Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B1FDC59AC11F083B73C96DAE4EC9C.roa
File: 6E1B1FDC59AC11F083B73C96DAE4EC9C.roa (raw, json)
Hash identifier: m2oMStsb+0zI8K1x8BD8uwNFow9qCA5UAaVJG1vlCcA=
Subject key identifier: E8:9A:A7:ED:2B:BD:E1:C8:5E:47:5C:70:2B:CA:6D:32:D5:AB:25:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B1FDC59AC11F083B73C96DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:29:17 +0000
ROA not before: Sat 05 Jul 2025 14:29:12 +0000
ROA not after: Sun 24 Aug 2025 14:29:12 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101128 (0x18b08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:29:12 2025 GMT
Not After : Aug 24 14:29:12 2025 GMT
Subject: CN=686936bd-6c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:86:d0:cd:e8:65:95:e2:ca:41:f1:4f:07:
7c:9b:e4:eb:59:00:f6:27:28:61:7e:e1:b6:db:7d:
6a:41:40:35:7d:3c:6f:79:24:5c:f6:86:5a:1c:1d:
50:b7:f1:38:b7:4d:18:9b:5d:a3:98:2e:8c:fb:8f:
c1:14:77:c9:30:7a:41:9e:1c:68:79:e6:87:c5:b3:
c9:1f:fd:f7:25:e4:d5:a2:c1:20:bb:45:25:a6:7d:
82:1a:1c:96:80:2c:bd:78:21:ee:a8:3f:28:a6:f2:
6a:91:b4:ee:64:03:70:b7:83:93:48:77:35:14:a3:
15:ed:01:83:d8:f8:67:13:01:99:e6:5b:15:27:b3:
d0:e4:49:31:32:12:09:87:2e:53:23:ac:34:c8:10:
02:42:8a:cc:4c:4a:4a:16:37:df:d9:ef:98:8d:19:
41:df:98:48:6d:77:34:bb:ce:5c:a6:6f:09:ba:47:
23:54:50:52:79:7c:31:49:d8:1a:bc:93:0e:d5:f3:
33:fe:6a:07:96:0b:9d:db:11:6e:81:d2:41:ea:b0:
b0:c4:a6:0c:dd:e7:bb:6f:55:ac:3c:5f:4e:61:5c:
3b:ab:f8:7c:e9:d7:7c:15:f5:a9:5f:41:92:78:ed:
d0:89:05:40:fa:94:6f:2e:99:85:90:00:86:80:75:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:A7:ED:2B:BD:E1:C8:5E:47:5C:70:2B:CA:6D:32:D5:AB:25:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B1FDC59AC11F083B73C96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
79:e6:a3:72:e0:a8:c5:b8:93:3f:4a:a5:49:b9:58:f1:89:26:
dd:1f:1a:a5:46:b4:f3:06:af:11:9d:11:50:46:59:10:dd:9b:
f4:70:c2:96:9d:fa:8e:5d:6d:f2:c4:0b:c6:6f:9a:e3:ef:f4:
13:d7:50:ad:44:be:98:82:a5:39:96:90:97:19:16:5f:d8:b9:
47:41:cf:8c:c4:b7:62:db:dc:ed:01:af:36:9b:4e:21:91:52:
95:86:52:39:7f:e5:74:33:b9:e8:c3:30:5b:09:e7:9a:b8:b6:
29:13:ed:2c:cf:b2:be:6a:38:c1:94:c7:33:43:d1:0c:b2:01:
60:ea:fb:d4:ce:92:38:41:de:93:25:9b:5c:f6:7f:cb:70:73:
05:8c:21:07:67:99:fd:c7:0a:64:5d:ad:7e:fa:bb:95:26:06:
70:28:f5:7a:97:d2:23:b6:5a:88:61:b3:6b:2d:94:40:49:e1:
59:cc:80:52:69:8b:ca:3c:82:fa:22:75:49:52:a0:38:cb:21:
ee:14:15:28:f8:db:f5:80:d1:97:fc:44:bd:b0:cb:bc:c1:93:
51:ee:78:34:ee:8f:24:06:28:c3:a3:b1:57:f2:1f:58:51:4c:
52:f8:69:69:c0:7d:bd:24:e0:c9:2a:31:de:06:68:6b:60:d1:
c1:d7:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:47 2025 by rpki-client