Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B7E8A0598111F08CDE8C81DAE4EC9C.roa
File: 15B7E8A0598111F08CDE8C81DAE4EC9C.roa (raw, json)
Hash identifier: c5H1iGDZwtR/cdUu9qFbTxwjgd+fX5YDyDTifDUG91Q=
Subject key identifier: E6:75:39:13:C9:3C:0C:FB:4D:76:9A:2B:C0:5E:EE:AD:06:53:6A:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B7E8A0598111F08CDE8C81DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 09:19:00 +0000
ROA not before: Sat 05 Jul 2025 09:18:56 +0000
ROA not after: Fri 08 Aug 2025 09:18:56 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101080 (0x18ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 09:18:56 2025 GMT
Not After : Aug 8 09:18:56 2025 GMT
Subject: CN=6868ee04-8a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:b5:34:4f:7c:76:d6:eb:41:37:0b:4d:12:
9a:4c:15:8a:6c:30:0e:b5:5f:7a:10:7f:6d:04:25:
f7:ee:3e:06:60:62:80:51:ac:84:20:4f:e4:f6:d7:
78:26:d8:63:a1:ec:12:84:83:cd:b8:02:40:d9:46:
c8:15:ef:5b:66:90:41:f6:25:e2:bc:ab:07:bb:0e:
e0:7f:12:9e:8f:aa:af:60:33:54:e9:5a:5b:78:04:
53:8f:4e:59:77:5f:76:17:09:7d:2e:b2:1c:38:b5:
64:ea:41:05:b4:e8:6f:1e:1c:c1:e3:db:c4:af:39:
b7:55:b9:94:0f:7f:bc:26:84:26:c8:f3:7e:d8:72:
b6:00:50:d0:06:53:ec:cc:4c:32:cf:f5:38:0e:fb:
bb:f2:af:a2:db:d1:c7:d9:85:f0:4d:99:2e:89:20:
4b:83:9e:f4:b7:c1:b3:05:9e:2c:24:7b:f4:24:d5:
26:ee:0a:1e:7b:28:32:f1:d3:d5:71:87:64:5b:80:
ca:2d:04:46:51:7c:49:c5:f6:47:a7:a1:ea:55:46:
bc:e8:cb:8c:c4:db:d4:ca:c4:5a:de:4d:dc:43:c8:
25:82:29:ce:f2:96:32:7a:03:e7:c7:d1:f0:7a:f6:
78:64:fb:c9:af:60:44:8b:af:17:29:c6:86:d0:ba:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:39:13:C9:3C:0C:FB:4D:76:9A:2B:C0:5E:EE:AD:06:53:6A:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B7E8A0598111F08CDE8C81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
16:05:eb:25:1b:a9:ac:f6:c5:76:fb:25:cc:30:a2:6b:49:1d:
c1:7e:b9:86:4a:34:d2:0f:24:1a:b0:5e:96:b3:59:bf:d5:1c:
de:31:72:ed:52:ad:ce:7b:99:e3:6b:d9:30:16:8d:2f:02:8b:
ea:2a:3f:bb:18:ec:5c:a1:15:37:46:c1:bc:94:a7:04:cf:b3:
28:dc:dd:49:8a:c5:34:89:7e:ea:a9:4e:f8:19:22:e4:5a:66:
bf:32:dd:e6:ce:f0:3f:4a:fa:be:18:dc:55:e1:ca:74:5b:6b:
df:14:70:f3:50:27:f2:c6:13:ea:51:77:68:bd:55:89:b5:18:
19:4f:cc:21:cd:9a:e5:fd:4d:f6:63:2b:74:e5:e5:db:6c:86:
53:20:a9:47:66:59:d9:51:87:be:e6:6b:45:0c:25:fb:d6:41:
31:ce:10:32:50:2e:fd:47:a5:a9:0c:b6:7b:28:be:4d:c1:04:
be:e8:3b:c1:44:d4:3e:e0:95:8c:1c:4c:1c:81:ae:ee:1a:35:
69:f8:c2:52:b4:b4:31:9e:25:5e:a0:ff:96:d8:56:09:eb:b7:
9b:1e:3e:e2:73:c1:34:ac:7d:07:3e:50:5f:13:c8:01:48:65:
18:97:a3:31:e9:a5:e9:f0:5c:01:70:be:6c:81:23:f7:ad:bf:
c2:30:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:56 2025 by rpki-client