Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7A06CC504611F08D9369EADAE4EC9C.roa
File: 0C7A06CC504611F08D9369EADAE4EC9C.roa (raw, json)
Hash identifier: iE71tRW1qWw6KQuBKyzSm7C4Fv3P4UKXxvJ3s1xXbTw=
Subject key identifier: F3:97:E0:D1:E7:19:B6:F3:86:2D:BB:CC:E7:85:3D:CC:B8:93:9B:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018815
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7A06CC504611F08D9369EADAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:23:44 +0000
ROA not before: Mon 23 Jun 2025 15:23:40 +0000
ROA not after: Tue 01 Jul 2025 15:23:40 +0000
asID: 135097
IP address blocks: 154.89.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 15:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100373 (0x18815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:23:40 2025 GMT
Not After : Jul 1 15:23:40 2025 GMT
Subject: CN=6859717f-a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:1b:64:c7:c0:b9:2a:e1:28:a6:d2:ac:f8:
c0:78:89:20:a5:5c:78:ab:62:17:2a:da:36:6d:ce:
74:19:94:15:07:e8:36:13:0c:ca:6a:bc:c8:ac:7d:
9a:9a:8d:f1:d7:77:3a:bb:1c:72:47:c4:6c:0f:ba:
a0:0d:17:eb:20:2c:b8:0f:94:77:e6:fc:17:82:62:
c7:17:f4:5e:a7:df:61:11:06:0f:25:2e:bb:91:f0:
cc:1c:cc:cf:a9:b9:9f:35:12:04:d3:e6:7e:2a:92:
fc:cb:d9:b3:be:69:aa:af:df:5e:e9:da:d3:f1:d6:
83:33:30:92:87:4f:da:61:9c:af:e6:be:78:9e:e6:
f8:74:72:af:58:fa:db:04:91:1a:e4:18:8d:90:2c:
90:df:c0:0a:9e:8d:16:48:a3:be:12:31:3d:64:ff:
84:76:aa:61:e3:25:8c:02:24:ad:a1:e0:8c:de:9e:
99:f8:5a:00:40:b3:10:eb:f1:da:2e:33:77:23:ab:
d8:73:0b:f2:74:2b:ca:e9:1f:32:5e:17:5d:fb:5d:
87:b7:77:64:c3:fe:73:be:a1:de:26:99:e7:30:dd:
aa:53:84:28:f3:d3:73:21:40:82:e3:11:32:e7:a0:
dc:5d:a4:bd:bb:5b:e2:ea:a0:91:85:30:47:17:19:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:E0:D1:E7:19:B6:F3:86:2D:BB:CC:E7:85:3D:CC:B8:93:9B:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7A06CC504611F08D9369EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/19
Signature Algorithm: sha256WithRSAEncryption
84:f7:73:8b:55:62:06:c5:f3:1b:19:66:b9:2c:b1:3f:81:7f:
be:e7:74:27:7d:4a:13:40:ff:7a:54:8f:fc:cf:78:fd:58:74:
a4:e3:0f:e3:34:ca:db:97:69:47:f4:1e:7c:3e:16:31:cc:c0:
7f:3f:12:ab:c7:ac:e9:7b:ee:3b:06:30:c2:53:c7:e9:de:70:
7a:1c:7d:50:c2:80:82:4b:09:3c:6a:c9:3b:f2:96:fb:63:20:
f5:67:d2:c1:b7:0b:ea:51:57:0f:b1:81:c7:a8:cf:12:a4:8c:
c3:c1:d6:ce:ca:33:3f:6f:c8:78:ba:45:ee:6d:97:bc:ee:53:
5b:32:66:f1:25:bd:2d:3b:ae:28:df:36:5e:dd:bc:72:b9:ed:
a3:d6:11:10:d9:24:05:66:24:e0:a7:fa:cd:21:35:98:7e:2f:
b2:dd:9d:20:0e:1c:fb:07:e5:8f:a1:4b:79:7d:30:7c:a1:3f:
0d:2e:80:9a:9b:e0:e5:87:62:32:63:ea:15:16:86:cc:e4:62:
d7:ef:97:a1:44:f4:88:89:00:83:bd:49:62:31:70:c1:f0:ab:
9e:94:15:d4:53:3f:91:fc:57:b9:24:cf:de:ce:8d:9f:ea:35:
d9:4c:4f:99:4e:12:36:ef:7e:75:1b:0d:24:fb:90:97:0c:72:
24:cb:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:34:06 2025 by rpki-client