Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2E6B18504E11F086831D9EDAE4EC9C.roa
File: 1D2E6B18504E11F086831D9EDAE4EC9C.roa (raw, json)
Hash identifier: irKQoEtTrps5y3ehFlSdoq7bo597JJX678jL3XKgk8E=
Subject key identifier: 57:47:AF:AB:6B:28:4C:56:00:D5:72:D9:5F:76:3D:B5:06:44:69:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01882B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2E6B18504E11F086831D9EDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 16:21:28 +0000
ROA not before: Mon 23 Jun 2025 16:21:24 +0000
ROA not after: Tue 01 Jul 2025 16:21:24 +0000
asID: 135097
IP address blocks: 154.89.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 16:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100395 (0x1882b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 16:21:24 2025 GMT
Not After : Jul 1 16:21:24 2025 GMT
Subject: CN=68597f07-38d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:54:7f:0a:83:10:2e:ff:cb:00:07:d4:40:
64:bb:4e:a7:3f:0c:ff:c8:2f:35:58:0a:88:cc:4d:
72:89:9a:c9:bb:ec:d5:fc:a6:77:54:7d:28:2f:1e:
6c:aa:aa:d4:3a:17:b3:5d:e2:96:52:05:96:7a:44:
9d:fe:b6:f9:04:ad:a9:9c:71:a9:1e:c3:a1:e3:76:
79:18:72:31:43:74:67:de:5f:f9:57:43:94:ba:75:
8a:20:80:17:32:56:5d:ee:6f:7f:e0:a6:a5:57:5d:
b3:01:e9:fc:6b:5c:09:57:11:ab:7d:b5:c8:d9:92:
fb:30:cf:c4:c4:f3:ab:af:45:85:71:3e:13:cb:26:
eb:7f:41:36:8b:08:78:06:79:14:7c:38:53:99:d4:
4e:18:63:7e:a5:dc:8d:d7:e6:9d:6e:6b:46:e6:6e:
31:32:11:49:11:a5:d4:e7:cb:52:8e:53:77:08:0a:
08:fb:91:0f:cc:51:4d:67:b4:50:80:1c:7f:91:19:
c4:e2:40:99:cd:8c:ed:ab:60:78:bc:de:bf:6c:dd:
83:c2:b5:25:06:27:e4:b4:17:bf:c9:c3:48:94:3f:
44:5e:5a:9b:63:d6:2e:1c:68:82:fd:b5:1f:75:db:
17:b6:76:af:29:63:63:42:1b:61:b7:94:76:71:5e:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:AF:AB:6B:28:4C:56:00:D5:72:D9:5F:76:3D:B5:06:44:69:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D2E6B18504E11F086831D9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.120.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:08:34:b5:48:48:9d:25:2e:05:ab:41:c1:53:43:28:69:3c:
ac:9c:81:c2:b3:57:fa:19:76:00:c1:b6:14:e6:f1:d3:3c:b5:
dd:af:bc:63:87:f2:53:f8:41:a4:f0:80:0a:13:69:08:fb:9d:
75:ff:00:a8:a5:a0:35:86:18:25:87:41:a0:82:9a:64:e5:d2:
a2:d0:48:8b:7c:64:1c:52:aa:65:16:ac:25:30:cc:9e:ed:17:
f7:f4:6e:11:00:64:1b:61:cb:3e:a4:8a:70:c4:ba:91:6d:4f:
4b:7e:e4:f3:e5:b9:34:66:7a:e3:f6:2f:8b:a7:4c:b3:d7:4f:
e4:9f:5b:2b:a3:a3:13:db:2f:79:7c:65:7d:f3:38:ec:3c:b2:
b0:97:4c:04:37:b8:4c:8e:e0:2f:83:6d:69:c8:3b:a0:ed:17:
ca:67:2b:8e:b9:78:25:fb:3e:f2:f5:78:4c:86:71:8f:4a:44:
d4:2e:d7:1b:27:cc:52:17:c8:75:f1:49:3b:65:e8:c4:16:a8:
b4:7d:aa:31:cb:3c:8c:a9:86:55:d3:de:6d:44:3c:10:96:19:
1b:5d:92:17:f0:37:15:d2:7c:08:9b:c3:60:8a:11:b6:5c:75:
97:ee:75:ab:82:3c:88:09:cd:53:0a:7b:b8:83:7e:a2:71:c4:
37:01:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:45:59 2025 by rpki-client