Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD8DDE24DE211F09DCF68E6DAE4EC9C.roa
File: 7BD8DDE24DE211F09DCF68E6DAE4EC9C.roa (raw, json)
Hash identifier: Likvy2zByAeZHEerT2mftsWtwgQyCcs4piG6K25QuOo=
Subject key identifier: 52:C8:49:4E:62:7D:FB:B0:A6:3A:4E:02:9C:A3:C6:7C:99:54:55:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD8DDE24DE211F09DCF68E6DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 14:25:59 +0000
ROA not before: Fri 20 Jun 2025 14:25:54 +0000
ROA not after: Sun 27 Jul 2025 14:25:54 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100241 (0x18791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 14:25:54 2025 GMT
Not After : Jul 27 14:25:54 2025 GMT
Subject: CN=68556f77-4a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:55:93:64:15:7c:ac:7e:c5:f0:fb:76:68:b0:
b9:e4:60:50:cb:b2:71:c3:1e:4b:1d:5b:06:b6:78:
fe:a2:90:c2:cd:a3:ff:ec:aa:09:a2:0c:01:ea:ba:
04:c1:a6:31:3b:b4:e8:85:14:65:a9:9c:07:f8:99:
ff:27:1e:a0:3c:bc:a7:ab:b1:c6:25:12:ac:4d:e4:
75:10:4e:02:e7:8c:cf:2b:83:35:85:b4:91:55:65:
26:22:d0:d1:64:e3:ec:e7:8b:2a:19:31:fa:53:79:
51:dd:70:f3:a6:60:bb:98:1a:c4:22:8e:57:e0:b7:
39:d5:9f:6c:77:6e:0d:9f:be:09:88:3b:dd:b2:fd:
48:40:c2:47:83:d2:ee:b8:3f:e4:82:7b:cd:f5:04:
9e:95:ab:ca:2a:29:5a:18:2f:88:2b:a3:8c:5d:aa:
3c:e7:a4:71:df:cb:b2:4a:cb:1d:90:86:4e:39:ef:
4c:52:1d:8e:4c:79:8e:30:df:a4:40:b7:8d:1d:fd:
eb:a2:89:a2:2b:68:07:26:8b:f7:74:da:10:6f:48:
91:53:d0:9d:8b:aa:7b:43:d8:45:4a:35:2a:65:e5:
a4:93:ac:cb:1d:9e:40:51:87:a2:28:74:59:6b:e6:
5a:c2:54:a1:d2:7e:7a:84:14:03:fa:e6:64:cc:5b:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:49:4E:62:7D:FB:B0:A6:3A:4E:02:9C:A3:C6:7C:99:54:55:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD8DDE24DE211F09DCF68E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
71:31:df:b0:f5:15:95:30:a8:e3:4d:22:0e:3b:95:b7:a1:5b:
df:dc:dd:5e:ed:ab:95:0f:c3:e8:04:5b:5e:f0:42:a7:89:28:
f0:63:31:e7:4f:16:f1:21:47:eb:53:9f:93:04:1b:18:3f:65:
57:09:7f:35:2f:42:be:89:48:82:1d:c5:19:a4:f2:ca:5f:9e:
76:a8:ee:19:e5:b8:dc:c4:a4:1a:e2:e9:49:f2:eb:d6:c7:e0:
cf:23:d3:f6:f6:0b:a3:b6:49:c0:f3:31:46:7e:e7:f7:e8:09:
a8:7a:96:6a:9f:78:3d:1d:3a:b4:9a:dc:44:15:2e:ea:a8:4f:
f2:42:c5:9a:00:97:fa:be:8c:45:6d:41:45:3d:61:0e:ce:c9:
37:34:90:86:e7:53:fe:d5:80:eb:2a:76:a9:71:82:d7:60:c6:
d0:6c:c5:3c:96:a7:0e:68:e0:97:8a:47:58:56:54:96:e5:12:
df:63:03:d2:3c:b1:f3:31:23:fa:24:3f:6f:52:6e:1c:4a:85:
45:08:ff:4b:a0:d6:6d:8e:b7:21:ef:c0:6c:81:c6:96:17:44:
a1:cb:a9:9b:47:49:15:d4:2f:e1:f7:20:67:e0:0e:9e:44:a7:
9f:49:3e:a6:c2:3b:f8:5e:ed:6f:f0:75:ee:89:97:e8:1d:50:
0b:be:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:12:59 2025 by rpki-client