Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBC9CFE6D1C11F0AA5C1591DAE4EC9C.roa
File: 2CBC9CFE6D1C11F0AA5C1591DAE4EC9C.roa (raw, json)
Hash identifier: hef/Q91qkKminbnXDqf44qE7I5VeN3C/+7XcfP+n6HU=
Subject key identifier: F4:D4:8D:22:30:D5:FC:C3:0C:BA:4F:BC:A4:6A:E2:3A:AB:23:2C:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBC9CFE6D1C11F0AA5C1591DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:07:03 +0000
ROA not before: Wed 30 Jul 2025 08:06:58 +0000
ROA not after: Mon 01 Sep 2025 08:06:58 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102393 (0x18ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 08:06:58 2025 GMT
Not After : Sep 1 08:06:58 2025 GMT
Subject: CN=6889d2a7-3e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:85:07:3c:5f:d4:a3:4e:0e:7a:6d:69:da:
74:d8:6f:b6:00:95:66:ca:8a:cc:c4:61:cb:2e:64:
31:e6:08:e5:8b:61:22:2e:e5:e9:2c:09:f3:59:79:
a7:56:64:3b:7d:0e:78:9f:af:ed:53:69:85:28:e7:
f4:03:4f:29:52:7e:46:62:ff:86:de:f2:62:57:b6:
76:07:6d:96:2d:5f:b6:ff:68:00:98:03:a1:8c:30:
91:8c:ec:f9:0c:7d:35:0f:3c:dc:0f:60:07:f0:63:
72:33:af:8b:82:ae:59:f6:7e:7f:e7:e6:ac:30:22:
a7:b1:b4:1a:03:ea:81:0b:b8:3f:6f:ea:a1:68:95:
8e:85:98:7c:68:f0:67:40:fd:cf:a4:3a:a8:2e:56:
47:25:54:18:f2:7f:21:8b:e9:00:75:3b:5b:13:7a:
d3:4f:62:1c:2f:8d:08:a8:0b:0f:b3:f4:c5:17:9a:
68:7c:8d:44:3b:e2:a3:b2:b5:8b:ea:9c:be:6e:2a:
cc:92:cb:51:3c:26:fc:ad:e4:95:c9:72:26:57:60:
d4:c0:cc:d7:88:9b:10:4f:2d:a2:22:db:de:b1:66:
b2:26:66:0b:97:bf:d4:d8:2c:4c:db:c7:2b:bc:27:
d8:68:73:f4:4e:31:67:63:da:2a:43:ae:13:71:5c:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:8D:22:30:D5:FC:C3:0C:BA:4F:BC:A4:6A:E2:3A:AB:23:2C:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBC9CFE6D1C11F0AA5C1591DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:c6:55:41:fc:98:18:21:32:ba:2e:c2:09:eb:ec:32:27:ef:
ca:27:64:27:1c:48:e3:20:c6:65:b7:6b:87:df:89:f3:3d:6f:
ef:4b:34:78:fd:68:42:b5:80:bc:8f:e0:c9:eb:b5:a4:5d:3b:
e1:04:96:24:cc:a2:2d:bb:61:1a:0a:cb:78:77:8f:e1:d3:dd:
d7:1e:a9:84:85:08:81:16:56:8b:0c:57:67:4d:2d:ae:bf:e7:
b2:83:3f:4c:c7:f6:14:9c:53:62:02:9a:33:c5:99:06:fa:f2:
9f:4d:e4:16:34:82:37:f3:41:68:f1:92:b7:3a:cf:c7:ac:77:
b8:b1:84:5f:79:61:c1:f6:65:80:0d:6d:ed:1a:96:3f:0e:fb:
25:2e:82:6c:11:47:df:21:0b:46:94:cd:28:82:8f:a6:1b:7f:
bf:3b:0d:ab:2d:31:10:17:41:ba:f8:14:96:dc:d7:6f:c7:00:
d5:e1:cc:f5:80:fe:65:50:24:70:d0:16:14:0b:df:17:f0:ae:
4c:c7:10:38:ca:ce:44:29:ef:16:e1:56:ee:bb:20:54:a0:c7:
28:41:b4:ce:ce:14:8a:8a:04:e7:98:6b:74:98:b4:0c:68:0a:
8d:10:c4:98:4a:f5:3d:ba:5d:21:64:d5:d2:11:9e:c2:88:d8:
5b:e8:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:05:40 2025 by rpki-client