Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00E44CA85B8D11F0AF9870C6DAE4EC9C.roa
File: 00E44CA85B8D11F0AF9870C6DAE4EC9C.roa (raw, json)
Hash identifier: EWA/APzSFjIqibFb5zZcv+9lppgFx2SL/vVUT7BLQvU=
Subject key identifier: 6E:D1:84:53:E7:E3:38:82:FE:F9:48:3D:C0:BD:B2:DC:22:D6:84:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00E44CA85B8D11F0AF9870C6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 23:49:22 +0000
ROA not before: Mon 07 Jul 2025 23:49:16 +0000
ROA not after: Fri 17 Jul 2026 23:49:16 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101514 (0x18c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 23:49:16 2025 GMT
Not After : Jul 17 23:49:16 2026 GMT
Subject: CN=686c5d02-ca86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:fa:35:64:d7:d5:fb:99:b3:be:59:34:88:
1b:2a:d5:96:92:d1:dd:30:fc:05:86:bc:3d:01:2d:
16:df:87:77:9a:0e:b0:5b:28:ec:bf:4b:20:8c:3b:
17:cb:d5:ba:fa:09:40:44:6b:bc:5c:8b:f5:24:70:
e8:58:c9:bc:54:44:c7:10:e4:01:b3:a1:2d:4b:ea:
f0:98:72:7a:73:cc:44:38:de:47:fc:c5:a9:b2:a9:
18:f5:1b:50:0f:c7:80:30:11:9f:f3:8e:d4:da:0f:
2c:d9:65:70:00:12:94:6c:04:e9:88:58:f4:da:b4:
65:9e:5f:3b:56:9f:a2:f4:85:c5:5f:d8:ee:2d:e7:
69:9f:9c:57:a6:29:52:fe:e0:66:6c:8f:88:47:5f:
46:07:9a:6a:34:df:cf:1e:63:67:29:c6:ed:6e:54:
5e:a3:96:f2:ab:73:3e:e0:37:5d:f0:2d:b7:a3:28:
dd:ce:3b:47:ad:b1:c6:ca:de:e8:2c:36:ed:f5:7c:
aa:07:57:5f:af:ee:e6:ec:03:fb:80:e7:59:de:de:
20:55:3d:63:35:38:f5:2a:bf:82:44:55:b8:84:b7:
e4:3e:ed:fc:2a:b7:b5:0a:fd:11:ea:3a:26:e0:3f:
ec:bb:b5:06:5e:d2:cb:9e:a6:95:ad:4c:c4:37:bc:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:84:53:E7:E3:38:82:FE:F9:48:3D:C0:BD:B2:DC:22:D6:84:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00E44CA85B8D11F0AF9870C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:85:da:5c:b1:0a:e2:47:de:3a:d9:73:2f:08:31:a0:0a:a4:
a7:49:a4:69:b2:f2:bf:15:dd:57:28:76:c7:1a:88:50:67:3c:
1c:60:17:2b:a3:b5:c9:42:74:9d:ba:17:c6:28:74:5a:43:4c:
c2:6c:56:00:b3:14:01:91:d8:eb:7c:05:c3:94:64:1a:94:e3:
98:43:23:bc:0f:02:af:2a:c3:08:51:d4:1c:85:21:ca:23:fd:
af:87:8a:88:d0:6c:ef:4f:4c:8f:dd:10:00:0c:67:ef:63:56:
20:b2:c7:3f:90:2f:57:0e:bc:dc:e6:12:5e:f4:a1:42:4a:9b:
8a:65:f1:30:75:60:ef:92:ac:79:b7:19:d7:ff:6b:67:25:ee:
f0:a1:81:a5:83:ac:d4:ab:d8:4c:04:2c:c5:65:56:c0:7e:a3:
24:5a:69:86:c4:bc:21:d0:71:5a:c2:29:42:13:86:03:8b:0f:
54:13:d2:f6:df:83:e7:22:0b:d4:25:85:ff:7c:a3:e3:de:38:
b3:47:7d:2e:d6:a2:94:59:6c:d2:85:78:60:86:02:da:33:d3:
fb:1b:6d:cd:11:5c:40:c3:f3:6d:02:1f:81:b6:d6:39:74:fa:
43:df:b2:02:3c:b8:c4:5e:64:03:b9:c3:b8:dd:c7:17:46:0e:
9f:c3:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:03 2025 by rpki-client