Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E45E8580611F0A6404BD7DAE4EC9C.roa
File: 3D4E45E8580611F0A6404BD7DAE4EC9C.roa (raw, json)
Hash identifier: DeKXfoyDFxg/fjy4/Sgr3hjTSmoaecYaoceHBD79M84=
Subject key identifier: 27:0E:22:13:5F:6C:AC:15:E2:42:8E:8F:03:63:70:44:D7:B5:3F:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E45E8580611F0A6404BD7DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:07:07 +0000
ROA not before: Thu 03 Jul 2025 12:07:03 +0000
ROA not after: Mon 03 Aug 2026 12:07:03 +0000
asID: 984
IP address blocks: 154.95.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100879 (0x18a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 12:07:03 2025 GMT
Not After : Aug 3 12:07:03 2026 GMT
Subject: CN=6866726b-ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:45:1e:20:27:62:39:fa:72:e3:75:dc:01:
86:fc:65:24:1a:86:87:11:b1:34:e6:16:ea:85:c2:
6e:69:fe:7c:33:2a:17:e3:6d:8a:1e:6b:9d:eb:eb:
ca:e4:7c:3d:6a:f3:c2:3e:74:29:4a:72:a3:ad:c1:
07:44:c2:d7:05:f1:27:ff:d4:0d:f4:b3:ca:06:0d:
4c:cb:6e:f3:e6:ab:3e:0f:16:ac:76:99:ca:92:55:
f6:25:a1:8c:ff:e7:b2:2f:5b:bd:af:9a:47:72:da:
8a:8c:7a:b6:91:3e:9c:1e:87:e6:46:17:77:f9:55:
72:7e:4d:19:35:19:0a:90:6e:5c:02:a3:2a:50:a1:
e8:41:61:23:dd:c4:e3:2f:c5:5a:29:68:cb:6f:93:
07:af:be:1b:54:be:61:05:4e:fb:dc:d1:00:80:9b:
24:bc:50:d4:a9:96:3f:03:c9:5b:0f:ac:ee:78:e1:
ab:96:86:62:62:0f:c1:c9:d1:3d:60:47:e0:54:5e:
e5:ac:a0:6a:8e:51:53:07:22:73:c9:21:2f:25:8b:
e2:65:88:47:8d:21:50:c5:de:3a:2c:af:47:3d:fb:
5c:09:92:e2:11:7f:9d:7a:d6:6d:89:a7:67:80:8b:
c5:21:07:b1:1e:a6:4e:77:4c:62:42:4f:5b:5c:18:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:22:13:5F:6C:AC:15:E2:42:8E:8F:03:63:70:44:D7:B5:3F:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E45E8580611F0A6404BD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.2.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:5f:61:74:18:cb:6f:82:7d:a8:4a:ad:54:36:60:f6:a0:
f5:33:84:6d:0a:5e:9d:bd:ad:12:1c:7b:19:19:c7:36:8f:3d:
58:dd:98:7b:2a:06:f3:76:8c:bd:77:ae:67:7e:6b:8a:96:df:
98:31:da:98:cd:48:e5:a6:aa:44:fb:f2:3c:0c:07:bb:0f:7e:
fc:f8:d5:8e:e7:7d:ce:85:ce:d6:53:9f:2e:de:24:c8:6a:b8:
ad:4d:01:20:26:4c:cf:e0:82:0f:b0:37:bf:93:86:3c:28:6d:
83:50:68:cb:73:da:c4:0a:ee:17:b5:a7:60:c5:74:6b:fe:31:
21:d2:9b:2f:15:6c:91:3e:3c:1c:3e:cf:5b:9f:e2:d2:13:2d:
a3:7c:cf:5b:c2:c3:4d:67:45:a7:a6:7b:99:2e:eb:f2:b1:24:
bd:73:fe:2e:f0:a1:6d:b3:0f:5e:63:b9:95:0f:db:17:d1:5e:
6c:d9:f7:13:71:a9:b1:75:74:da:f7:48:52:6b:9a:4e:5b:2b:
33:34:96:ec:69:bd:56:4d:0b:8e:71:3b:b3:d7:56:a5:64:02:
f2:9c:1a:03:b7:40:ce:db:d3:4c:62:59:64:41:95:10:6d:90:
f5:f5:23:8d:80:d4:3f:40:49:64:b1:f6:06:98:f7:cb:29:93:
4f:78:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:36:39 2025 by rpki-client