Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9059E5CE411F09D6DB88ADAE4EC9C.roa
File: 2BE9059E5CE411F09D6DB88ADAE4EC9C.roa (raw, json)
Hash identifier: EFZSNyG9tbZXwH5Mc+4vdOXKqQEVd9UAJ8Z3/H582dQ=
Subject key identifier: 43:8E:98:E0:07:DB:6F:D3:07:32:8F:E9:A2:6A:A1:27:41:9D:8C:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9059E5CE411F09D6DB88ADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:45:51 +0000
ROA not before: Wed 09 Jul 2025 16:45:46 +0000
ROA not after: Thu 14 Aug 2025 16:45:46 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101612 (0x18cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 16:45:46 2025 GMT
Not After : Aug 14 16:45:46 2025 GMT
Subject: CN=686e9cbf-4beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:44:11:eb:2e:e9:7f:28:18:8a:45:40:03:
ab:40:61:0f:96:16:6f:f6:2b:2c:02:fc:72:82:2b:
e7:6c:5f:e7:06:89:60:e4:0e:5b:c4:50:b9:8d:14:
c2:2b:61:64:04:70:55:bf:22:2e:6d:e8:58:45:5b:
58:0b:3c:1a:bb:f5:fb:4e:4a:9f:ef:40:82:ed:40:
45:de:0d:5e:f4:2f:bb:31:c1:23:dd:f5:0d:6e:8e:
97:f1:94:3f:dd:62:4c:21:f7:30:9f:95:6d:28:31:
28:03:4c:0e:2d:06:b5:79:c4:fb:8e:70:92:f7:0f:
b2:21:55:1e:d3:fa:fe:c1:5e:65:eb:3f:cb:d3:ab:
a9:d4:1d:6c:cc:27:cc:6d:00:41:11:a2:d8:06:cd:
26:8d:ae:f2:cc:35:ac:4b:b9:5e:7c:c9:b9:71:54:
2c:f8:dc:1c:db:95:0d:2c:5c:e8:78:72:c1:d4:ef:
2d:eb:99:fa:0e:b4:e0:73:8c:9f:29:64:ba:1f:00:
94:19:8b:a2:da:c4:6e:4a:74:07:18:f9:3e:00:75:
0f:03:9a:15:d2:80:28:e6:9c:86:98:f8:ce:59:dc:
33:e4:ff:93:c6:ea:bc:33:4e:ba:12:77:7d:bf:32:
1f:8c:4e:67:2d:e8:4b:6a:fa:02:13:8e:ac:be:08:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:98:E0:07:DB:6F:D3:07:32:8F:E9:A2:6A:A1:27:41:9D:8C:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BE9059E5CE411F09D6DB88ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0c:13:fb:df:0a:d5:58:81:3d:47:ab:10:29:52:91:b8:04:
e0:c5:12:65:9c:6e:d6:71:66:94:b3:16:df:69:af:05:f3:7c:
5a:dc:09:79:8d:ed:6b:47:1f:41:cc:c2:a0:d3:ab:c0:1b:9d:
64:c0:39:0d:28:61:26:d4:33:34:a9:a9:05:e9:e1:45:7d:de:
16:52:2c:62:7a:5f:d9:3d:d9:77:09:20:91:21:fe:01:83:e8:
5e:8d:dc:cc:f2:5b:13:37:ad:0a:09:99:c6:e7:cf:7f:51:03:
2b:23:ff:ad:aa:eb:97:b8:58:d6:8b:9e:6a:4a:86:69:94:15:
9e:76:95:f3:89:09:1c:50:04:72:a6:75:11:5c:66:b0:c6:76:
9f:f8:c0:32:bb:59:aa:8c:f7:fe:1f:cf:d2:09:72:b4:82:fb:
9d:be:26:02:1e:7d:30:48:da:05:c9:27:6c:a3:ac:0b:2b:b4:
14:20:92:59:4f:08:4c:58:78:0e:27:89:0c:cb:f2:62:95:7c:
4d:41:04:1b:38:1d:99:e0:d2:61:c8:72:05:11:84:c7:94:9c:
ae:24:0e:1a:50:de:37:c3:55:c8:ab:ff:52:04:40:2f:65:a9:
a6:fc:34:f2:42:61:d6:07:59:ce:15:23:59:df:76:cc:f7:10:
e6:a3:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:03 2025 by rpki-client