Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5C6A258C011F0B0E56796DAE4EC9C.roa
File: 27A5C6A258C011F0B0E56796DAE4EC9C.roa (raw, json)
Hash identifier: sW1SOo/WWeO98DDAz/q50SzA6zWTgOtW8/JDm8WWSjQ=
Subject key identifier: 26:AD:BB:2D:F3:B9:96:FE:CE:AC:29:C1:7B:C5:E0:82:CA:1E:DE:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5C6A258C011F0B0E56796DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 10:17:57 +0000
ROA not before: Fri 04 Jul 2025 10:17:53 +0000
ROA not after: Mon 08 Sep 2025 10:17:53 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100936 (0x18a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 10:17:53 2025 GMT
Not After : Sep 8 10:17:53 2025 GMT
Subject: CN=6867aa55-d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:a3:8a:a2:ea:0d:72:4c:cc:9e:67:62:f5:
b6:63:57:c3:7a:2e:62:c9:d1:d0:f7:a9:2e:28:ae:
62:ef:03:5c:81:cf:3f:d9:b0:11:e4:a7:46:6f:2e:
1c:c0:64:4d:2a:5e:a2:fe:c2:5e:3e:8c:11:b8:3a:
d4:85:16:e2:86:dc:d1:f6:dc:36:e4:0d:e5:34:c8:
a6:f2:ec:52:97:6c:e9:6d:9f:ce:f8:02:31:18:3e:
d9:04:1e:0c:d9:df:9c:2d:fd:9a:8d:62:d0:bb:3a:
b2:02:85:af:3e:d9:b1:8c:9d:c3:44:3b:94:33:9e:
cf:38:f6:d5:c1:1f:b6:b9:04:50:98:71:38:45:91:
30:3f:62:4e:ee:48:3a:07:2d:9b:d5:2c:74:95:39:
b0:78:8c:f6:4a:11:51:1e:7d:57:46:33:86:33:a6:
ad:0e:26:3f:be:24:6b:91:5f:6b:08:68:ba:d2:a1:
8b:13:b5:ed:3e:23:d6:12:1c:a0:18:64:50:97:54:
da:9d:31:d5:90:6c:bf:08:dd:31:47:d4:0c:13:de:
b8:ff:c3:98:f1:a5:df:07:d9:2c:f9:ce:17:d4:4c:
22:81:f0:e2:41:2f:50:a4:4e:3f:42:62:84:b5:8d:
ec:9f:78:87:6c:18:ea:ab:74:ea:c7:3d:56:7c:bc:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AD:BB:2D:F3:B9:96:FE:CE:AC:29:C1:7B:C5:E0:82:CA:1E:DE:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5C6A258C011F0B0E56796DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
93:85:93:de:3f:59:4c:17:73:59:e4:fb:74:82:39:40:ed:e6:
5d:6a:b6:4d:7c:3c:32:6f:b2:98:52:a8:b8:64:96:f5:09:cd:
2d:e8:2d:eb:d2:39:81:df:e7:45:55:bd:0b:b3:ca:a8:13:6d:
1d:42:e1:cd:7b:d8:c4:ec:16:76:b2:8c:72:7d:e7:72:79:d4:
45:cf:d8:90:ae:55:f5:67:08:87:97:3d:20:94:c7:3d:c0:e2:
d1:1c:9e:d0:f2:38:b2:2f:f2:22:6c:1b:ab:87:d5:24:5a:f9:
43:e8:00:f7:63:70:a9:54:36:75:a2:a1:75:31:d0:eb:08:cd:
6d:63:2f:73:64:d2:af:b0:61:47:9f:64:01:40:6e:f9:72:7b:
cc:a2:bc:3f:59:ba:ca:d1:82:a5:22:9a:b1:d2:66:69:58:ff:
8a:9f:6f:bf:57:a5:f8:9b:cd:dc:04:b3:c2:65:0f:30:11:79:
55:96:58:a1:4c:a8:a5:19:e6:32:56:b2:35:51:53:34:98:98:
15:ac:99:77:67:08:36:48:e6:ec:c2:c8:b0:45:b4:35:37:91:
91:3c:59:22:32:39:46:38:6e:ad:bd:1a:44:7f:76:16:15:dd:
4b:0e:69:74:97:d3:2f:db:2c:75:c1:9f:5e:c1:f9:43:bb:a4:
6b:c5:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:42:52 2025 by rpki-client