Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883995EC617711F0A076BBA8DAE4EC9C.roa
File: 883995EC617711F0A076BBA8DAE4EC9C.roa (raw, json)
Hash identifier: htBgrufE3d4n/ZtoVSXrb9q7Tpv0iQdOAFFOD9EVgF4=
Subject key identifier: D4:3C:77:F1:2C:9A:DF:8F:24:8A:97:C6:57:FB:55:16:CE:4B:CC:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883995EC617711F0A076BBA8DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 12:30:47 +0000
ROA not before: Tue 15 Jul 2025 12:30:42 +0000
ROA not after: Thu 24 Jul 2025 12:30:42 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101848 (0x18dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 12:30:42 2025 GMT
Not After : Jul 24 12:30:42 2025 GMT
Subject: CN=687649f7-e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:a4:da:3c:d6:29:68:4d:6c:55:b3:66:52:
d2:e8:91:00:ed:32:fe:14:82:3e:c8:ab:02:85:5a:
3b:12:e3:82:3c:27:17:e7:78:14:ee:95:87:e6:aa:
74:b8:d1:cc:15:bf:5d:22:6d:41:1f:5a:dc:bd:38:
ac:a0:12:ad:12:2e:2a:bc:d6:af:2a:b3:4f:f5:b3:
8d:dc:49:f2:18:bd:5f:91:9b:df:b4:fc:22:91:ae:
65:5d:bc:a6:7d:4e:da:ec:81:91:0c:6f:95:ad:3e:
95:d1:6c:d5:c0:95:9a:2f:db:58:0f:57:31:19:ab:
b5:05:d3:d7:f0:6f:75:54:ed:36:0f:e4:d7:fd:a4:
a1:d9:03:9f:9b:a4:42:8f:c8:40:5f:07:68:6e:53:
c9:9a:3e:7b:fe:cc:6e:5b:c9:9c:1a:6a:13:38:b0:
37:0d:cb:4d:49:8f:96:51:e7:04:29:b3:7c:f7:d3:
5d:1a:f5:a1:78:94:04:c4:c3:b2:9a:cf:e1:44:f2:
9b:c2:66:95:75:39:da:aa:2f:2a:20:ed:3d:c8:75:
eb:6a:d8:b3:80:7c:91:d1:32:88:d5:b7:3b:8f:1a:
55:3d:21:10:15:21:c6:8f:60:19:c7:47:5d:5a:f5:
25:94:f7:0b:5c:e9:e4:31:05:aa:06:48:43:d2:99:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:77:F1:2C:9A:DF:8F:24:8A:97:C6:57:FB:55:16:CE:4B:CC:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883995EC617711F0A076BBA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:05:a8:94:49:b6:ba:ce:51:c5:37:e9:02:f2:f8:db:5d:05:
55:4d:56:48:5b:6f:52:d0:94:11:fa:8b:87:76:9c:e3:71:be:
0d:93:d5:d6:8e:b5:56:8c:e8:49:52:9c:c4:1c:80:f4:56:ed:
bd:20:05:a5:fa:f1:f0:2c:a8:e6:ab:1f:6f:7c:3d:a8:6f:a8:
26:a4:27:1e:51:c0:fb:cd:a5:55:c1:88:fb:aa:c4:ac:77:b7:
29:7e:a2:bd:c5:98:f2:b6:e9:2c:d1:29:83:9a:fb:e6:a5:c8:
f1:99:5c:ce:69:93:3f:a1:56:97:97:34:de:39:05:87:fc:91:
53:8f:de:39:f9:72:90:52:ea:fb:99:9e:2a:52:79:ec:33:1e:
df:ae:1e:4c:01:3c:ce:4f:14:f7:6b:c9:9f:5e:e7:f1:32:ff:
c2:fc:a8:5b:3f:f3:d5:6a:9c:85:37:ec:02:4a:47:93:3c:61:
8d:ba:79:4c:c6:f0:e4:e5:3f:67:43:1e:1d:cd:b5:d5:97:55:
89:51:79:24:be:77:d6:bc:1c:c8:9c:9a:c9:dc:07:f6:2a:68:
f3:8d:01:f8:c5:97:28:b8:41:e8:0e:bf:4f:77:3c:f8:20:65:
0c:b1:5d:18:c5:1a:f6:62:74:f3:8e:34:f6:e7:ea:97:91:7d:
1c:7b:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:01 2025 by rpki-client