Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4E5664DCD11F0AD1D23E0DAE4EC9C.roa
File: A6B4E5664DCD11F0AD1D23E0DAE4EC9C.roa (raw, json)
Hash identifier: O1LvaRC48hkGHYdsLke45FzCDMJ+IFp+z0yjl538OBw=
Subject key identifier: EF:7F:ED:1B:5F:BA:BD:75:9E:A1:D1:B6:E3:DD:6C:27:55:A4:BA:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01877F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4E5664DCD11F0AD1D23E0DAE4EC9C.roa
Signing time: Fri 20 Jun 2025 11:56:51 +0000
ROA not before: Fri 20 Jun 2025 11:56:47 +0000
ROA not after: Sun 27 Jul 2025 11:56:47 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100223 (0x1877f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 11:56:47 2025 GMT
Not After : Jul 27 11:56:47 2025 GMT
Subject: CN=68554c83-77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:d7:e1:14:b3:a4:73:44:03:f6:94:9c:d4:
c8:e2:1a:9d:1e:4b:f3:8c:53:86:b5:20:e5:76:e6:
fb:12:7c:6a:3a:91:2d:b5:d5:92:c6:bc:6e:ef:aa:
ac:10:03:34:62:1b:3e:22:1a:e4:1a:b7:56:93:28:
e6:a1:e8:f2:c9:8c:22:2c:cd:83:0a:b0:18:35:0f:
6d:99:e6:1d:e7:06:2d:ba:9f:24:5a:a7:48:09:ca:
13:38:b4:a4:fd:da:22:c2:75:3c:07:95:0f:ab:77:
dc:84:03:b0:4e:f3:d4:55:ad:50:c5:dc:e7:4c:c8:
df:01:b6:e1:21:cc:99:e8:f3:eb:ef:f4:99:d5:15:
53:52:8a:3d:eb:38:d5:d5:73:b0:cd:b1:fc:1b:2f:
07:9c:65:ad:64:6b:4a:76:dc:22:e1:66:e4:cf:ba:
53:1b:12:42:24:f9:b6:6a:64:83:bc:82:43:a0:80:
ee:91:b4:2a:1d:23:81:bb:07:29:eb:85:f5:cc:f0:
9b:72:b0:87:c0:41:9c:37:aa:45:53:ed:13:02:2f:
9d:2f:52:cb:86:d1:39:bc:ec:42:3b:9c:62:fe:88:
5e:e6:10:df:9c:0e:b2:68:9b:0a:62:88:02:0b:d7:
04:9b:d4:ee:64:90:1d:18:89:32:19:57:12:6f:7e:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:ED:1B:5F:BA:BD:75:9E:A1:D1:B6:E3:DD:6C:27:55:A4:BA:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4E5664DCD11F0AD1D23E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:a1:5c:34:26:d0:59:81:2a:78:4b:a9:22:ed:07:7e:4a:a4:
8f:93:3c:78:55:86:90:55:6b:a0:d6:48:b3:c5:58:9e:bb:6c:
45:58:1f:1d:9b:14:d0:11:8b:ac:2f:62:36:05:81:1e:e1:2b:
6f:1d:d0:a0:e1:02:fa:68:2d:6d:13:c5:52:ac:2e:fb:25:ff:
85:ac:d6:ff:f1:b5:22:7e:28:63:41:29:c4:fa:23:53:0d:b5:
03:aa:4b:18:b1:d0:14:71:2e:77:29:f3:12:26:ad:09:4f:86:
a3:26:b2:73:4d:44:c7:33:c8:3e:f2:ba:44:65:73:71:b4:31:
96:7a:ae:68:8e:ed:8e:a4:8a:21:a3:0f:a1:28:7a:20:e2:64:
9f:12:54:6d:28:c4:11:b6:a6:09:e1:f1:32:0e:0b:5a:95:2a:
f6:57:e0:3a:f2:b7:dd:52:6a:7a:07:87:c6:22:09:da:e2:a8:
e2:fa:8a:07:ef:84:f3:a0:25:9f:34:75:c3:57:fe:fb:7b:3e:
13:a4:29:3b:ea:52:58:54:3c:b3:23:84:95:5a:51:cb:92:da:
60:3e:7a:6b:3c:be:2a:61:6a:9b:70:53:84:57:97:28:49:29:
7f:e1:85:59:d5:92:82:0e:01:e1:6e:d9:ff:81:6d:eb:6b:0b:
60:3f:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:35:47 2025 by rpki-client