Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E20DDA4B7511F0A7C7558DDAE4EC9C.roa
File: 82E20DDA4B7511F0A7C7558DDAE4EC9C.roa (raw, json)
Hash identifier: W/2YzJBebTi8k/1T+q867pAWmtJ0lnLiffKRwYhc9l4=
Subject key identifier: 3B:5D:91:B5:E6:15:83:B2:E2:45:C1:30:1C:A2:38:F8:38:E7:89:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01871B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E20DDA4B7511F0A7C7558DDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 12:20:53 +0000
ROA not before: Tue 17 Jun 2025 12:20:48 +0000
ROA not after: Thu 24 Jul 2025 12:20:48 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100123 (0x1871b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:20:48 2025 GMT
Not After : Jul 24 12:20:48 2025 GMT
Subject: CN=68515da5-14a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:f1:36:91:04:fb:21:04:a8:e6:29:21:60:
b3:52:69:7d:1a:29:f6:59:56:6b:b7:97:f8:f6:bc:
bb:95:82:98:0d:93:42:52:eb:2e:e1:ba:22:a9:77:
00:bd:8a:b6:93:e5:5e:6c:94:80:a8:18:ee:7d:32:
b3:2c:49:51:a8:9c:72:d7:4d:8b:36:70:88:f3:97:
76:69:ab:e9:98:5f:dd:81:8d:67:a6:89:5b:b9:55:
84:e6:b8:fb:6b:72:bf:f6:59:01:d1:21:33:b4:89:
4d:cb:5a:82:46:0a:c0:56:b7:2e:df:39:b8:63:c6:
e4:a7:e9:f9:82:02:1b:fc:2d:1b:f0:5b:c0:f1:e1:
bb:cd:2a:2c:11:55:02:75:38:64:b9:e7:41:d6:7d:
35:36:4a:0c:21:24:f0:dc:f5:7c:2c:3a:af:40:e0:
c6:04:af:c9:40:a0:55:68:65:6c:f3:0a:11:61:9e:
37:8c:0d:2a:ed:76:d9:34:5b:12:86:a3:81:2b:ea:
1a:40:e9:12:ea:1d:92:e4:15:88:3b:5c:e2:05:23:
87:1a:d8:b4:d4:20:50:04:81:90:8c:f1:60:56:35:
bc:38:16:f6:18:e0:60:12:a4:95:2c:d6:0c:16:fc:
bd:be:ba:9a:a7:f8:b5:af:6d:0c:e0:37:35:30:b5:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:91:B5:E6:15:83:B2:E2:45:C1:30:1C:A2:38:F8:38:E7:89:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E20DDA4B7511F0A7C7558DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:67:d5:6d:e2:ef:45:01:2d:5e:3f:d7:9e:f7:e8:6e:5d:a4:
ff:6d:0b:40:f4:9c:e3:2a:69:21:27:e9:f6:36:cf:3a:22:27:
4d:96:cb:58:2a:8f:21:31:b4:26:fb:16:68:3c:5c:ed:a2:54:
01:dd:1e:90:e8:08:e2:dd:ba:7e:50:ff:c8:14:a5:41:ab:f0:
9b:fc:61:fc:b6:ef:d6:f3:26:b9:b2:b6:a8:36:eb:48:e1:84:
4c:29:3a:2c:e1:6c:a6:44:bc:44:53:12:d3:2d:08:94:cc:56:
af:6f:5a:71:92:45:48:e2:cc:e0:c9:ff:35:df:dc:d0:7e:22:
02:fc:97:8a:23:9a:13:5a:10:9d:55:47:62:2d:6d:6b:76:1c:
21:c2:9f:54:1b:1b:ac:9d:90:06:62:e7:6d:47:dd:d5:b1:ba:
65:6c:71:30:ac:08:d2:92:4d:e6:2f:75:81:7a:7f:c3:60:24:
5d:84:a5:eb:f1:35:18:47:e9:09:67:a9:1f:9e:ac:6c:da:aa:
ad:08:b6:e6:2a:b5:e3:87:55:54:19:6e:dd:78:53:1c:bf:37:
16:17:b9:5b:5b:39:6a:d2:37:7b:14:00:02:4d:20:4f:26:29:
ab:7b:6c:e9:6c:61:20:81:bd:a7:be:2a:af:91:47:7a:30:46:
6e:97:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:47:53 2025 by rpki-client