Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26FD6BA437B11F081D22CA3DAE4EC9C.roa
File: B26FD6BA437B11F081D22CA3DAE4EC9C.roa (raw, json)
Hash identifier: 2Shicsn5TtaKSxmrJhScnQSVyebRi+GoX95TICYuo40=
Subject key identifier: 64:92:C2:B8:24:04:90:A6:00:58:73:9F:56:D4:C1:12:BD:3C:5E:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01853A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26FD6BA437B11F081D22CA3DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 08:45:01 +0000
ROA not before: Sat 07 Jun 2025 08:44:56 +0000
ROA not after: Mon 16 Jun 2025 08:44:56 +0000
asID: 23764
IP address blocks: 154.209.21.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 08:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99642 (0x1853a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 08:44:56 2025 GMT
Not After : Jun 16 08:44:56 2025 GMT
Subject: CN=6843fc0c-badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:2e:9d:b4:23:3f:f2:ce:ea:e9:b1:87:72:
04:f9:87:3e:9d:53:31:67:43:a3:b3:58:34:96:cb:
6c:3c:52:10:dc:84:d6:60:4a:39:de:b7:90:eb:5b:
4a:43:a9:b6:fd:38:5c:f1:d2:95:4e:94:09:a5:16:
06:29:b6:f7:64:24:57:ba:eb:3b:5d:fd:65:3b:0d:
b7:ab:db:d4:6f:83:a9:01:5f:87:1f:d2:65:d1:b2:
7f:e0:60:46:a9:12:82:76:33:fb:f0:0b:54:32:cd:
f0:b0:b9:5d:03:71:71:7c:48:c9:4e:ce:3c:cc:4f:
21:57:33:b3:28:6a:f2:fb:f6:ea:fc:e9:47:fb:00:
c4:aa:89:f7:dd:50:12:85:bf:56:a9:b8:9a:ee:7b:
d4:ea:13:58:7c:6b:4f:7a:bf:e9:25:58:cc:a9:55:
b0:fc:ab:e5:2c:30:80:5b:1b:51:d5:7f:5d:f6:de:
de:90:93:6b:92:ef:c5:b5:46:22:1c:f8:3c:14:bb:
d8:8f:88:c3:c6:78:fd:ed:73:49:a9:34:76:e2:0e:
22:30:34:51:e7:6d:ed:8f:6f:ea:5e:ae:25:6a:3e:
7f:ef:62:c2:96:bc:29:32:e6:99:6a:60:27:41:f8:
48:62:1b:ad:e5:2c:98:36:b8:5f:6c:c1:80:39:16:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:C2:B8:24:04:90:A6:00:58:73:9F:56:D4:C1:12:BD:3C:5E:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26FD6BA437B11F081D22CA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.21.0/24
154.209.23.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:4c:d7:68:cf:b5:aa:c8:3c:f4:df:fb:e7:8c:86:c0:83:b8:
c9:29:6a:8f:8f:23:59:4e:80:4d:78:a5:e9:95:9e:fb:d2:46:
ec:93:85:ee:36:bd:38:4f:e0:4a:d7:d7:37:fc:ae:de:13:b6:
06:18:b9:0b:f8:8f:b9:ef:25:c7:b5:89:61:a9:c7:4c:67:2f:
3b:08:08:81:58:5b:9c:c5:9e:a1:53:0c:be:7b:1f:8f:5e:a7:
cd:6a:ae:94:c2:db:67:db:ee:72:fd:2c:99:df:6a:6a:e6:b3:
5c:8f:5c:05:45:28:b0:4c:61:2b:11:35:45:69:2f:7b:4e:83:
5c:87:b0:8f:a3:8b:bb:93:38:bd:70:5e:58:89:fa:1e:a7:4d:
f1:23:ae:cc:41:bc:35:0a:63:d8:ee:a4:cc:af:f9:25:e6:55:
c5:c1:6b:d9:9e:58:2c:de:dd:e0:3e:7b:ad:44:00:8a:29:23:
35:a0:50:f6:46:59:d9:b7:a4:ec:f0:4d:00:a2:e7:36:8a:b4:
4f:44:90:d6:5d:01:91:86:bd:39:c0:c6:25:34:17:df:4e:54:
e5:81:99:f2:bc:93:45:90:b2:c1:92:a5:dd:50:3b:3f:82:47:
69:b8:9e:fb:c2:48:5a:38:34:28:1e:aa:9c:e6:1d:26:1b:e0:
57:62:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:39 2025 by rpki-client