Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB3C4A64C4811F0B164FA7DDAE4EC9C.roa
File: EBB3C4A64C4811F0B164FA7DDAE4EC9C.roa (raw, json)
Hash identifier: QxbOhDgELFJd0VK7p69O/nHYMxn4nB60Ug9tgHUYxag=
Subject key identifier: 07:87:F6:AD:AE:1B:3A:00:3F:3D:03:E0:D8:46:4C:35:F3:3D:20:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018745
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB3C4A64C4811F0B164FA7DDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 13:34:13 +0000
ROA not before: Wed 18 Jun 2025 13:34:08 +0000
ROA not after: Sun 20 Jul 2025 13:34:08 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100165 (0x18745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 13:34:08 2025 GMT
Not After : Jul 20 13:34:08 2025 GMT
Subject: CN=6852c055-fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:c2:0f:42:ee:52:8f:c7:57:37:b4:12:8c:
d4:92:d2:c9:f1:18:24:01:6c:03:86:ac:83:cb:59:
f2:8d:07:22:75:d0:bf:e1:4e:9c:79:10:87:c4:e4:
df:bb:f8:9a:95:a1:9f:15:5c:d2:8a:18:1b:1f:57:
f3:94:5a:3a:c9:13:1f:d6:93:c3:fa:5b:e9:8c:ac:
bd:a3:64:48:2f:24:d8:6b:51:b7:c3:77:b0:35:60:
ca:83:4c:53:65:7b:77:14:a7:3a:24:13:7f:03:08:
54:7d:41:e6:d8:9a:2d:d2:4c:29:81:a3:1b:bc:40:
dd:ba:39:7c:bb:92:4e:51:8e:70:39:a0:b4:8a:ac:
0f:21:f2:60:e8:71:94:ce:96:a8:e9:00:df:72:08:
74:1a:8c:38:cd:4d:f9:e9:42:b7:62:4d:1b:b9:b7:
b3:95:a3:33:9e:31:7a:56:43:d5:1e:91:19:b8:63:
91:d9:66:c3:38:ef:d3:5c:54:14:de:3c:dd:7b:5d:
b9:84:0d:00:1f:5f:a8:f1:3d:86:41:c1:2f:79:39:
e1:df:08:d8:04:1f:8b:af:a6:c9:f8:ee:35:6d:5a:
de:46:58:9a:70:9e:b9:ed:c4:95:13:65:df:db:64:
70:5d:ab:6c:8e:95:eb:c9:69:bc:9d:ea:e7:af:ad:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:F6:AD:AE:1B:3A:00:3F:3D:03:E0:D8:46:4C:35:F3:3D:20:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB3C4A64C4811F0B164FA7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
5b:8e:7f:9d:65:6d:1d:ba:d7:10:d4:62:22:83:97:81:c9:59:
f0:47:79:dd:a1:b2:81:ff:70:8d:5c:66:ae:77:16:59:40:2a:
62:fa:6c:31:ed:0e:7c:e6:df:51:b4:e3:34:76:de:30:52:e6:
5e:b9:ad:3a:2c:9d:8a:c6:cc:80:d3:a4:d4:2a:f6:39:05:1c:
a2:1c:ab:0d:1f:1b:54:2c:35:5e:07:02:2b:9c:d0:b5:2e:ad:
0b:e7:9f:22:be:96:48:64:19:a8:1b:7e:02:ba:59:fb:8c:ca:
25:63:3d:a4:92:8b:c7:86:c2:9e:f6:80:cf:9f:dc:b4:53:ea:
39:6e:65:32:1e:2b:6f:e4:1a:16:d8:62:ad:43:af:9f:26:be:
ee:4a:61:fa:5a:6f:1e:da:87:7a:f9:86:b9:7e:85:32:17:14:
e8:d5:fc:1a:2a:66:4f:35:06:8d:f1:c7:3e:1c:81:6a:f5:5e:
e4:19:9b:7c:7d:11:c3:1e:e9:17:5c:5b:17:13:38:f4:07:88:
3a:20:19:7a:7b:89:a0:00:db:e6:43:9b:42:5c:f8:69:b9:ec:
93:dd:d2:99:36:49:dd:33:d0:3a:08:22:ca:82:fa:5f:33:76:
d5:35:dc:eb:c3:9d:b9:b9:58:3d:84:85:58:05:76:e8:1d:62:
21:f8:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:58 2025 by rpki-client