Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7EDCB0504311F0B9F791D6DAE4EC9C.roa
File: 0F7EDCB0504311F0B9F791D6DAE4EC9C.roa (raw, json)
Hash identifier: 2szrviyNVjJRF2jLdmw45vSTeHxVk1i9tPiykzQR4/s=
Subject key identifier: 8D:A2:E7:D5:92:41:96:3D:BB:03:FF:44:0D:B6:7F:1D:2B:D8:65:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01880D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7EDCB0504311F0B9F791D6DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:02:20 +0000
ROA not before: Mon 23 Jun 2025 15:02:16 +0000
ROA not after: Wed 30 Jul 2025 15:02:16 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100365 (0x1880d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:02:16 2025 GMT
Not After : Jul 30 15:02:16 2025 GMT
Subject: CN=68596c7c-ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:6a:29:4e:7e:0c:78:96:f9:59:97:ee:9f:
e8:8b:e9:23:fe:6a:ea:61:25:8b:01:16:7e:2f:f4:
cf:6e:76:97:ca:82:92:47:e9:83:07:b2:99:7f:76:
c0:49:20:4a:68:00:cf:17:e9:f7:37:9e:36:12:88:
a3:d6:fb:65:e8:3f:f6:5e:ff:17:c5:ea:d8:8d:01:
b2:c2:ee:61:19:35:c9:e4:07:8b:66:d6:d1:c5:71:
71:a2:b5:05:6b:87:2b:38:b4:25:21:a1:36:81:0f:
39:83:5a:4c:33:de:aa:35:65:55:d3:78:3e:40:6e:
f2:b9:73:88:48:1b:a0:d6:80:cd:85:5f:fc:a7:4f:
56:65:52:b9:7e:58:85:d5:e1:9a:81:31:ba:17:b1:
70:ed:9a:ee:07:15:75:3f:74:f3:7c:47:11:48:d5:
54:86:11:c6:69:b8:cf:ab:78:de:0d:a9:08:07:2d:
94:6f:24:82:b9:c7:55:17:ce:65:09:31:33:60:47:
e5:39:03:27:35:43:69:f9:bc:85:32:86:bc:4f:fe:
06:e0:08:96:47:50:74:b4:43:ea:89:57:4a:f8:36:
2e:49:40:b6:30:93:30:5d:67:57:9b:40:60:a8:98:
16:87:c9:22:c8:e4:5a:b0:db:47:a0:44:a8:2e:17:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:E7:D5:92:41:96:3D:BB:03:FF:44:0D:B6:7F:1D:2B:D8:65:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7EDCB0504311F0B9F791D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
20:bc:5e:ae:e7:ce:3a:6a:37:c4:b1:fa:0d:15:b3:9d:16:05:
96:3e:d8:04:13:d5:61:88:d6:27:ea:f0:68:8d:62:dc:3e:4a:
f7:32:2e:3a:13:5c:0e:69:9d:55:a9:ea:7c:9d:70:16:61:d4:
46:af:8e:fd:96:94:5e:a8:02:b5:32:70:44:5e:60:a1:51:6b:
59:a3:32:be:f2:d0:f4:ba:48:af:36:9c:f4:8e:54:74:ba:28:
eb:b9:20:ca:d8:c8:68:f6:06:d7:f0:d0:e3:48:78:d2:90:41:
e3:2b:68:d3:a2:06:78:fd:a9:b2:41:7d:2a:ed:a6:70:12:d8:
4d:b6:0e:d9:2f:bc:66:9a:85:3e:a2:e7:ad:0e:4b:3d:f4:15:
fb:ba:96:25:51:d4:cc:4e:47:f9:18:24:d3:46:13:10:37:c1:
1d:fd:0e:b8:90:9d:0e:8f:b3:19:ec:62:ec:da:60:2c:77:9b:
37:ea:35:ae:34:e9:32:8e:3a:95:64:20:b8:18:27:65:8a:3e:
20:8f:f1:2f:00:36:2b:32:e3:60:76:13:24:76:4a:47:75:ea:
6d:66:16:e5:4f:27:0c:e9:c7:2c:a1:9f:b9:92:af:10:b9:e2:
f1:cd:ce:cb:43:97:4e:7d:b6:4a:f8:99:57:67:fa:c8:9f:2b:
ed:a9:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:36:34 2025 by rpki-client