Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E73C3165B0C11F0B9196D8DDAE4EC9C.roa
File: 0E73C3165B0C11F0B9196D8DDAE4EC9C.roa (raw, json)
Hash identifier: lImpGX4f5j+uAJG3TbAwrXIbjkMZsgdbLQdnzGKVaKw=
Subject key identifier: 3F:0E:B8:DE:1B:15:1E:ED:96:4D:EA:82:C4:F2:5D:E7:93:CF:67:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E73C3165B0C11F0B9196D8DDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 08:26:19 +0000
ROA not before: Mon 07 Jul 2025 08:26:14 +0000
ROA not after: Tue 12 Aug 2025 08:26:14 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101372 (0x18bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:26:14 2025 GMT
Not After : Aug 12 08:26:14 2025 GMT
Subject: CN=686b84ab-8d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:36:7f:4c:d7:da:5d:41:58:54:24:81:0a:
56:79:9d:f6:82:48:b6:2d:8c:ee:ae:7e:1c:3f:99:
f3:61:02:46:20:b7:d8:cf:7c:a2:21:9a:68:d0:17:
e8:e9:02:01:50:5a:e0:c7:3b:aa:48:fe:2d:1b:a0:
ef:2d:36:86:fa:e3:ce:33:59:6e:e9:39:2a:cb:ac:
89:bf:84:77:78:a4:d5:ed:72:05:1e:7b:6a:cd:6d:
e0:5b:af:aa:6f:7a:06:59:1e:f9:d9:45:2e:26:2e:
06:98:10:57:ac:00:ce:08:af:2c:20:d2:44:d3:6e:
a6:32:cf:7c:08:ff:bd:08:44:f4:d4:ab:7d:d4:9b:
79:8b:e7:e2:a4:63:de:77:7f:b1:e4:e7:b1:ea:72:
b3:f9:1c:d4:7d:c9:27:7c:87:58:71:06:28:e6:7b:
56:ed:09:47:e6:84:e8:5e:35:ce:21:be:92:7b:b6:
a5:3b:43:74:ad:50:77:df:03:a6:30:c3:62:c8:9a:
cc:53:d4:c8:cb:b3:4c:80:90:b8:15:d1:e6:f0:58:
cb:db:47:86:4b:f3:46:bf:4e:72:c7:16:cd:68:46:
f1:57:ac:d4:02:7b:e3:38:90:65:81:64:5f:fb:71:
cf:55:51:bc:91:83:34:f2:6c:83:2a:ca:c4:4f:1a:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:B8:DE:1B:15:1E:ED:96:4D:EA:82:C4:F2:5D:E7:93:CF:67:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E73C3165B0C11F0B9196D8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
43:10:85:26:94:7f:3a:4a:0b:07:8b:9b:3d:d8:9f:13:fc:fc:
82:63:d6:35:03:ae:24:f8:a9:74:ef:7b:ef:c2:ad:c5:e3:34:
94:e9:6c:e2:14:3d:e5:f3:f6:a6:8c:60:76:86:8d:be:3f:48:
20:03:a5:1b:f0:9c:68:84:4a:37:41:a4:12:c8:93:c9:2b:d9:
f2:4c:e3:54:8d:94:99:d9:27:39:96:62:78:70:a7:39:52:35:
3b:22:70:4f:fc:06:79:86:dc:27:d1:17:b6:52:e9:90:eb:c3:
bf:a1:60:c6:b0:ac:44:53:d3:2a:6b:fb:37:e7:37:e1:41:bb:
a3:77:f2:cc:fa:60:d0:f4:66:5d:06:59:57:2d:d2:6e:01:d2:
ba:25:f2:eb:70:57:97:15:61:59:5d:e0:66:b2:72:fb:5a:2f:
65:77:05:b2:90:65:13:95:59:2f:6f:19:42:1b:32:c1:7d:0d:
ae:e1:68:70:05:a4:59:59:51:de:4a:87:32:04:2d:d0:8f:9a:
f4:05:88:9e:80:85:e8:04:54:02:c3:05:c3:a9:bc:c6:f2:b7:
90:47:7a:d1:74:1f:28:88:10:f6:79:69:23:c1:23:63:23:bb:
4a:a0:ac:c1:eb:86:ab:d9:ce:6f:b8:93:e0:f7:0b:ad:52:28:
47:16:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:37:00 2025 by rpki-client