Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA579565E4911F0B167CDE8DAE4EC9C.roa
File: 6EA579565E4911F0B167CDE8DAE4EC9C.roa (raw, json)
Hash identifier: EpI42QYxSF0EPWyc02h7YnEomOCcAaXEcwAHL/ji9FY=
Subject key identifier: AD:05:E4:EE:48:53:4F:81:41:06:27:68:2B:F2:E4:5E:DE:D2:D5:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA579565E4911F0B167CDE8DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 11:23:13 +0000
ROA not before: Fri 11 Jul 2025 11:23:08 +0000
ROA not after: Sat 16 Aug 2025 11:23:08 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.82.3.0/24 maxlen: 24
154.82.4.0/24 maxlen: 24
154.82.5.0/24 maxlen: 24
154.82.6.0/24 maxlen: 24
154.82.7.0/24 maxlen: 24
154.82.8.0/24 maxlen: 24
154.82.9.0/24 maxlen: 24
154.82.10.0/24 maxlen: 24
154.94.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101730 (0x18d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 11:23:08 2025 GMT
Not After : Aug 16 11:23:08 2025 GMT
Subject: CN=6870f421-3ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:ff:59:29:d1:b3:c6:95:78:13:36:60:05:
bd:e8:ba:5e:5d:93:31:ec:8d:b7:db:dc:76:1e:7e:
a4:ac:83:9b:d5:df:40:1e:91:70:e0:02:d7:6b:7d:
76:f4:26:74:ef:e7:77:ae:1a:08:dc:1a:f9:09:01:
4a:15:71:e3:95:6a:5d:e7:df:52:58:37:f0:c6:2a:
e4:57:ea:81:92:14:f1:42:9d:85:7a:3c:6e:af:8b:
dc:47:51:7f:d5:1b:b1:ec:23:fb:fa:89:e7:fc:80:
b1:93:9d:9e:cd:53:15:60:b7:ea:f1:8b:9a:3d:6d:
2b:6c:19:03:ba:cd:41:39:a7:05:46:08:96:ae:d2:
ef:a8:ea:5c:3d:cb:be:0b:75:d2:b8:32:e3:e8:e2:
41:5f:07:d4:de:97:40:b3:8b:73:60:3f:69:1a:66:
20:0d:30:97:98:77:54:b9:8c:c9:38:05:18:34:2e:
30:06:9c:54:8a:33:72:9a:d3:a6:b0:d5:39:5e:3f:
49:36:53:8d:83:86:8b:ef:61:86:3d:3c:df:21:f4:
97:d1:01:dc:09:78:7e:77:77:8a:2b:29:33:e6:02:
78:b1:79:48:91:62:41:c7:ca:a5:5e:32:8f:34:56:
27:b0:d3:8e:73:09:46:a7:bc:2a:48:12:04:f3:c6:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:E4:EE:48:53:4F:81:41:06:27:68:2B:F2:E4:5E:DE:D2:D5:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA579565E4911F0B167CDE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0-154.82.10.255
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
35:cf:fe:a0:99:0d:5a:78:d6:36:17:12:b7:b2:4f:84:48:26:
a2:72:9b:c4:19:9c:e5:e1:60:86:10:3f:a2:43:14:d7:0b:7a:
46:8f:45:82:38:45:2a:d2:69:50:6f:98:da:78:97:77:bd:38:
42:d3:b0:42:f4:d5:07:bd:65:85:fd:f6:e4:76:77:44:7a:2e:
5c:d3:9c:63:cf:34:41:4c:7d:52:3b:11:77:70:1f:50:ea:51:
32:7b:37:95:43:0d:70:5d:74:be:ee:1f:47:2e:36:d5:1d:3a:
cd:b7:72:69:f9:cf:1a:6f:57:df:c8:e2:4f:b9:81:cd:52:5a:
27:79:eb:7b:09:81:62:f8:ca:2d:db:7c:5f:8f:e5:76:fc:58:
e3:88:38:f7:0c:76:98:78:5e:ae:54:6a:69:e3:91:a6:9c:84:
ab:78:39:19:c9:98:01:2c:b5:23:91:3a:b2:b7:d5:c5:e0:89:
19:cd:34:a9:7a:7a:87:47:76:e1:43:3d:e1:e9:bd:43:2c:b9:
28:bf:1d:7d:70:dc:0d:47:b9:2a:64:fe:fa:ad:7f:ad:9f:e9:
23:27:bb:6a:d1:f0:67:46:ce:b1:a4:f9:fb:76:43:2b:08:5a:
6f:32:8b:9d:0f:30:ac:23:e5:9c:00:7d:99:e0:58:a8:c4:93:
fe:c2:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:38:17 2025 by rpki-client