e:21:a7:61:9d:02:4c:4a:9d:3d:99:93:79:ae:13:
76:0b:f4:14:7c:88:ea:d5:df:cd:6d:d0:fa:8a:8b:80:3d:11:
cd:10:19:02:6f:5f:30:d6:0d:bd:55:24:e1:5d:33:b4:ce:9a:
a0:cb:60:66:74:cb:2b:e6:94:19:a5:17:14:d5:98:c4:4a:78:
87:06:b6:c4:98:c5:76:e5:8d:9c:71:9e:cb:2f:12:72:40:bb:
dc:0c:6c:22:4b:c1:33:08:68:cb:37:32:c0:0c:b2:76:c2:fc:
f8:da:97:58:3b:26:4a:f1:e5:f7:ef:73:45:80:39:cf:7d:19:
7e:b8:a8:ab:8b:71:f2:55:aa:07:87:8a:86:86:74:e5:52:62:
61:f8:7c:68:f0:69:c5:33:71:c9:f9:7a:ad:91:31:8f:79:af:
07:68:86:64:5d:1e:8f:54:67:a8:73:c5:ed:b9:e6:89:ff:5b:
b1:af:89:70:d2:70:64:79:b5:f0:b2:9a:5e:5b:88:5f:1a:a2:
40:53:2b:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:03:43 2025 by rpki-client