Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB104E6625511F0AE8BE8C8DAE4EC9C.roa
File: 0AB104E6625511F0AE8BE8C8DAE4EC9C.roa (raw, json)
Hash identifier: bb5JkbOdM7fYBzrBCYAnt/Var+0nxztDmVJEF0Uj690=
Subject key identifier: B2:52:B7:EA:B7:FD:73:58:66:CA:B7:1F:E4:C1:A1:D0:6B:A2:92:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB104E6625511F0AE8BE8C8DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 14:56:24 +0000
ROA not before: Wed 16 Jul 2025 14:56:19 +0000
ROA not after: Fri 25 Jul 2025 14:56:19 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
154.194.10.0/24 maxlen: 24
154.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101901 (0x18e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 14:56:19 2025 GMT
Not After : Jul 25 14:56:19 2025 GMT
Subject: CN=6877bd98-d465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:9b:4a:85:3a:5c:e3:d3:d7:51:06:da:87:
ad:df:cd:31:30:22:9c:5f:f3:ce:1c:f6:8f:77:cc:
a5:09:46:49:7f:48:f2:ae:1c:0b:d6:74:39:8d:4a:
23:cc:77:7b:20:10:78:6f:fd:58:52:10:f0:a6:20:
09:94:ca:8d:7e:b4:bc:1b:c5:7a:a4:e7:96:a3:3e:
07:2d:31:f3:90:ce:3f:19:fa:51:8a:1f:58:48:b3:
6e:d7:13:05:f0:90:f2:b3:c5:b6:bc:29:d1:78:f6:
b1:0e:0a:a9:38:17:ae:3e:d3:48:4a:24:d7:e7:1b:
ec:c7:2c:88:be:c4:e8:de:17:86:09:ba:d3:41:3d:
86:65:a0:34:5b:14:1a:14:17:04:7d:70:0f:e7:2c:
64:5f:32:99:dc:3b:87:19:a3:59:2a:f8:f0:d1:e9:
b5:f8:cb:14:67:ab:f1:9d:29:25:2b:94:10:72:6d:
2e:7d:2e:b0:75:70:d9:35:64:c5:92:96:44:c6:f8:
eb:96:cc:f3:06:f6:b0:77:19:fd:e8:47:ca:f1:93:
39:e7:64:61:85:48:01:01:2a:5c:79:f8:dc:b9:f7:
69:25:a3:3a:10:25:db:b6:f6:a6:a6:f8:2f:32:f8:
49:8a:e1:56:e6:99:f8:25:2f:50:9a:93:fd:a9:89:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:B7:EA:B7:FD:73:58:66:CA:B7:1F:E4:C1:A1:D0:6B:A2:92:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB104E6625511F0AE8BE8C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:9d:06:4b:b4:b3:5b:74:2c:ac:36:26:53:c2:91:12:90:c8:
4f:53:6c:b7:0a:42:43:50:aa:49:26:f7:cd:43:1d:ce:60:f6:
37:2d:c3:5f:69:88:7f:1b:13:ec:c2:9d:c7:5d:ae:7d:18:a9:
7d:8c:1e:55:be:35:1f:b1:e6:ce:b8:30:e1:0b:64:de:81:3e:
e9:0a:2e:75:e9:1a:61:36:f6:12:1e:38:81:34:00:20:17:d3:
f4:33:50:9e:a2:7c:cc:dd:79:53:f9:fe:61:dd:6d:bd:e7:11:
20:60:5b:14:0c:88:95:0d:27:4b:44:4b:c7:8d:40:f2:7c:2b:
1f:72:06:ee:fb:c9:6c:60:63:2d:53:81:27:39:eb:66:06:34:
46:74:51:c7:f2:7b:97:af:7a:bf:e5:50:33:85:54:e6:1d:63:
fe:d7:d8:d1:72:85:45:2b:73:82:0b:2a:0c:d3:39:8b:15:53:
40:b2:c1:dd:57:fc:3e:b8:8e:43:2e:b1:22:1d:ee:21:68:80:
98:8f:ae:bb:0d:bd:eb:76:b7:08:43:73:90:9b:a6:98:b8:36:
ef:78:80:48:d0:a5:da:c6:b0:d3:e0:1c:56:a2:6b:a2:f5:85:
a0:1d:83:2d:93:d9:74:7a:fc:5b:77:56:16:a4:84:55:a6:a2:
c7:41:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:44:21 2025 by rpki-client