Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A9C2BA5D7511F08BD5B4C3DAE4EC9C.roa
File: 55A9C2BA5D7511F08BD5B4C3DAE4EC9C.roa (raw, json)
Hash identifier: dkum6PJ0FB9G7fkuMVzA4hDtkExwAzIixmUSq72M9qU=
Subject key identifier: 09:41:21:1E:17:B3:48:76:EA:AD:FE:94:BE:89:B6:FD:B1:EB:47:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A9C2BA5D7511F08BD5B4C3DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:04:58 +0000
ROA not before: Thu 10 Jul 2025 10:04:53 +0000
ROA not after: Sat 16 Aug 2025 10:04:53 +0000
asID: 29066
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101692 (0x18d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 10:04:53 2025 GMT
Not After : Aug 16 10:04:53 2025 GMT
Subject: CN=686f904a-dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:1c:49:60:42:8f:69:bb:61:01:3c:fc:fd:
72:74:28:b8:d7:b6:40:70:f1:0f:af:5f:fb:55:6d:
da:6d:92:29:21:e4:2a:26:dd:32:7a:6d:9d:e8:78:
35:df:0c:1a:1a:27:c1:58:78:c6:4e:19:2b:55:4c:
21:b1:0a:3a:97:e5:1c:20:66:4f:cd:d3:11:ef:ad:
16:57:b6:77:b5:e9:d1:70:a3:07:19:af:5b:2b:0b:
01:89:4c:b5:ab:81:e8:53:37:a0:28:d7:ee:01:9c:
95:8e:f3:4f:18:d8:ee:a8:98:26:c8:c8:bd:50:c7:
9b:32:dd:d4:25:4e:d3:ee:e2:9b:d9:a2:a6:27:1c:
91:cd:75:e2:4c:01:32:4e:9f:e4:db:34:be:74:0d:
24:87:e6:1d:07:f1:63:1d:f8:26:c3:bd:9b:e5:9f:
53:75:a6:d7:2b:a4:8b:29:07:f0:c9:15:d3:47:82:
13:f7:c4:a6:c0:74:7e:7f:d3:42:71:2f:1c:d8:97:
e8:71:d3:e1:36:95:da:2a:c6:0c:dc:4e:7b:ca:43:
37:ca:7a:46:8a:fc:c0:cc:3a:a7:9d:1c:70:39:2c:
ee:10:72:f5:41:df:5c:e0:0a:e8:70:1a:a4:20:71:
77:31:90:02:e7:e3:22:0a:df:a8:fb:4f:de:9e:5d:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:21:1E:17:B3:48:76:EA:AD:FE:94:BE:89:B6:FD:B1:EB:47:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A9C2BA5D7511F08BD5B4C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:50:f9:53:2f:a9:b2:1b:46:70:93:ab:4a:bb:09:72:f5:1b:
d9:f8:85:74:4b:f3:27:5b:71:f7:6c:d6:94:11:e4:20:68:75:
73:b9:c8:da:c9:6c:f2:6d:f1:fc:73:34:16:d6:f8:74:0b:38:
b1:d3:c8:ff:a6:e5:69:c2:e5:a7:50:d3:3c:47:be:c5:86:e6:
dd:43:f9:02:2d:24:9f:33:5b:07:2d:e2:cb:ed:75:e7:31:d3:
4f:8b:c9:89:27:e8:ca:fe:59:97:db:b8:83:e3:70:48:90:60:
0e:e8:e7:32:79:72:84:41:40:2f:cc:53:ac:16:42:90:53:e8:
fd:9d:e5:a4:9a:ed:a2:4e:7c:1e:45:30:36:71:d0:01:77:c6:
c7:fd:06:26:f7:d9:7c:cc:24:43:cc:44:d7:d1:fd:48:66:e7:
dd:b2:c9:5a:70:11:69:db:8c:31:2c:db:8c:79:1a:95:bb:68:
7c:9c:c0:78:fa:96:81:ef:81:fa:de:e1:e8:c6:06:50:f5:f6:
b8:bb:4c:89:aa:b0:f2:15:c4:a2:2e:1f:e0:8d:39:4b:88:3a:
7a:2d:ea:39:97:29:92:70:c6:1b:51:2c:d4:df:25:da:7c:68:
30:0f:4e:16:d1:34:6b:91:f0:34:bb:99:4c:c7:47:ec:d9:be:
86:67:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:41 2025 by rpki-client