Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5740C85BFF11F0988998BBDAE4EC9C.roa
File: 8E5740C85BFF11F0988998BBDAE4EC9C.roa (raw, json)
Hash identifier: b6AtEQEJ/K85ME2mYCA5TN7f3sPZJRXTLFhja9eOHOc=
Subject key identifier: 41:34:85:4F:DC:7D:B2:D5:EA:5E:A4:D2:9A:78:55:8D:E8:0F:03:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5740C85BFF11F0988998BBDAE4EC9C.roa
Signing time: Tue 08 Jul 2025 13:29:22 +0000
ROA not before: Tue 08 Jul 2025 13:29:16 +0000
ROA not after: Thu 08 Jan 2026 13:29:16 +0000
asID: 2914
IP address blocks: 154.214.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 01:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101525 (0x18c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 13:29:16 2025 GMT
Not After : Jan 8 13:29:16 2026 GMT
Subject: CN=686d1d31-7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:ad:60:18:99:1e:f4:da:1a:76:b0:71:7f:
82:b1:f5:a2:b0:33:16:18:c8:be:00:13:45:a5:66:
36:cb:62:85:02:bf:41:d2:8a:ad:60:d9:38:dd:7f:
21:c4:c6:22:f5:49:54:99:79:67:19:34:ed:fe:e4:
39:1f:2f:ce:93:2c:36:b4:81:ed:f9:76:90:13:0d:
89:62:d6:a6:ab:03:d0:c9:b9:5d:9c:d3:aa:3f:60:
90:fe:46:6e:1c:71:09:69:11:1f:d9:e1:45:14:a6:
a7:5a:81:fa:bf:3a:2c:f9:57:64:ec:a2:69:d4:4c:
74:38:7b:81:73:cc:b9:a4:86:c3:0c:f2:d1:f2:90:
76:85:80:66:91:cf:19:17:53:e0:24:5f:0c:a7:9a:
cc:7b:d7:e6:92:57:ab:9d:7c:a6:4d:4f:f4:d0:df:
88:0e:59:7b:3c:85:76:e1:d2:c2:11:24:74:4b:73:
93:7d:25:b4:bb:98:55:97:02:50:7f:1d:54:d2:e0:
43:74:c5:fe:46:c9:e9:52:a8:30:4f:05:9a:6e:b4:
e8:33:f8:55:4e:82:87:4c:dd:aa:e2:81:7e:59:ef:
05:e4:e8:b8:ed:f5:00:f0:c3:57:01:00:2d:64:dd:
f9:eb:b5:3c:49:4f:36:36:6e:00:7d:3e:5a:7a:8e:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:85:4F:DC:7D:B2:D5:EA:5E:A4:D2:9A:78:55:8D:E8:0F:03:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5740C85BFF11F0988998BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.219.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a6:2b:96:71:ee:66:8d:71:4e:89:93:b0:ea:8d:0f:ed:9a:
2b:db:e3:89:da:bd:7c:30:1f:7a:b2:4e:a5:5d:ed:25:c2:6e:
63:35:c5:0a:0f:b1:2a:7d:a0:da:ad:3f:6f:15:74:7e:53:cd:
1a:eb:20:de:62:d8:1e:d7:5a:44:cc:f9:18:cb:02:5b:de:b8:
f9:96:f2:54:16:e0:93:af:ef:f7:e3:75:96:81:c4:55:a2:ee:
ac:55:d1:27:95:f2:34:a6:bc:1d:b8:ce:fa:cb:2c:42:6f:65:
5e:cc:04:e9:67:19:a1:ec:19:45:b0:da:ef:8e:11:89:f2:28:
3a:3d:81:ed:d2:2b:3f:93:fc:23:88:fd:68:04:f1:cd:19:3a:
f2:ba:8d:23:53:30:63:de:b4:e7:08:27:1a:a9:55:7f:57:2d:
d5:1a:44:aa:ca:a6:22:c6:11:cc:3c:49:22:83:b5:96:b3:11:
64:38:00:29:0d:a9:ec:7d:86:a5:a9:77:dc:c3:16:24:44:a5:
d6:6d:25:29:f2:f9:5d:0e:08:30:bc:84:c7:9c:1e:db:45:62:
29:5c:ff:47:01:a8:e9:7f:f7:69:5d:9c:ea:77:15:df:4c:75:
5f:ce:61:b0:2b:f1:9d:74:78:bc:75:0a:54:58:42:6e:7a:51:
d0:f7:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:44:14 2025 by rpki-client