Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7EA09EC574B11F0B5703198DAE4EC9C.roa
File: B7EA09EC574B11F0B5703198DAE4EC9C.roa (raw, json)
Hash identifier: dp4WO+S1Dfdxs+MULX3TIVvWkRh5N2MkA1m3IB+VjfE=
Subject key identifier: A8:41:3C:5C:62:2A:0B:E4:CF:BA:8C:B6:81:41:50:DC:90:6C:E8:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7EA09EC574B11F0B5703198DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 13:51:57 +0000
ROA not before: Wed 02 Jul 2025 13:51:52 +0000
ROA not after: Sun 24 Aug 2025 13:51:52 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100814 (0x189ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 13:51:52 2025 GMT
Not After : Aug 24 13:51:52 2025 GMT
Subject: CN=6865397d-c52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:75:b6:38:0d:53:e4:a8:be:42:8d:b6:ff:
8d:f4:17:f1:e7:34:c8:ff:0f:c7:d3:d5:b4:25:2f:
4b:28:ed:7b:1d:0b:2b:b2:65:d7:b0:c6:fa:f7:6d:
f2:91:61:06:fb:ac:4d:1a:e4:81:59:f5:c3:04:86:
64:be:ba:65:3d:a1:ea:93:80:de:c5:9c:a9:27:67:
d2:2a:83:8a:f7:27:67:ce:cb:59:5c:a2:0c:c5:f2:
4e:63:52:de:6e:da:92:42:cf:4f:77:cc:83:7a:9e:
bb:40:ac:32:b2:ea:ad:6d:49:2c:28:33:f3:b2:c6:
4b:62:1e:b9:b3:46:1a:3b:af:4b:41:82:e1:6f:15:
32:d5:65:4b:c8:b4:bc:61:73:ea:be:13:26:35:d7:
26:f1:fb:71:d9:af:44:cf:07:a1:57:b0:59:67:2d:
0f:29:57:7a:70:dd:0e:1c:19:1b:2a:7b:a3:b5:39:
49:4c:75:83:e9:bd:90:22:8e:2d:a8:1d:d6:20:76:
7d:c3:ae:1a:d8:9c:7b:ff:28:a7:7c:05:fd:ff:85:
9c:48:24:b5:8e:40:9d:97:c6:d8:98:9d:2c:7a:4e:
c0:6f:0e:8b:08:a8:37:47:be:12:63:7b:cf:42:d2:
28:3a:17:15:05:cb:0e:a4:27:5f:d3:23:ff:68:d3:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:3C:5C:62:2A:0B:E4:CF:BA:8C:B6:81:41:50:DC:90:6C:E8:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7EA09EC574B11F0B5703198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
58:46:c8:1f:64:36:ca:8a:b6:ea:7d:a5:86:8c:38:3e:ec:95:
41:f8:98:b6:e2:07:c5:3a:e6:31:2f:1e:1c:d5:49:62:7e:c1:
3d:c5:61:2d:ea:24:84:9e:6c:56:46:09:bf:73:4b:4d:b6:de:
aa:04:fd:44:6a:3e:8e:9f:78:0d:28:71:6c:66:5a:7e:6a:9e:
31:27:76:3a:a2:6c:34:05:b6:06:fa:64:2d:01:16:c8:ff:76:
77:c9:05:f7:dd:18:ec:a5:61:b3:fb:51:5c:56:d0:82:23:09:
9f:74:ce:65:c0:7f:0b:24:36:d5:0f:06:69:1b:4b:bc:20:d0:
e7:cc:45:1d:6d:3d:94:e1:fa:84:ac:40:6f:5a:59:56:48:78:
b1:7e:b9:db:3a:8e:d9:b3:bc:a0:10:08:e5:ac:1e:c6:f6:ec:
f7:1f:57:ea:7c:65:5e:24:a1:5e:bf:44:59:e6:79:24:12:c6:
9d:c3:e3:02:eb:56:e8:71:4d:70:d2:fb:a0:ce:7d:92:70:48:
44:0e:c5:72:cf:cb:1f:c3:66:78:17:07:1a:14:86:f1:d5:59:
ca:45:fb:f4:a0:38:33:cb:35:bb:58:7e:14:dd:e2:74:6d:cd:
fe:b8:e0:d8:fc:8f:ac:62:c9:c9:b3:01:6d:e8:be:49:ab:c3:
66:d7:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:08:55 2025 by rpki-client