Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5053C5CE609D11F0AF52199FDAE4EC9C.roa
File: 5053C5CE609D11F0AF52199FDAE4EC9C.roa (raw, json)
Hash identifier: rDxiT9OQ3kJT+qR2MgZBxgFscZzcjkPZqstrxzz9qBk=
Subject key identifier: 16:06:CA:5A:00:53:00:60:34:20:71:C6:D0:6E:68:B8:43:24:B8:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5053C5CE609D11F0AF52199FDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:28:43 +0000
ROA not before: Mon 14 Jul 2025 10:28:38 +0000
ROA not after: Thu 21 Aug 2025 10:28:38 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101815 (0x18db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:28:38 2025 GMT
Not After : Aug 21 10:28:38 2025 GMT
Subject: CN=6874dbda-3907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:a5:05:d4:a5:3c:36:ec:ee:eb:2b:4c:c6:
7a:8b:ab:55:44:3c:67:ff:d2:ac:69:9c:42:53:40:
cc:f1:03:af:da:db:d0:0a:f6:ff:dd:c3:94:77:12:
d4:6d:d2:f8:a2:87:c8:f7:ef:21:e7:4d:61:93:2a:
f9:75:e3:e1:39:b7:f9:89:14:55:9a:ce:bf:11:00:
81:fb:c8:e5:5e:c3:82:d5:8b:8d:04:43:5d:af:34:
78:9a:39:6e:22:19:05:ef:1a:89:e7:67:39:1d:42:
cf:83:5a:f8:11:ea:90:2f:a6:c9:a8:2b:d7:20:b1:
c7:cb:4e:21:12:ac:a3:94:55:f8:7c:7a:3a:1c:be:
76:fd:27:47:4f:b7:5f:9b:63:2f:fc:79:1a:24:7f:
e7:3b:05:21:96:cf:46:2a:d4:fe:ab:ed:00:7d:5e:
05:75:c6:4a:80:80:4c:19:0d:64:e7:a9:3e:d3:e5:
d9:73:b8:27:9c:f4:0b:60:3f:aa:e6:ef:f4:a7:d4:
39:d6:f8:7e:3f:af:8a:cc:ec:ae:f4:78:df:21:4c:
c0:99:90:ab:1b:eb:0b:b9:e0:ba:6a:c6:1c:ab:03:
73:3c:73:44:fb:ac:db:ef:61:85:94:4c:ca:9d:af:
60:39:cd:17:f6:78:a9:22:31:dd:08:5f:18:4b:70:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:06:CA:5A:00:53:00:60:34:20:71:C6:D0:6E:68:B8:43:24:B8:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5053C5CE609D11F0AF52199FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
29:42:12:cd:92:ee:d4:58:d2:56:2c:02:e3:05:d2:6d:40:82:
54:b9:51:38:af:bf:10:7f:7f:b3:ba:30:0b:52:17:8c:01:34:
af:86:09:04:98:0d:69:e7:d3:b9:ad:66:48:b3:ec:a9:f8:c1:
7f:2d:11:1e:db:91:08:19:56:8f:08:4a:49:fb:16:92:c1:41:
b4:ad:54:29:a8:17:a9:91:80:34:59:ab:88:74:32:7e:f3:48:
60:76:e7:03:fc:35:21:18:57:8d:8e:77:93:de:9b:70:b3:01:
9d:7f:fe:81:91:56:e4:e0:79:28:26:11:4d:e0:ec:af:fe:71:
ed:e4:d4:1d:1a:b6:31:77:02:28:a6:8b:9c:60:b7:85:17:2b:
41:ef:3c:f0:e2:2b:25:d7:41:c6:27:a8:38:03:5b:a1:3a:2c:
e8:7a:6b:0a:7a:1d:12:e8:a8:f7:73:7b:4f:a3:4c:13:47:de:
3f:fe:b2:d4:18:89:3c:91:1b:f7:d8:80:c0:be:f3:21:cd:80:
e5:32:13:09:82:0b:da:12:aa:61:d4:52:c1:c4:52:7b:0b:63:
85:38:04:3e:9e:dc:46:1d:54:09:81:e1:0b:51:ec:59:97:c2:
98:d7:26:15:ec:b9:7f:76:18:c4:67:01:e1:f1:24:3c:df:48:
9f:cf:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:56 2025 by rpki-client