Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EAE0DD04E8311F0910B7283DAE4EC9C.roa
File: 6EAE0DD04E8311F0910B7283DAE4EC9C.roa (raw, json)
Hash identifier: EYW49rqu+OL0XcuJg3iQ+AvQk4+ioj95VzKY4aoTtys=
Subject key identifier: 89:BF:F1:41:0E:93:C9:A3:F1:F7:D9:50:1F:03:63:36:7A:71:28:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EAE0DD04E8311F0910B7283DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 09:38:05 +0000
ROA not before: Sat 21 Jun 2025 09:38:01 +0000
ROA not after: Sun 27 Jul 2025 09:38:01 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100272 (0x187b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 09:38:01 2025 GMT
Not After : Jul 27 09:38:01 2025 GMT
Subject: CN=68567d7d-2003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:3e:46:42:02:56:93:64:e4:f9:87:37:db:
f4:d3:4f:3f:2b:28:52:72:bc:e8:67:1c:29:e3:cc:
77:6c:28:3b:d9:42:15:87:96:fa:4b:c6:99:36:40:
88:c1:8c:4f:19:1d:34:c3:ca:08:b0:5b:8d:12:b0:
5f:05:d7:65:07:62:16:e3:46:57:75:58:50:45:9d:
a7:3c:d3:bc:fd:4d:bc:26:dc:06:c0:82:e2:e6:20:
72:6b:fa:bd:fd:ed:e1:6f:64:a9:27:41:ae:27:90:
e1:82:71:97:5f:96:f3:9e:e9:6e:6b:da:9f:9e:ab:
d9:23:41:7d:72:25:b4:40:e7:65:08:ef:ab:81:4a:
8f:0d:9e:06:a3:3f:e1:b4:46:88:7c:20:b4:76:4a:
34:cf:b4:f3:0e:62:dd:49:cd:f9:ba:9e:49:ac:28:
c5:1c:f0:97:42:44:3b:0f:86:55:9f:23:a8:e5:fd:
b0:5b:b8:67:c4:c8:09:8f:a2:15:2f:66:11:62:8a:
25:b0:95:46:f7:4e:d7:30:f7:93:fc:c6:8d:18:e5:
7b:a5:29:5e:bc:0f:42:71:f7:c1:9d:7e:be:c9:75:
c8:8a:c8:3d:74:a3:53:30:41:9c:10:c0:68:6c:8d:
0c:7a:07:6b:99:ed:55:28:dd:1a:53:3d:eb:3a:e0:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:F1:41:0E:93:C9:A3:F1:F7:D9:50:1F:03:63:36:7A:71:28:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EAE0DD04E8311F0910B7283DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
20:ab:ba:0f:b7:5d:4d:40:b5:b5:89:53:d9:68:64:92:52:cf:
ff:3d:e7:f4:34:a4:14:e6:fd:80:f6:9a:97:0c:a4:4b:cc:d4:
e0:ca:9b:1a:d2:a3:7e:3a:bd:1f:9e:28:6f:8a:fe:df:d3:02:
ee:c6:c1:83:5d:a2:d7:a0:4b:b8:12:c7:f5:d0:c1:69:50:53:
45:64:bc:01:4c:1c:2e:3b:aa:85:c1:9b:a4:15:4c:16:92:54:
af:4a:99:1b:cc:1c:20:1c:3b:28:2a:40:af:64:2e:e5:28:89:
43:6d:cf:3c:3c:36:a3:43:63:59:9e:48:31:bd:61:d3:58:b3:
74:fd:0c:9f:94:86:23:60:8a:8c:2b:57:fa:44:9d:1e:d4:68:
a0:65:eb:74:b9:a0:e5:6d:75:e4:e8:0a:0f:ca:35:ab:03:ac:
2f:e0:32:1f:bb:1c:da:a4:2b:bb:91:b8:db:c8:84:4c:8d:43:
80:96:cf:48:0f:00:dd:38:5e:63:ff:fe:0a:d6:58:c4:a7:63:
c4:b0:14:da:7b:0c:26:62:68:ed:c0:9d:b0:f3:a8:c5:23:1a:
38:12:63:3e:71:3a:f2:44:b5:c1:c1:24:64:f2:19:d0:de:87:
15:af:be:22:85:61:4e:58:b4:42:7f:5b:0b:42:98:55:f3:d4:
03:b8:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:06:52 2025 by rpki-client