Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4B1B6532911F0A1510DBDDAE4EC9C.roa
File: 6EC4B1B6532911F0A1510DBDDAE4EC9C.roa (raw, json)
Hash identifier: Zuyb7Jy5w6hY3kZ6uHjFjA6gS9wyn/cuH1FRSwft+B4=
Subject key identifier: 49:32:3F:C1:D2:EB:18:48:EF:F3:C3:0D:53:46:AD:F1:F8:A2:D1:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018938
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4B1B6532911F0A1510DBDDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 07:36:27 +0000
ROA not before: Fri 27 Jun 2025 07:36:22 +0000
ROA not after: Sat 02 Aug 2025 07:36:22 +0000
asID: 19318
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100664 (0x18938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 07:36:22 2025 GMT
Not After : Aug 2 07:36:22 2025 GMT
Subject: CN=685e49fb-a0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:b3:9a:5b:05:f8:a0:ea:ac:4a:40:05:82:
c6:57:8d:e0:e6:ac:e1:c4:21:5c:2a:35:15:db:66:
99:2d:66:5d:5a:9d:d4:2e:16:12:3f:29:91:4b:72:
f1:42:97:7d:2c:0a:b3:1e:16:7c:b7:a6:03:4f:8c:
1e:fb:33:92:73:01:26:c0:5d:da:dd:7a:0d:4d:ee:
b3:0c:25:19:33:a3:f9:2f:d1:9b:11:e1:3e:07:0b:
ac:14:7b:af:82:19:2a:3d:29:7e:0d:cc:b6:d8:3e:
46:28:3e:db:b0:dc:1c:3a:f4:17:1a:2d:22:08:64:
28:39:a9:92:42:79:fe:be:e5:73:43:92:b4:ed:eb:
62:ab:07:63:3d:12:fb:62:0c:43:fd:3d:73:f9:6f:
3a:b9:4c:1b:4f:98:fd:e2:e1:40:37:6f:0d:a3:9f:
45:95:5f:9e:ae:8a:ad:94:ee:ae:1b:03:4b:8d:64:
c7:46:31:f8:bd:5c:a8:d1:ff:df:5e:9e:76:66:1e:
7c:05:57:62:b7:2a:28:94:ad:cc:dd:fb:9e:b9:23:
76:65:73:d6:20:4e:5b:8b:8d:14:cf:2c:fe:86:c6:
31:80:48:5e:ae:97:f3:0a:a6:15:93:ff:04:6f:89:
f5:27:43:40:65:2b:be:96:5d:51:d4:54:8c:fb:5e:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:3F:C1:D2:EB:18:48:EF:F3:C3:0D:53:46:AD:F1:F8:A2:D1:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4B1B6532911F0A1510DBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
03:c7:ce:54:ac:b2:9f:a4:3f:58:68:75:35:f8:db:ba:2f:5e:
d1:60:a5:05:17:d2:72:86:6b:23:86:82:56:59:9a:3b:fa:be:
30:37:e1:1a:d7:50:62:bc:a5:82:df:ad:15:6f:67:d2:da:95:
65:6d:15:56:71:f3:63:d1:89:b7:1e:9c:31:06:db:b2:6c:a4:
b6:56:e3:d2:a8:a8:c7:06:d5:d9:d9:36:2c:e9:9a:d3:22:1b:
73:54:d6:aa:31:36:13:48:69:b3:31:c6:09:16:50:ca:09:22:
b6:02:a5:5b:76:bb:f6:0f:7c:1d:6b:4a:86:ab:d2:7c:f0:ad:
f3:35:45:6d:d3:b5:ba:3a:8c:0b:0e:22:8c:00:b9:bb:c7:ea:
a2:7f:34:9a:6e:7d:79:90:6b:5f:5f:a5:c0:5f:88:cd:25:bb:
09:76:5e:b0:4a:ae:c7:72:05:35:f0:49:82:39:92:8e:99:be:
0a:2b:d9:76:06:c7:16:10:7a:ca:b7:c8:42:71:2d:0c:cd:bc:
98:33:d0:f5:1d:9e:31:b6:40:a3:a2:c9:8a:a2:81:ca:fb:37:
0e:70:04:44:c6:5d:5e:94:63:e2:ff:49:a6:97:59:aa:3a:1a:
9b:3b:cf:aa:13:c7:fe:d0:d5:67:4e:90:d7:0b:aa:a6:5a:56:
cd:2e:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:35 2025 by rpki-client