Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA7E44E57DD11F0A63088D3DAE4EC9C.roa
File: FDA7E44E57DD11F0A63088D3DAE4EC9C.roa (raw, json)
Hash identifier: S+Pjhy8/RIQKiM7hndRKJEL8fmDgladPMJPx20u6Xxo=
Subject key identifier: 59:E0:F7:40:D1:18:AF:C0:3D:EE:47:55:9F:2A:A3:F2:45:BC:15:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA7E44E57DD11F0A63088D3DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 07:19:01 +0000
ROA not before: Thu 03 Jul 2025 07:18:56 +0000
ROA not after: Thu 10 Jul 2025 07:18:56 +0000
asID: 54801
IP address blocks: 154.214.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100849 (0x189f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 07:18:56 2025 GMT
Not After : Jul 10 07:18:56 2025 GMT
Subject: CN=68662ee5-52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:f2:ff:1d:a4:5b:b0:10:6b:26:78:7e:fe:
20:10:5c:29:89:4f:8f:fb:69:f7:f9:f9:78:10:a2:
fd:fd:4d:5c:88:0d:9d:24:8b:ef:32:18:0a:da:91:
4c:26:f4:71:5a:e0:0f:d5:36:11:ac:df:c0:b4:41:
5a:55:77:97:dc:ef:99:05:fb:6a:b2:6b:78:ca:59:
82:6f:4e:73:72:fc:d2:fb:ae:86:ee:42:ee:25:5b:
05:e1:c3:cf:e4:d6:b1:7e:e5:c1:c1:95:62:52:b5:
fb:72:c0:12:4c:f8:a8:2e:ca:ae:0c:99:4a:77:98:
d9:ae:47:73:a7:f7:0b:96:1c:bc:3e:63:5b:5f:6b:
c7:ab:7d:ae:3e:da:76:f2:f0:f1:91:bc:71:5b:d5:
cc:02:be:36:19:b2:8b:08:98:e7:32:f1:f5:b9:7b:
36:c2:d8:0f:69:70:77:4c:f4:67:4a:ab:dd:9e:90:
58:cd:d2:b0:d5:9b:5d:b7:8b:54:70:df:f4:38:ac:
d4:6c:24:9d:7e:b8:8f:73:37:3b:e3:a8:db:e7:9b:
f0:7d:7f:74:71:fd:32:e3:80:8c:2c:66:36:01:55:
80:a8:51:89:f3:46:d1:5a:13:58:36:62:59:66:51:
5d:65:24:c9:35:be:58:19:bb:07:3e:31:12:47:0e:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:F7:40:D1:18:AF:C0:3D:EE:47:55:9F:2A:A3:F2:45:BC:15:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA7E44E57DD11F0A63088D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
23:0e:e7:35:63:a8:08:70:8c:54:7f:70:33:97:8c:bf:95:38:
aa:5d:f4:f8:b7:3e:60:83:19:62:0a:e2:39:b1:49:9b:92:e7:
33:d7:d0:15:fc:44:a8:ee:3d:c2:b8:97:49:29:33:a6:76:a0:
fb:bb:9d:5c:9e:84:ab:6b:16:1e:4a:af:13:6f:95:26:e0:6a:
98:b3:0d:94:82:68:b7:3d:74:e6:55:8c:bd:41:de:08:7a:2b:
40:ab:cd:82:23:05:ad:b4:b2:8b:e2:54:4d:24:dc:60:04:76:
de:9d:ee:24:8e:e2:cd:ab:38:e8:21:df:00:0f:6f:a5:52:4e:
fa:e1:a3:c9:9c:4a:91:fc:3a:0b:3f:d6:dc:da:52:f2:81:99:
a5:12:ea:c7:ef:87:c4:cc:66:65:20:91:89:86:7a:27:a2:d8:
54:cb:57:70:83:1b:1b:3c:af:43:87:75:57:94:54:3a:75:8f:
8e:38:b2:93:6b:7f:7c:6c:ef:b3:bc:81:57:af:c9:18:2d:26:
43:c9:af:c2:a6:f8:a8:84:a4:ac:b2:87:f3:47:14:b5:42:81:
6b:31:df:5b:8e:d3:81:2e:7b:16:59:67:23:cc:f4:7a:e1:04:
45:e2:ac:e5:5c:b3:f6:35:16:7e:b8:da:97:9a:78:78:4d:2b:
ef:a2:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:42:59 2025 by rpki-client