Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835380FE4C2011F08B5435E8DAE4EC9C.roa
File: 835380FE4C2011F08B5435E8DAE4EC9C.roa (raw, json)
Hash identifier: NVHDSVLlq3V/AwWixlu+VHsGo+2SLJH+AOxvalWoLBE=
Subject key identifier: D2:E6:DB:6A:5D:A7:09:13:A6:39:06:B7:97:14:9F:E4:14:BC:97:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018737
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835380FE4C2011F08B5435E8DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 08:44:58 +0000
ROA not before: Wed 18 Jun 2025 08:44:52 +0000
ROA not after: Fri 19 Dec 2025 08:44:52 +0000
asID: 49765
IP address blocks: 154.199.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100151 (0x18737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 08:44:52 2025 GMT
Not After : Dec 19 08:44:52 2025 GMT
Subject: CN=68527c8a-15af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:26:f5:6f:92:a3:39:ff:1e:86:bf:85:6a:
89:d9:71:b6:75:9d:3f:f4:19:5a:9a:f6:6b:53:9a:
6d:28:e3:b6:8d:0b:86:e4:ba:53:e9:f1:4b:c9:7d:
bc:c4:39:c9:f5:57:02:7b:e3:1d:44:0f:4b:b8:c4:
d8:f6:31:c7:3e:a2:49:3c:0c:59:d7:14:41:52:e8:
38:dd:35:8e:11:be:db:fb:03:b2:3c:79:8b:99:25:
31:4f:14:f2:47:26:e5:ef:62:4b:4d:7b:13:37:86:
be:21:50:eb:a1:14:8d:c1:1b:46:53:df:aa:ac:ba:
73:fe:09:5c:2d:a9:c4:ff:f2:f2:96:52:b0:63:23:
25:9e:dd:30:14:2e:b0:fb:5f:97:85:c1:77:c7:c7:
fb:d1:49:55:5f:a6:22:05:80:bd:fd:e4:3d:93:f3:
0e:8c:7d:fc:26:f7:2c:32:92:ab:2b:fb:37:2d:7b:
72:64:82:c4:21:e8:3b:22:32:bf:05:71:c8:79:32:
13:05:ed:81:8b:f0:a9:29:b9:85:f2:6d:7f:19:57:
48:20:c4:d0:aa:67:24:cf:6d:68:d9:9d:1c:75:15:
fd:c4:cd:55:44:72:89:0f:42:3b:97:a8:ed:9a:70:
c0:7a:1c:4d:bc:ac:5c:0e:f5:84:62:3e:b5:44:65:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:DB:6A:5D:A7:09:13:A6:39:06:B7:97:14:9F:E4:14:BC:97:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835380FE4C2011F08B5435E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.26.0/23
Signature Algorithm: sha256WithRSAEncryption
83:6a:dd:29:2b:04:04:f3:ed:92:46:f4:e2:41:58:d6:b8:80:
14:87:ab:a2:46:23:76:43:60:c2:04:1c:e5:c6:31:ec:91:19:
ef:3e:57:26:b5:3d:49:8e:df:50:e9:f1:4c:3a:64:a7:87:1e:
65:6c:b8:7d:3c:aa:f5:0e:a1:ec:55:89:42:41:57:ec:f6:5b:
92:5a:58:f0:30:09:02:13:6e:f8:85:0e:d2:35:9e:cc:bc:17:
ed:2f:60:81:66:ae:f3:3a:08:ea:3c:a9:f8:b0:ed:11:2a:fd:
53:64:99:ea:b8:4d:d4:a3:cc:13:18:4f:b1:f1:5c:93:26:5b:
04:ed:ca:a4:25:9a:41:ef:bf:1a:d8:49:e6:ef:3b:43:91:df:
97:88:e6:7d:92:eb:a4:c3:0c:cc:c1:5a:8f:e3:23:84:a4:c1:
ac:1b:67:d0:f5:72:93:86:1f:16:93:d8:60:38:5e:06:18:70:
75:b7:dd:19:08:37:67:5b:1d:f5:1c:7e:6f:f1:b8:37:5e:70:
9b:76:ba:1e:a8:9b:10:63:5e:49:17:6c:95:bb:0d:35:e3:c4:
bd:57:7e:e4:a6:56:81:0a:c5:32:5a:52:cb:8f:c1:98:78:25:
b8:b0:0e:8d:14:01:58:fa:11:98:46:f4:79:99:b8:d8:ea:52:
ec:f3:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:58:26 2025 by rpki-client