Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E519AD5C514011F0A4E2B2C5DAE4EC9C.roa
File: E519AD5C514011F0A4E2B2C5DAE4EC9C.roa (raw, json)
Hash identifier: 2/1+U3rJLBobwp0j72k0Y8zfdIGpgbb2xWiefkhKKYU=
Subject key identifier: 31:E5:9A:17:63:53:76:26:AE:6D:08:50:2F:AC:05:84:87:63:56:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E519AD5C514011F0A4E2B2C5DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:19:22 +0000
ROA not before: Tue 24 Jun 2025 21:19:16 +0000
ROA not after: Wed 03 Sep 2025 21:19:16 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100546 (0x188c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:19:16 2025 GMT
Not After : Sep 3 21:19:16 2025 GMT
Subject: CN=685b1659-6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:9f:94:41:b5:39:52:ee:eb:e6:8e:73:14:
a1:2f:ae:7f:9f:6c:ed:e1:12:41:75:ca:b2:29:b4:
41:5b:74:98:d3:b4:39:c8:5c:63:f8:4a:6e:1b:01:
f9:fd:8d:36:c0:17:de:7c:17:af:35:76:be:59:5b:
64:fb:31:21:f9:f3:c5:ff:26:c7:be:db:06:ac:2f:
80:13:6e:0b:11:76:30:f2:fc:04:46:62:9a:27:f1:
83:25:11:21:f6:68:64:d7:ad:f4:fe:32:09:a6:84:
e7:b3:da:d8:84:0b:c7:7d:c5:78:62:21:7f:49:81:
92:71:78:9f:89:29:ea:c4:5a:67:fe:ee:63:c0:6b:
43:40:aa:96:93:0d:35:ef:d8:80:33:a9:aa:1d:ac:
58:ef:76:23:4c:74:98:59:03:1b:63:6c:d6:03:f3:
cc:6d:b2:e4:a4:ea:25:ae:e7:cd:e1:7e:99:70:9b:
b3:6a:63:b1:8d:23:fb:92:83:a0:4d:7a:84:60:84:
48:cc:7a:a1:4b:6e:ab:3b:59:ca:6a:d7:f1:19:e9:
fa:90:19:93:26:ca:d7:a9:73:8a:45:f6:fe:28:68:
7c:0e:09:68:94:dd:b8:7f:94:72:13:01:d3:b4:68:
54:59:ac:ba:a5:c9:8d:1e:89:ef:41:3e:e8:40:77:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E5:9A:17:63:53:76:26:AE:6D:08:50:2F:AC:05:84:87:63:56:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E519AD5C514011F0A4E2B2C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.116.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:25:61:86:a8:b5:46:ef:78:d2:af:47:c5:14:99:57:7e:62:
11:71:f8:d9:b9:65:6a:b0:50:d0:fd:69:1c:8b:5f:b8:2b:bb:
e1:a0:9e:8c:d4:f1:4a:eb:60:5d:fb:4d:1b:d1:39:ee:1e:08:
c2:cb:ac:ab:b0:95:7f:33:4b:c5:ab:c1:ff:0f:ab:0a:30:48:
63:d6:a6:0a:0a:ad:92:24:b5:1b:34:c9:cc:e8:b9:06:c4:38:
79:07:91:bf:5a:c7:50:c4:0d:0c:96:1f:f0:42:3d:2f:7c:d7:
83:68:7e:a6:ee:00:11:a5:75:dd:95:4d:0f:50:da:45:a1:93:
63:03:cf:14:e4:35:59:b4:4a:98:06:64:b5:65:aa:ab:58:c3:
85:3a:89:97:b6:45:60:98:b3:6e:3d:79:6b:e8:18:6c:45:43:
fb:45:c5:31:83:d7:da:b6:9d:f7:d7:b2:41:bb:db:84:b4:4f:
b1:39:51:d5:ae:2b:7e:8c:3f:a6:a7:4c:c0:4d:f9:98:d1:b6:
c9:17:ef:cf:3c:da:3c:7d:16:d9:83:b3:03:e1:a0:8f:41:b5:
a3:25:4f:65:63:92:31:79:13:af:91:0f:98:9a:c7:85:bb:d7:
17:37:bb:24:ee:c3:5c:4a:c9:66:8c:36:fb:db:f6:e5:f9:a5:
c5:d3:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:31:13 2025 by rpki-client