Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2485C144CF311F09AE265D9DAE4EC9C.roa
File: E2485C144CF311F09AE265D9DAE4EC9C.roa (raw, json)
Hash identifier: xNsPdysXDWUpJaLLjxh/BuvjfvI/E0rd1TZvBrlHBX0=
Subject key identifier: E7:13:49:BE:E5:C9:82:0A:8C:37:3D:F4:C2:6E:5B:A6:67:2B:B7:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01876E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2485C144CF311F09AE265D9DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 09:58:01 +0000
ROA not before: Thu 19 Jun 2025 09:57:56 +0000
ROA not after: Thu 14 May 2026 09:57:56 +0000
asID: 153656
IP address blocks: 154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100206 (0x1876e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 09:57:56 2025 GMT
Not After : May 14 09:57:56 2026 GMT
Subject: CN=6853df29-d6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:7a:d4:6a:ba:8b:8c:22:85:81:62:e1:bb:
eb:8f:15:58:29:16:93:3a:e9:a3:7c:99:8c:d3:9b:
24:91:b9:3e:6e:4c:bb:50:cc:18:17:30:0f:15:13:
3d:d2:8d:b0:63:d1:9f:2c:4e:70:60:ee:9f:46:cd:
2f:db:a6:1d:7b:e9:51:ed:51:1e:a3:7d:37:08:8a:
a4:07:79:c4:db:e6:3a:cc:d9:72:c2:ee:4c:2a:7f:
f8:b9:07:b1:49:3b:96:46:66:e1:39:5d:32:d8:9c:
ba:0b:87:76:f9:8f:2c:bc:2e:59:40:f8:3f:65:bc:
e8:28:45:3f:39:ed:c2:b6:68:07:ea:66:cd:62:b5:
a4:d9:97:b1:40:ca:f2:2e:64:96:7d:74:b0:74:63:
8e:fe:17:24:26:f1:bf:5a:46:46:2d:41:34:1d:af:
f5:5c:c5:c8:6c:a7:7b:4a:66:32:5e:bb:75:3d:30:
7f:3f:be:74:4f:03:b1:17:74:2f:df:e7:85:82:1d:
1c:a0:0b:f0:9a:39:15:18:07:ad:d1:8d:73:6d:cf:
1f:c3:40:40:a8:93:fe:39:20:58:c5:50:04:e4:b7:
53:f5:2d:5c:94:e5:21:c9:d7:ad:84:b6:a1:12:52:
7a:5b:2e:32:ee:d8:f1:7b:61:dc:56:fe:6a:9c:ca:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:49:BE:E5:C9:82:0A:8C:37:3D:F4:C2:6E:5B:A6:67:2B:B7:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2485C144CF311F09AE265D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:7a:ac:f7:f6:c4:97:e4:fc:6b:68:9c:a8:4e:47:54:27:36:
9b:ac:c3:ca:70:e6:f2:02:10:f5:96:d6:e5:cc:d9:24:9f:bb:
c2:17:f8:f8:7d:25:df:44:48:a8:38:84:8e:24:1a:0e:6d:0d:
45:12:1f:92:77:f2:86:2b:bf:6e:bf:17:5c:28:fc:e5:61:f4:
45:45:53:12:52:ff:81:30:a2:e0:73:85:0d:30:c1:4b:6f:83:
f3:60:87:37:d8:d2:f2:39:48:0b:b5:ca:63:b4:7a:c6:12:ed:
5e:60:43:51:5b:e1:07:16:5f:3b:18:62:ed:42:34:d8:e7:da:
1f:4d:7b:8d:1c:f4:67:30:60:c8:09:8d:d9:c2:1e:1a:0a:a2:
1d:f8:55:cd:5b:0b:6a:c9:3f:0c:9b:0c:2a:9e:ac:a8:c3:88:
bc:51:d0:70:6b:ad:e4:c4:94:ff:3a:2c:fe:ca:e0:b7:ec:d5:
92:39:02:a3:d7:55:6a:03:63:fe:16:ad:1a:55:00:c2:d2:93:
08:a4:c7:a5:a9:f7:63:fa:0e:9f:e7:07:05:3d:db:00:b5:bc:
a8:c6:c2:82:77:4d:7b:74:72:5f:22:46:f3:ca:02:2a:db:7f:
6d:98:10:54:bd:4f:b5:6a:34:6e:ae:7a:3d:38:67:f8:4f:91:
97:6a:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:45 2025 by rpki-client