Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C5A0E867A411F0BBD148F1DAE4EC9C.roa
File: 67C5A0E867A411F0BBD148F1DAE4EC9C.roa (raw, json)
Hash identifier: HLfHA5HRinkA8t2eAlXzKnESJ4CJJ7qV/iColQSQnoo=
Subject key identifier: D2:F7:AC:E6:CF:53:EA:15:5A:FC:38:CD:4B:81:6E:40:C8:DB:F9:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C5A0E867A411F0BBD148F1DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 09:07:06 +0000
ROA not before: Wed 23 Jul 2025 09:07:02 +0000
ROA not after: Sat 25 Jul 2026 09:07:02 +0000
asID: 212552
IP address blocks: 154.211.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102129 (0x18ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 09:07:02 2025 GMT
Not After : Jul 25 09:07:02 2026 GMT
Subject: CN=6880a63a-670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:a1:dd:2c:41:42:ea:2c:c0:fa:59:92:88:
4f:5b:70:ff:97:ca:b3:36:1a:01:76:5c:e1:c0:15:
c4:4f:12:c3:c0:73:5f:8d:73:8d:9b:c5:da:51:b3:
c1:b1:2d:df:a0:fe:a9:c2:f4:fe:b0:b9:79:e3:63:
d5:ba:c0:61:87:75:20:36:94:df:e1:60:c4:f6:d8:
cd:6b:de:28:c3:f3:a7:35:43:0f:77:a9:40:63:15:
d3:1d:51:01:77:d1:8a:b6:66:5b:6e:42:72:4c:01:
9e:98:13:58:ea:01:d2:fb:f7:a3:e6:91:f2:36:91:
7e:2e:96:df:2b:ca:18:ef:39:8b:1c:d7:d9:26:6d:
ae:8b:45:3a:d1:cb:ec:74:e1:36:78:d3:97:56:d4:
fe:4f:54:70:2e:dc:ce:04:ac:15:3a:af:80:07:c0:
a9:ee:80:89:86:7b:d8:60:02:e1:47:81:7f:e0:69:
cc:58:bd:50:0b:45:60:39:36:33:d6:6c:7c:03:68:
67:dd:ac:4c:70:85:d5:82:c5:0e:4c:cd:5b:8c:7c:
50:9a:bc:ce:0c:89:59:93:5e:5d:6a:51:10:33:a1:
2c:24:eb:ff:41:65:43:40:85:74:f2:69:d1:ee:78:
d4:5d:77:ec:01:7d:92:4e:ec:f2:25:f4:3a:af:79:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:AC:E6:CF:53:EA:15:5A:FC:38:CD:4B:81:6E:40:C8:DB:F9:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C5A0E867A411F0BBD148F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:65:93:3b:54:98:a1:4c:48:80:9e:44:4e:a0:9f:07:b1:96:
6c:d1:e5:92:21:43:b5:f8:65:86:fc:60:ee:ea:c7:8e:b5:1c:
3b:f4:0a:97:34:68:cb:18:d2:6e:80:17:2e:bf:77:79:15:3b:
da:d9:b0:65:87:4b:77:ed:da:61:87:fd:be:40:26:b6:cc:5e:
21:1a:fa:56:24:ce:fb:21:11:88:f3:96:e7:91:86:36:ab:00:
d6:73:37:fe:b1:7c:38:ee:d8:50:89:03:ea:87:6c:ba:16:e8:
cf:09:10:5c:db:66:29:67:e9:4d:41:8f:cd:37:bc:98:32:a8:
f9:9c:24:a0:b9:97:7b:90:1e:59:e2:f3:f3:a6:e4:c7:58:0d:
26:db:c7:f7:d3:f8:40:2f:da:ad:01:bb:18:bf:84:a7:4d:8a:
46:86:be:75:7a:a7:2d:55:bc:1e:cb:94:74:cf:6e:33:84:0a:
81:ff:3e:d0:3e:32:52:ce:52:97:e9:e5:c8:0f:c2:4b:68:e0:
5c:32:ea:94:d5:e2:db:ce:df:27:76:c5:bb:52:99:e1:ac:10:
fa:1b:ab:87:c9:39:05:b1:7b:a4:0a:c2:80:b0:10:57:6b:23:
72:65:21:24:0e:67:46:30:9e:a7:c1:9d:0c:0c:c5:25:7d:6d:
c0:2d:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:05 2025 by rpki-client