Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3421D0581911F0920D8DD4DAE4EC9C.roa
File: EE3421D0581911F0920D8DD4DAE4EC9C.roa (raw, json)
Hash identifier: UwaRIBgf2qhbcIhaW+bicpa0TSjmfW0cP7p43DJB/tg=
Subject key identifier: 4B:4C:47:2D:EF:A2:60:48:0D:C9:AF:FF:84:12:97:0A:9B:3C:50:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3421D0581911F0920D8DD4DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 14:28:05 +0000
ROA not before: Thu 03 Jul 2025 14:28:00 +0000
ROA not after: Wed 13 Aug 2025 14:28:00 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100901 (0x18a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 14:28:00 2025 GMT
Not After : Aug 13 14:28:00 2025 GMT
Subject: CN=68669374-7f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:32:e9:1f:dc:e6:c6:8a:28:0d:fb:43:f3:
84:ae:72:b6:3b:5f:e3:0b:0f:11:cc:fd:94:45:86:
c3:ad:54:cf:ab:e4:3e:d5:45:4a:0e:ba:0f:b6:c8:
77:0b:4f:dd:aa:a1:40:90:7c:5a:15:08:1a:1f:fc:
f7:8c:72:0a:93:17:7a:8a:11:63:38:65:c3:e2:4b:
48:b9:cd:df:1a:71:3f:63:34:49:10:99:8f:07:52:
66:5e:b5:c7:a2:da:a5:c9:01:ea:a9:09:8f:9a:86:
17:53:e6:a4:72:4b:d7:b8:8f:36:8e:89:13:e9:f4:
53:63:44:ad:b0:38:46:b5:a9:83:70:18:2e:74:2f:
f4:75:20:1d:84:9a:11:b9:97:bd:22:cd:fd:2e:aa:
de:fb:72:20:92:de:a9:c6:cd:ab:43:c4:f5:9c:d4:
30:44:15:56:7a:01:ae:44:66:1e:5b:2f:c0:94:71:
ba:9a:e6:81:94:bd:ef:bf:94:5d:61:57:57:84:24:
7d:82:e6:4a:5f:05:70:3f:af:a3:a4:22:8c:1c:4f:
c3:56:9c:00:cc:d1:49:bb:80:c0:42:5e:06:ad:b6:
0a:e6:26:33:e5:2f:53:02:94:63:13:7c:d9:70:24:
88:d9:61:ed:5e:ad:5f:2d:2f:29:42:75:e8:b1:42:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:47:2D:EF:A2:60:48:0D:C9:AF:FF:84:12:97:0A:9B:3C:50:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3421D0581911F0920D8DD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:41:70:b6:ae:f0:46:ec:ce:7f:ee:c6:37:ec:db:db:dc:e3:
1b:a3:77:4e:29:d4:85:f2:db:d8:15:a7:93:0d:e3:68:56:f7:
10:c8:24:41:51:a1:bf:19:3e:8d:23:a9:d4:09:8c:67:02:00:
93:0a:b6:b4:97:71:c3:0a:e1:65:77:81:76:e4:5b:c7:44:79:
79:9a:28:12:1c:c2:16:6c:81:0d:e7:4b:0c:34:83:0b:a2:a5:
f4:32:5c:21:33:ac:d8:b9:32:6f:47:89:1d:94:44:cf:f8:90:
5f:cd:05:47:e5:19:06:7b:c6:e4:03:9a:21:43:09:b5:a0:2f:
05:8a:f5:42:26:63:24:ff:47:3c:53:9d:4b:4c:4d:00:aa:ec:
17:df:eb:81:0d:ab:0a:77:e9:ad:b9:55:2d:64:a2:a8:b8:08:
da:e7:d5:8e:9d:4f:1f:8b:9c:23:14:c9:67:d2:69:18:a1:d3:
70:c4:29:9b:48:0e:c6:d6:01:8f:3f:52:06:9c:b6:d4:fc:98:
37:30:99:29:96:42:2a:bd:f4:bd:38:f7:7c:52:23:06:f4:0e:
4a:c6:94:cb:dc:da:ec:04:ad:8b:4b:7a:fb:f9:f1:10:88:c8:
e5:18:53:fa:da:af:b8:43:67:7d:c4:62:b3:30:90:19:8a:1e:
c8:bf:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:54 2025 by rpki-client