Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E51F1A607F11F093B801DDDAE4EC9C.roa
File: 55E51F1A607F11F093B801DDDAE4EC9C.roa (raw, json)
Hash identifier: D2yIolD3joq01Y4bCpH2z6ayt8UudERFhs1uF4OCAH0=
Subject key identifier: 35:8C:35:ED:12:AB:21:F8:75:47:1B:4B:1C:D8:B7:F8:F7:52:97:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E51F1A607F11F093B801DDDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 06:54:07 +0000
ROA not before: Mon 14 Jul 2025 06:54:02 +0000
ROA not after: Thu 13 Aug 2026 06:54:02 +0000
asID: 984
IP address blocks: 154.83.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101777 (0x18d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 06:54:02 2025 GMT
Not After : Aug 13 06:54:02 2026 GMT
Subject: CN=6874a98f-fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:ad:0a:61:2c:e9:91:43:2b:5d:e6:f0:95:
45:24:5c:80:6b:11:ee:6d:ff:6e:09:dc:84:55:22:
39:f0:f3:28:a1:bc:77:35:ed:a6:66:df:2d:e0:9e:
56:06:37:e3:56:ec:48:d2:4c:53:e6:9f:2e:d0:40:
bc:b0:84:6f:94:c7:df:85:18:87:64:c5:7c:22:ac:
0b:fd:e8:81:eb:bd:43:4c:53:2a:ef:4d:d0:46:9d:
bb:7e:0c:33:7a:65:86:de:6f:ea:0f:cb:16:b4:f4:
38:84:d4:72:60:52:24:1f:b0:64:11:7e:99:77:96:
75:4d:9b:d8:12:3b:99:2a:35:f3:17:c8:60:77:a5:
e9:58:71:7d:f9:46:48:d4:c5:3e:ed:4d:54:6d:8a:
95:7c:55:99:5f:ea:5f:7d:e9:38:b2:d7:3a:8d:e9:
d5:cb:19:73:67:f3:a1:08:f4:e6:8e:71:93:b6:8e:
c1:b8:3b:94:ba:93:1c:07:8e:9f:eb:a3:17:59:9d:
17:1a:42:68:b5:24:9d:7d:22:02:f3:2f:6e:32:ad:
4c:72:12:d5:6e:21:1b:33:9c:0e:e3:8e:91:c4:af:
39:41:13:a2:73:59:4f:d1:48:9e:54:70:6e:f4:30:
34:9f:64:fb:79:5f:18:c2:66:f3:41:f6:22:1c:6c:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:35:ED:12:AB:21:F8:75:47:1B:4B:1C:D8:B7:F8:F7:52:97:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E51F1A607F11F093B801DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:be:a1:b6:e0:63:9d:8e:91:a7:f2:e8:de:79:f1:e4:1e:c9:
93:df:d2:43:71:24:54:62:f2:0f:db:6f:df:6d:22:e6:1f:5b:
cf:02:f1:1c:55:a5:61:29:ba:a1:d4:17:41:46:15:e9:1a:2b:
03:47:4f:5a:86:58:a2:31:ae:ef:9b:ea:cc:dc:ba:8e:d0:a2:
b2:6d:54:77:ca:aa:88:61:8b:7f:24:9d:fa:b3:b8:2e:c5:7c:
e7:2f:68:84:cf:58:d8:56:96:ba:80:6d:18:de:f8:62:fb:50:
33:28:71:32:25:96:f9:b2:3b:1e:00:46:cc:31:c9:3d:41:28:
2f:9f:4a:b5:b3:ea:ad:68:62:2d:93:66:42:40:ff:8b:59:2b:
3e:b8:8b:82:1e:22:2b:a1:1a:55:a7:fd:3d:2a:08:45:43:01:
39:40:7e:25:78:d2:d6:a4:6d:fd:5b:e7:bd:54:ee:b4:80:f9:
bd:f1:34:8d:5f:37:c5:8b:9c:7d:da:b8:8d:28:c7:f9:fd:a3:
53:83:0c:53:ee:a3:94:fb:66:b0:52:e0:0f:ff:95:99:bc:1a:
0f:8f:7d:65:c4:da:b7:74:8d:d2:91:0f:5c:12:f6:d5:53:74:
ff:4e:8d:dd:6f:57:6c:b9:4d:b8:74:2f:e7:f6:74:84:5f:70:
81:3f:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:23 2025 by rpki-client