Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC9D8C0E665711F0B5CF96F1DAE4EC9C.roa
File: CC9D8C0E665711F0B5CF96F1DAE4EC9C.roa (raw, json)
Hash identifier: MXBMYy9RjoGpzW+QsaoUo60vGNZd2TFdxW9wXrYZEW0=
Subject key identifier: 24:A3:14:7F:8B:40:31:6F:02:BB:EA:56:64:23:62:40:3A:95:22:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC9D8C0E665711F0B5CF96F1DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 17:26:13 +0000
ROA not before: Mon 21 Jul 2025 17:26:08 +0000
ROA not after: Wed 27 Aug 2025 17:26:08 +0000
asID: 214143
IP address blocks: 154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102037 (0x18e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 17:26:08 2025 GMT
Not After : Aug 27 17:26:08 2025 GMT
Subject: CN=687e7835-22f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:e6:83:a8:b3:67:68:b1:a7:cc:12:21:69:
82:35:03:e3:5d:3e:0f:08:f0:33:ff:37:73:c5:d2:
49:56:d5:79:6b:8f:78:eb:d7:95:af:b4:5e:18:5f:
2c:34:62:69:ae:73:55:45:29:e3:f6:13:7c:39:49:
59:5b:c9:6e:e3:9b:d7:4f:33:03:60:1d:f3:b7:a9:
0c:df:c7:85:5a:1f:a0:99:21:76:17:7b:40:e9:49:
28:9f:26:89:38:3a:97:6f:c2:76:5e:2e:2b:e8:d4:
15:6a:9d:f3:88:54:75:99:39:d5:d4:2f:67:19:b8:
bc:87:1f:46:78:82:b5:be:35:2a:b6:25:01:eb:56:
3e:99:c6:41:1f:ba:d4:d2:de:be:f1:86:48:ba:ac:
04:81:00:74:da:09:df:d9:3f:d4:9b:43:ec:3c:15:
fb:81:eb:8d:96:be:5f:2b:12:84:88:d8:c9:9a:c7:
5e:81:aa:3a:f6:ea:8c:45:02:d6:5b:9f:13:a0:4d:
b6:6c:22:53:99:a2:b2:cc:93:50:c8:a0:b7:bd:f0:
15:0e:ca:bb:2c:2d:eb:b0:49:3d:3c:a0:f7:08:e5:
1d:eb:d8:76:5a:3d:42:c5:f3:12:e5:53:e7:86:44:
a2:82:df:bb:a7:69:6d:00:17:0a:70:23:59:af:96:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:14:7F:8B:40:31:6F:02:BB:EA:56:64:23:62:40:3A:95:22:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC9D8C0E665711F0B5CF96F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
92:da:35:a1:dc:22:ca:ac:0f:9a:fc:a3:9d:62:b3:8c:41:e3:
35:67:14:9b:db:97:09:39:2d:67:c9:94:4f:06:8f:cc:63:3a:
a9:e1:20:ef:c6:92:d0:84:50:53:a1:95:c6:29:f2:a7:16:7c:
ae:f6:3e:34:97:06:2d:85:ce:e7:9f:ea:86:1f:f0:c1:16:b6:
8b:56:35:4e:26:b2:ae:2a:c8:4d:9b:fc:12:96:f6:d1:54:96:
1a:f4:b0:8b:8b:d8:89:53:f8:e7:47:59:9c:2d:67:76:65:d7:
7f:96:2b:a5:54:bd:d7:2a:e9:49:85:a1:54:fa:ad:1a:36:1e:
ed:ce:c2:79:82:d3:a8:89:d5:b1:78:0e:96:4a:9d:6a:cf:6c:
e9:bb:e0:d7:72:cd:e4:f9:06:d0:a5:26:54:52:90:57:e8:00:
9b:df:86:51:1c:ef:bf:7c:66:9a:c7:f9:33:76:a0:53:54:ad:
78:d6:35:06:ed:44:28:d8:67:23:a7:da:9f:73:f6:c2:73:93:
62:55:bb:de:1c:46:12:13:fb:28:3b:e8:6d:94:fd:26:8f:9d:
36:82:26:98:52:ec:68:04:3e:fd:c0:81:10:77:37:db:8a:24:
02:18:42:30:bb:d3:94:ed:69:f7:68:92:2c:2f:28:a1:79:31:
a6:d3:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:20 2025 by rpki-client