Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBE7B6C5D7211F0AE9672AEDAE4EC9C.roa
File: 2EBE7B6C5D7211F0AE9672AEDAE4EC9C.roa (raw, json)
Hash identifier: YHQG1A4ypeljqInu5D/BB6kpOJnTW/NfjAz3kV9t3IM=
Subject key identifier: 49:42:E0:1A:91:45:93:1B:4A:E4:F4:8A:A9:9C:71:E5:C2:8E:06:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBE7B6C5D7211F0AE9672AEDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:42:25 +0000
ROA not before: Thu 10 Jul 2025 09:42:19 +0000
ROA not after: Sat 16 Aug 2025 09:42:19 +0000
asID: 57043
IP address blocks: 154.84.166.0/24 maxlen: 24
154.84.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101686 (0x18d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:42:19 2025 GMT
Not After : Aug 16 09:42:19 2025 GMT
Subject: CN=686f8b01-2672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:72:ff:e3:57:2d:dd:93:d8:c9:da:94:0b:
ee:7b:be:9a:2d:c2:74:bc:af:6e:e3:76:c1:22:f3:
8b:cb:63:21:70:a3:8a:49:e3:ce:f9:ec:c0:98:bc:
7d:45:ea:5b:6c:55:6c:51:b4:2f:87:b2:be:2a:ab:
2d:2a:a1:4b:83:8b:7e:68:56:8f:a5:ee:99:e9:a8:
42:d9:ef:b9:de:35:de:b5:94:1a:3a:7a:de:bb:a7:
50:26:07:76:49:3c:90:f5:92:c4:62:13:f6:57:92:
ea:12:a2:17:75:c2:cb:2c:be:7c:9f:02:4d:57:9a:
bf:f8:21:e7:43:dd:71:af:71:ff:5a:49:92:a7:5e:
32:3d:1a:37:92:dd:3a:5e:8f:e3:16:cc:ce:72:00:
32:77:3f:03:a9:e6:28:df:cc:e7:55:0e:08:3e:7b:
94:f8:06:2d:07:7b:28:d5:93:d6:c3:a3:f5:24:cb:
6f:a9:73:37:74:f2:0f:0e:62:6a:18:a6:22:d1:a2:
b7:03:54:b7:36:5f:69:f0:96:2f:4d:01:ed:e6:57:
30:e6:f4:de:d3:d0:30:47:6f:b5:f4:20:44:79:27:
2f:7a:ad:66:ba:7c:de:86:a1:6f:ee:5a:c6:5c:2a:
08:a2:67:92:d6:7a:9f:9b:e5:30:d5:69:3c:f4:9d:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:E0:1A:91:45:93:1B:4A:E4:F4:8A:A9:9C:71:E5:C2:8E:06:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBE7B6C5D7211F0AE9672AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.166.0/24
154.84.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b6:10:a4:de:6a:84:7a:06:ba:34:97:f7:c2:20:b8:4d:2a:
99:c6:3e:3d:e0:e9:b3:c3:be:87:72:e3:17:2a:77:d6:76:a4:
3f:2c:44:b3:ce:6f:38:de:14:54:b2:0d:b0:f6:7b:a5:ed:4c:
6c:ab:74:23:04:d9:97:2b:de:06:5e:3d:08:53:d9:31:68:f2:
7a:06:e8:d5:15:d3:65:46:80:35:f5:4a:51:d1:d1:32:2e:c7:
1d:7c:40:ac:2c:21:47:74:67:36:96:bc:0a:b0:af:b4:76:76:
f0:05:55:1b:53:e6:9a:26:38:93:c0:e7:90:63:d3:1e:d6:a2:
30:f9:1e:6d:e0:ce:7f:55:89:14:8e:2e:0a:c2:13:3f:d1:a3:
e1:cc:fd:f4:9d:a1:f5:c0:ef:d9:d6:ac:17:9d:24:ea:a9:38:
6f:42:a4:cd:c8:ce:a5:c3:b2:fd:38:fb:4e:38:9e:68:9f:36:
82:4c:40:aa:7f:f8:bd:45:39:60:02:16:04:4e:7c:00:41:e0:
1c:e1:0a:07:df:3f:84:8f:21:ab:c1:71:18:84:41:e3:a7:10:
35:90:59:94:2a:82:d2:a2:94:ff:db:0b:ae:9d:41:3f:35:55:
1e:a9:e4:64:23:e6:4f:a7:fe:d9:63:ef:2e:c4:46:66:c3:1a:
f3:c1:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:40 2025 by rpki-client