Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD93DC504711F0AF9754F4DAE4EC9C.roa
File: 7BAD93DC504711F0AF9754F4DAE4EC9C.roa (raw, json)
Hash identifier: ZeCebao9STvUYQ8qdV2qkwreHuaVWntxw/9g6zKabV4=
Subject key identifier: 6C:29:4E:99:42:BE:53:37:6C:A7:6C:2B:D2:17:CA:27:8F:BF:2C:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01881B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD93DC504711F0AF9754F4DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:34:00 +0000
ROA not before: Mon 23 Jun 2025 15:33:55 +0000
ROA not after: Tue 01 Jul 2025 15:33:55 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 15:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100379 (0x1881b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:33:55 2025 GMT
Not After : Jul 1 15:33:55 2025 GMT
Subject: CN=685973e8-0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:c1:e7:13:58:0f:5f:87:ae:2a:bf:a2:f5:
c6:b4:54:9d:59:69:de:63:74:95:df:77:6c:47:a7:
12:f8:90:62:5f:78:16:19:fd:1d:c2:81:4e:3d:2d:
77:5b:d8:fc:fc:2a:86:55:b1:5f:75:7a:3f:44:a4:
53:ff:85:88:52:b6:a9:cb:05:6a:2b:b2:ef:d6:dd:
e7:5d:0d:ec:d6:17:e0:34:2d:4b:b5:e5:16:12:d9:
f0:b5:e6:e7:d8:37:77:df:b2:a7:f2:20:3f:42:1f:
75:73:6d:9f:8e:61:0b:d7:1b:94:e8:b4:d6:ec:63:
93:30:c5:e9:8e:c7:f4:0f:3b:32:04:97:eb:79:27:
3b:0d:a5:b1:df:56:24:50:3e:3e:e3:91:18:d7:de:
50:3a:32:f8:df:c2:7b:5e:f8:3a:17:14:ee:81:a9:
01:67:8c:7d:52:d4:21:42:dd:68:db:fe:9f:2a:15:
db:c5:2f:d2:ec:fe:5c:e6:f5:e5:22:ae:4c:88:b5:
8d:71:14:32:dd:95:6b:f1:e4:29:d5:9e:ab:e2:e6:
42:05:50:b6:c9:02:e7:01:60:87:c0:a6:25:e4:09:
35:93:91:e0:97:eb:38:2c:c3:46:09:c0:93:67:1d:
23:b3:36:62:fc:f4:f5:a6:6a:1a:3a:ba:53:6d:62:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:29:4E:99:42:BE:53:37:6C:A7:6C:2B:D2:17:CA:27:8F:BF:2C:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD93DC504711F0AF9754F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
75:05:b6:d6:ad:28:0b:9c:67:61:63:a6:ef:aa:b0:3b:9c:77:
4a:af:88:7b:8c:d2:0c:5a:54:5c:8b:fe:28:36:f3:5f:84:77:
fe:e2:54:94:cb:3d:02:16:62:d8:07:dd:11:09:ee:de:87:17:
26:b6:84:fc:95:79:e1:0e:2d:fd:ae:48:de:2e:58:66:2b:6d:
3f:d7:3f:2b:4a:83:07:6c:52:63:88:aa:1e:c4:42:a2:e7:cc:
4e:d4:cc:c3:39:55:7d:be:4a:aa:40:2e:8d:ca:af:dc:58:d2:
b8:0f:09:14:56:eb:0b:03:3c:2e:d2:fc:5e:75:72:62:a7:19:
42:14:68:54:83:aa:79:b1:23:8a:39:f4:14:30:9b:97:a3:c4:
36:21:25:cf:63:78:6d:79:31:73:c7:c2:f2:dd:56:7d:2f:e4:
58:6b:89:2f:95:09:48:27:12:13:09:ac:ab:ab:7a:e8:76:26:
15:77:03:af:5b:fc:a9:fa:51:49:80:af:90:ae:74:2c:65:1c:
61:65:ec:07:94:3d:d1:a1:b0:3e:52:16:70:d5:dd:17:11:a1:
73:0c:97:d3:3c:86:ac:89:c8:3a:49:ec:28:aa:5b:f8:1f:ed:
28:e9:03:e5:d0:dc:48:d3:83:b2:6f:28:32:98:75:df:9d:6b:
26:d3:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:53:09 2025 by rpki-client