Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8C39304B5B11F08A0B11E5DAE4EC9C.roa
File: 1C8C39304B5B11F08A0B11E5DAE4EC9C.roa (raw, json)
Hash identifier: 2sEmubO8sq8QPC9ZHm+tmE53u4CFPHWUPEydQCSUCKY=
Subject key identifier: FD:F5:D8:BD:A7:79:32:5B:26:34:EC:C3:85:3A:FD:AF:4A:8C:77:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8C39304B5B11F08A0B11E5DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:11:55 +0000
ROA not before: Tue 17 Jun 2025 09:11:50 +0000
ROA not after: Sat 30 May 2026 09:11:50 +0000
asID: 209242
IP address blocks: 154.211.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 11:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100078 (0x186ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 09:11:50 2025 GMT
Not After : May 30 09:11:50 2026 GMT
Subject: CN=6851315b-bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:4d:be:2c:1f:99:68:0f:2b:af:f8:3e:d3:
13:34:f3:19:83:f1:c5:18:75:56:29:6d:01:dc:15:
68:b1:2b:62:28:3b:08:b3:d6:64:c3:0e:d0:53:04:
e5:15:55:56:cd:a5:e8:78:f9:d1:2f:f5:29:97:d2:
e4:79:a3:36:27:3d:a8:d4:e6:d5:ed:d0:0f:01:9b:
b3:5c:ac:ab:54:8e:12:f6:44:8a:aa:d3:b0:d0:7f:
e0:fc:98:68:5e:d0:cd:fb:47:66:64:01:78:85:5b:
18:0f:af:da:59:7c:88:ed:21:76:43:99:12:51:b4:
8e:da:0a:3b:e8:30:ce:a4:da:33:cf:9b:8b:55:03:
eb:39:5c:b2:24:f9:00:70:ec:bd:13:ad:00:b4:f7:
ec:f5:7b:c6:17:fe:ca:15:5b:13:ae:2c:bc:88:2a:
af:6e:09:c9:95:4f:95:63:00:7f:aa:eb:17:38:bf:
aa:06:14:d3:8d:3f:0f:0f:9b:6f:4f:92:1e:af:50:
a8:5a:7c:dd:9a:8c:08:4c:9b:e9:d2:c2:4e:a2:de:
e4:8e:2e:5e:06:49:df:39:3f:07:52:dd:ec:4c:65:
a8:86:b5:0b:23:22:ec:bd:63:00:72:0f:e5:b6:4e:
02:64:38:96:1f:0e:c5:2b:42:f5:4b:6b:82:18:dc:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:D8:BD:A7:79:32:5B:26:34:EC:C3:85:3A:FD:AF:4A:8C:77:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8C39304B5B11F08A0B11E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.8.0/24
Signature Algorithm: sha256WithRSAEncryption
af:61:e6:05:ec:2e:49:23:7b:22:b4:5b:24:15:cd:03:ab:f3:
8f:7f:78:56:e0:66:c9:0f:fc:0e:19:5b:13:e9:0c:bc:31:4a:
6d:2d:3f:b9:3a:fe:c3:a5:83:e3:f1:bb:08:eb:6a:58:e8:95:
44:de:20:a2:d1:7e:e7:54:52:90:e7:74:a2:72:c0:76:be:3b:
b3:b1:a5:b4:22:cd:ca:90:84:57:ef:9e:81:26:72:c2:95:1e:
1a:c6:d9:a3:2c:07:dc:53:fe:dd:92:b4:60:aa:a0:a0:ef:d2:
bb:4d:7d:f3:71:4a:a9:9c:40:aa:54:51:c6:7a:8e:53:f7:04:
c6:9c:d1:f9:53:2c:48:76:a8:89:2a:d0:28:21:61:65:ac:57:
67:fa:05:ad:9e:c0:4a:64:18:2f:84:55:b9:00:3c:1d:96:89:
3c:f6:df:4d:5b:7b:1a:14:f1:03:12:5f:8f:eb:26:14:04:a9:
54:73:d3:a5:0b:69:09:c4:54:82:45:65:65:bb:87:38:2f:51:
4b:29:8b:f3:00:44:63:96:e4:81:d1:70:fb:17:13:72:d6:53:
ce:4b:9c:98:1e:f5:cc:0d:86:1e:f2:7e:47:6d:14:b9:d7:4e:
d2:1c:6b:31:63:50:d9:bd:62:4c:6f:66:17:09:13:89:65:be:
6a:39:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:23:20 2025 by rpki-client