Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEEA8A7E380211F0BF65C37CDAE4EC9C.roa
File: EEEA8A7E380211F0BF65C37CDAE4EC9C.roa (raw, json)
Hash identifier: Leie/sHr3X7CfkPzD2euv/Vb0j69yEnG91zufC31tsk=
Subject key identifier: EC:85:E6:26:B2:93:C4:2F:C8:55:EC:F3:86:76:FB:4F:AC:6B:40:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018251
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEEA8A7E380211F0BF65C37CDAE4EC9C.roa
Signing time: Fri 23 May 2025 18:22:50 +0000
ROA not before: Fri 23 May 2025 18:22:45 +0000
ROA not after: Thu 03 Jul 2025 18:22:45 +0000
asID: 174
IP address blocks: 154.88.32.0/24 maxlen: 24
154.88.33.0/24 maxlen: 24
154.88.34.0/24 maxlen: 24
154.88.35.0/24 maxlen: 24
154.88.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98897 (0x18251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:22:45 2025 GMT
Not After : Jul 3 18:22:45 2025 GMT
Subject: CN=6830bcfa-f864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:0a:28:3b:4c:80:8a:97:f2:08:44:47:6c:
51:b7:fe:cd:ec:48:86:5b:48:ab:a2:94:57:3a:07:
25:3d:51:8a:df:13:57:a1:56:d1:40:61:e5:4d:f9:
2d:04:1f:6c:02:1b:8c:00:ac:5a:44:83:56:f4:38:
3e:c8:8b:1b:27:aa:d2:31:06:19:e1:1b:2b:90:0f:
9d:e2:a5:65:3e:cd:0d:43:ea:79:3f:60:b6:d1:a2:
4c:a7:d7:af:73:d3:0a:39:c3:fa:b9:6a:74:6b:91:
d6:e8:e5:19:c7:b7:ae:a6:7b:7a:02:3f:ce:14:2e:
5f:9b:0c:c5:e9:9d:bd:bc:1b:8d:31:67:47:36:19:
6c:f8:69:09:9e:1f:94:6e:d1:b9:09:97:44:91:ff:
23:1f:6b:1f:1c:6c:d9:e2:e7:a9:9a:e2:01:84:97:
a4:9f:2f:c6:56:63:19:ef:19:1a:b7:c0:73:ef:7a:
c3:8b:69:bf:5f:b7:66:30:ef:6f:19:a1:c6:5d:3a:
f3:3c:7d:fb:20:3d:98:f2:87:4b:ab:07:7b:76:9b:
94:b9:a1:f3:d4:91:aa:9a:c1:f7:95:01:21:01:d0:
de:68:8e:d8:81:bf:a0:3c:f7:46:c0:3e:10:1e:0e:
4b:f4:a9:c4:65:28:6d:14:32:a8:9d:1e:5e:0e:30:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:E6:26:B2:93:C4:2F:C8:55:EC:F3:86:76:FB:4F:AC:6B:40:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEEA8A7E380211F0BF65C37CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/22
154.88.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:93:1c:6a:1a:9e:e3:32:54:87:49:56:8d:78:b0:6d:2a:bf:
5c:b3:12:c2:82:e7:c4:8e:b2:bd:a0:1a:78:09:63:78:f5:2d:
3d:53:e0:25:bc:8d:2e:b0:19:66:cc:23:98:a2:8c:9b:0f:6d:
d8:e6:24:8a:ca:f0:01:6c:02:8a:7d:11:dc:9e:f6:52:1f:fe:
85:0f:91:9b:b4:1e:d8:91:c3:74:c2:13:df:7e:89:33:1c:eb:
85:4c:02:c8:31:ec:6b:4b:ab:c1:5d:f9:c5:f2:ea:44:94:49:
f3:bd:e1:30:e3:d9:0d:48:46:8a:c1:b3:f9:5a:80:ac:a0:ff:
0b:53:82:03:70:c6:1c:4a:18:fe:16:cd:4f:e6:6e:9a:38:3f:
b9:0d:9d:67:51:61:6c:bb:4d:ac:8c:ce:fc:9b:b9:dd:b2:a7:
e2:25:1e:a7:b7:b1:fa:4d:5f:d0:02:b1:71:7d:6b:4f:b5:d1:
ca:b4:ce:e3:e4:be:2d:98:b8:27:05:b0:45:4f:b3:43:95:0c:
6b:73:19:65:a9:d8:b0:85:4c:f5:d3:6b:4c:69:5a:bd:17:ed:
62:3c:4e:53:64:be:df:d9:0f:ec:69:3a:de:ae:1c:1a:1c:48:
ef:f0:a1:f5:ab:30:08:35:74:f0:b1:de:c0:5b:c4:84:88:3b:
a1:95:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:24:06 2025 by rpki-client