Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/707F735E469C11F0986FB17ADAE4EC9C.roa
File: 707F735E469C11F0986FB17ADAE4EC9C.roa (raw, json)
Hash identifier: DQ3agkB9+pQ0WinJ8d7pZxhWOvHDXhhb2SWGl0QPYGc=
Subject key identifier: FA:C8:83:58:F1:90:29:FA:10:63:EE:6B:2E:6B:2B:96:71:03:3A:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/707F735E469C11F0986FB17ADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:16:57 +0000
ROA not before: Wed 11 Jun 2025 08:16:51 +0000
ROA not after: Tue 24 Jun 2025 08:16:51 +0000
asID: 44559
IP address blocks: 154.81.192.0/24 maxlen: 24
154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99824 (0x185f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:16:51 2025 GMT
Not After : Jun 24 08:16:51 2025 GMT
Subject: CN=68493b79-50a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:01:d8:ef:1a:57:30:0d:58:cf:65:09:be:
d0:55:99:0e:00:cb:3b:23:04:8c:76:34:45:6e:b6:
12:3d:a1:0c:f6:1f:54:35:c6:e7:2e:4b:17:24:d3:
33:0f:0e:b2:53:9a:bb:a7:9b:9e:d1:1c:21:b2:0d:
c9:3a:18:c2:8e:de:b3:da:74:78:a5:41:85:8d:31:
2f:dc:f0:e1:1e:19:a3:ef:3f:ea:7f:9a:b1:71:c2:
36:f9:e2:84:f1:a6:b0:d5:2c:ce:5b:c2:be:3a:ee:
df:e0:cf:8d:26:55:9a:0c:c4:e5:e4:a6:4f:50:3a:
5e:e1:c3:f1:ef:d2:0e:b6:ff:39:1c:de:3a:39:df:
be:4c:e1:4b:74:52:29:16:40:68:86:05:9c:e7:a0:
b6:53:a5:44:14:fc:ac:dd:36:63:cf:2a:4c:2b:6c:
62:5b:36:2e:fe:3b:b1:e9:73:3b:d4:b0:42:70:6d:
f1:11:17:4a:30:ad:d7:10:9c:30:a6:3d:4a:29:a7:
ed:06:51:70:d9:9f:fe:db:a7:63:0d:22:ca:09:12:
ce:1a:89:e0:fe:a3:c0:1f:d8:a5:42:2f:14:31:26:
d5:13:68:01:28:c7:ff:6f:dc:f5:cc:66:a6:cd:a3:
5a:c1:c2:78:d4:27:8b:3f:4a:9c:e2:fd:33:52:2b:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:83:58:F1:90:29:FA:10:63:EE:6B:2E:6B:2B:96:71:03:3A:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/707F735E469C11F0986FB17ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ba:6d:96:bd:99:f6:6d:c0:99:9f:1d:3e:ba:49:b6:17:1a:
44:2c:84:76:4a:3e:e9:fb:d4:bd:f7:23:96:62:c8:1b:83:c0:
fe:70:be:8b:f5:fe:ad:62:08:2f:35:1d:a9:ff:a2:ec:f5:28:
14:1a:36:6b:fb:56:24:9c:a9:7a:2e:32:51:e4:e8:2b:40:8e:
61:5e:be:b0:a0:b3:24:ad:e1:f5:cc:bc:d0:75:a8:88:e4:1d:
48:23:9c:16:2d:53:fc:d8:50:b5:0a:bc:9d:c6:9e:7d:63:79:
91:99:99:99:89:68:21:f8:d4:5f:6a:a0:49:4b:40:f6:84:44:
2e:15:a9:a5:21:46:da:7f:6b:9b:39:2a:45:6f:20:c2:c3:c5:
e9:a6:fd:74:61:46:e5:17:a6:d6:a7:e4:9b:d1:dd:92:68:4c:
a6:ac:2c:e1:d5:25:8a:0b:b3:5f:e4:5d:5a:99:8d:1c:0e:54:
81:68:29:bd:74:ee:39:06:e5:83:70:3d:01:7e:81:24:0a:7c:
fb:38:0f:d0:81:83:29:b5:a0:13:36:34:63:a7:5b:51:e6:3b:
eb:f8:33:e0:57:d0:26:7d:99:2a:44:e5:ab:90:b1:de:6b:93:
88:57:7f:e9:b7:cd:9c:42:35:a1:d2:15:67:1c:ea:fb:5e:93:
46:86:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:44 2025 by rpki-client