Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3497B29E452911F0872EA786DAE4EC9C.roa
File: 3497B29E452911F0872EA786DAE4EC9C.roa (raw, json)
Hash identifier: I1SaUZeyo5FZNs4HHG7dfFYA+O6qn3z/FbAfC8Vqy1Q=
Subject key identifier: CE:1B:38:A3:46:EC:73:18:E1:52:9A:56:52:1A:E9:3B:E2:BC:BA:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3497B29E452911F0872EA786DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 11:59:33 +0000
ROA not before: Mon 09 Jun 2025 11:59:28 +0000
ROA not after: Tue 11 Nov 2025 11:59:28 +0000
asID: 204721
IP address blocks: 154.192.0.0/24 maxlen: 24
154.215.2.0/23 maxlen: 24
154.215.2.0/24 maxlen: 24
154.215.3.0/24 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99728 (0x18590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 11:59:28 2025 GMT
Not After : Nov 11 11:59:28 2025 GMT
Subject: CN=6846cca5-a8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:3f:83:c7:f5:1c:6e:eb:43:46:3f:aa:88:
a0:bf:db:6a:84:31:d5:44:42:e6:22:ba:0e:77:4f:
38:c0:d9:02:68:bf:6a:8b:4c:e4:c7:76:ca:2e:5f:
23:e1:da:05:a0:de:ba:42:09:f0:60:62:fe:a0:b9:
a6:60:ce:0d:85:13:d5:85:e3:90:8a:f2:ce:22:f4:
27:04:6e:1d:f2:e7:4f:1a:f6:d6:9e:bb:2c:c3:4d:
42:4e:c9:e4:11:dc:f8:5b:36:2a:32:7a:bc:0a:64:
fa:f8:e3:7b:8e:06:4d:31:af:23:9e:f4:ea:db:06:
db:a9:72:ca:2b:3e:1e:b8:5c:5a:32:9a:3e:d6:c0:
81:1f:85:a3:03:29:40:38:bb:27:19:61:24:4d:94:
b3:a5:43:07:a4:66:25:3e:86:df:a7:15:1e:26:b9:
f4:aa:45:82:4f:de:f7:76:37:b7:96:06:f5:7d:7d:
db:94:f6:3d:f8:7a:5f:a4:d3:9b:77:f5:41:7f:97:
11:65:a1:2d:c1:e5:b1:a7:31:d7:89:1f:d8:51:22:
82:6c:c9:e7:ac:98:7c:64:16:fe:d7:46:5f:50:eb:
dd:f6:21:e1:9a:7d:74:eb:c8:b4:b4:14:83:c9:53:
8c:e2:b6:2e:3d:b6:b1:95:d9:b1:12:23:c9:03:fe:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:38:A3:46:EC:73:18:E1:52:9A:56:52:1A:E9:3B:E2:BC:BA:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3497B29E452911F0872EA786DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/24
154.215.2.0/23
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
26:16:4e:75:bf:75:93:51:92:05:0a:27:2b:77:44:94:3b:44:
36:06:ed:00:1b:50:e9:d6:e0:2e:38:9b:55:09:53:c7:28:37:
f8:24:5f:54:63:ba:37:e0:7d:34:c5:3d:77:e9:62:ce:9e:22:
8f:6c:1f:d8:7c:eb:75:05:69:9a:74:a2:06:01:bf:ca:2e:c3:
26:e6:28:84:f8:a4:8f:42:e0:6f:89:1c:75:fb:ea:61:8d:53:
e0:5f:13:92:11:4e:0d:54:81:5a:94:7e:af:4e:a0:93:7c:78:
37:4f:7b:8b:93:72:4d:18:15:1b:49:fe:45:b3:ca:20:03:af:
34:b9:f8:12:79:0d:92:de:c6:40:e6:38:ba:84:93:c4:ad:ff:
40:75:d6:f5:d0:df:42:0f:c3:ce:79:c7:3f:7d:30:9e:a7:bc:
86:e7:ca:df:2e:5f:b3:85:10:01:b9:43:09:31:aa:2f:d6:57:
62:93:34:7a:bc:c3:34:a5:fa:21:75:b0:dc:3c:b3:6f:35:c1:
30:57:f5:9a:e1:6f:f6:05:ab:dc:8f:97:36:2b:78:a4:78:0e:
e5:56:22:b9:be:e0:f7:e0:2b:df:86:f3:e2:2e:a6:9a:33:08:
b5:49:e9:c1:92:0d:77:1d:bf:03:02:68:2a:5f:ec:df:5f:65:
d8:7c:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:58 2025 by rpki-client