Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBBC5E860A111F0A1ECD1B5DAE4EC9C.roa
File: 4CBBC5E860A111F0A1ECD1B5DAE4EC9C.roa (raw, json)
Hash identifier: 9oPEfmberQDgz0DF4r7JyKsMUTfqA/v1ge22ZdDIBQ8=
Subject key identifier: F9:B8:C5:3E:3E:19:09:74:C7:72:F8:4E:8D:DB:54:6C:3B:70:C5:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBBC5E860A111F0A1ECD1B5DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:57:15 +0000
ROA not before: Mon 14 Jul 2025 10:57:10 +0000
ROA not after: Mon 25 Aug 2025 10:57:10 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101821 (0x18dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:57:10 2025 GMT
Not After : Aug 25 10:57:10 2025 GMT
Subject: CN=6874e28a-cd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:08:58:fd:6a:49:b4:a6:a4:f7:72:50:ac:
3e:e7:39:df:1d:88:60:87:b9:b4:bc:e4:47:86:46:
e7:6b:e6:61:3b:ae:31:a1:71:97:f3:43:ed:41:90:
0e:ff:27:5b:74:4c:47:ec:0b:34:84:3d:d3:3e:89:
cd:a7:05:fe:17:49:b6:3a:98:e5:45:82:fa:f2:f7:
14:30:7f:36:b8:0b:05:5a:3a:cd:55:fc:05:f5:75:
07:8b:28:0a:26:7e:d5:bd:63:4c:26:f4:bf:39:80:
e5:60:47:95:45:51:27:94:2e:5a:3b:3b:fe:12:e7:
e4:d8:49:33:e7:98:8e:af:16:75:c6:b2:8b:be:1b:
81:80:0b:2b:1a:6d:6d:00:99:00:fd:0a:85:a8:dc:
41:5b:03:42:62:99:8e:fb:83:3d:35:5f:ac:0e:58:
41:c3:7d:20:60:57:d8:c4:3b:29:82:92:7f:05:e7:
56:72:33:31:f4:ac:d5:68:cf:24:2d:f1:75:2a:0d:
13:01:fd:5b:c1:a2:18:22:a1:ef:52:34:60:67:81:
65:c0:b3:38:50:e9:c7:76:74:a8:07:c6:45:36:35:
da:47:7a:5c:b0:f2:06:c9:25:fd:09:c1:9c:95:14:
7a:dd:04:06:67:92:bd:03:c5:75:56:40:48:33:2a:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:C5:3E:3E:19:09:74:C7:72:F8:4E:8D:DB:54:6C:3B:70:C5:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBBC5E860A111F0A1ECD1B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:af:d2:89:78:17:e3:11:c6:41:59:da:89:e8:59:17:ee:d9:
92:f1:d6:3d:8e:21:b0:84:c6:7b:61:1f:ce:1d:2c:6c:c3:15:
c2:4c:b1:d1:be:0d:b7:50:0f:e2:b8:a5:d9:44:22:92:a4:e4:
d7:90:3b:06:df:cc:e7:1c:ae:df:01:76:3b:4c:50:6b:d2:dc:
ee:43:70:f2:c9:b5:1d:ec:3e:34:07:03:9a:f8:94:0c:3e:e4:
5a:53:eb:d4:4e:24:28:b9:c7:4c:01:75:a7:ca:7e:04:51:03:
75:79:70:aa:9d:89:60:65:0d:07:61:94:b8:da:a2:07:ce:60:
f8:9e:36:93:34:9b:33:71:fc:b6:29:39:f2:af:5b:ca:b4:b5:
73:97:44:53:bc:52:d4:5a:02:13:ab:e3:d7:55:8e:a0:4c:96:
f6:a6:5e:8d:2e:c3:7b:a7:17:3f:c5:87:60:47:21:63:58:61:
e7:98:2f:03:f3:11:e4:8c:98:43:40:7c:76:19:60:8a:cf:24:
e3:b2:a0:a7:2e:0c:1d:4d:1b:a4:c4:65:90:ca:5e:f4:b3:08:
7c:50:57:91:11:2a:05:a9:7a:48:e6:e1:9c:bf:1e:03:b1:c4:
16:9d:5a:6e:39:56:a0:27:20:5e:9e:42:8e:52:8f:7c:63:af:
23:27:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:36 2025 by rpki-client