Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F55D7F658E811F088E09699DAE4EC9C.roa
File: 8F55D7F658E811F088E09699DAE4EC9C.roa (raw, json)
Hash identifier: m2IJiHjT3MzN7ci4di9yPTyA+FAuOJWOTBkT6wpqboM=
Subject key identifier: E4:03:89:B0:1D:E3:58:D2:CE:C0:37:44:15:76:FB:2D:C9:18:3A:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F55D7F658E811F088E09699DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 15:07:11 +0000
ROA not before: Fri 04 Jul 2025 15:07:05 +0000
ROA not after: Sun 24 Aug 2025 15:07:05 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100972 (0x18a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 15:07:05 2025 GMT
Not After : Aug 24 15:07:05 2025 GMT
Subject: CN=6867ee1f-4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:38:df:2a:e5:36:51:01:cf:91:96:77:5a:
a9:75:f1:67:70:ce:eb:e0:7c:6c:56:93:79:5a:ec:
3a:db:ef:dd:5c:29:6a:97:d8:45:ce:f8:32:1f:cd:
72:69:5f:0b:9f:d1:40:55:40:82:80:34:e9:b0:cf:
d4:32:25:af:f8:06:1a:d3:7f:7e:f5:d0:8e:f9:f5:
8d:6b:1f:3f:46:3e:ee:ec:1b:89:3d:fa:90:4a:5e:
3d:4f:87:1d:7b:37:6f:1a:a5:b4:bc:56:ae:02:fd:
e4:ff:7d:f1:2e:82:f8:56:cf:e1:6d:3e:3d:c9:51:
36:04:c5:65:c1:73:fd:4b:1e:50:4a:a2:11:3f:41:
0e:2d:9c:e7:db:9e:3d:71:0a:e1:d4:71:a5:63:77:
8f:48:7f:b4:41:8b:d1:02:27:6f:d8:64:aa:54:50:
12:75:dd:6f:4b:57:37:5c:22:4d:1e:90:3d:7d:f1:
a3:dd:10:a8:b7:2c:8e:2b:43:4a:2d:4f:35:01:b3:
0f:e8:22:b4:d9:b0:28:86:c5:90:0f:0c:0f:66:6f:
e0:75:bc:58:54:d4:97:ea:4e:4c:af:96:e1:ad:fa:
c2:82:80:13:46:b2:42:c0:67:e6:00:ad:a1:50:e7:
ee:e2:f7:66:94:7a:48:4a:9f:81:5c:56:c1:0d:1d:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:89:B0:1D:E3:58:D2:CE:C0:37:44:15:76:FB:2D:C9:18:3A:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F55D7F658E811F088E09699DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8c:3f:55:e2:46:ef:1d:5e:c0:01:8e:88:f0:c6:c1:a2:ef:
92:95:14:64:00:c0:4e:3f:1b:a5:7f:a2:53:13:e8:82:23:5f:
e5:89:f0:52:ca:1d:1a:bb:80:80:9e:83:77:bc:3e:92:34:c2:
88:cb:57:04:21:ba:81:59:2b:ee:5d:66:48:66:9b:43:4c:f9:
3f:b8:a4:a1:51:58:cd:f6:3f:25:35:12:ec:35:78:89:b7:61:
96:5a:98:a5:05:0e:15:54:24:ca:a1:d7:c1:b7:39:d7:08:40:
2b:de:7c:83:25:4d:1c:2d:b0:4d:3a:7b:29:ac:64:c3:24:cb:
18:3b:45:d4:d2:d1:c8:af:47:cd:69:7c:57:4d:be:19:2b:e3:
05:da:a1:d9:0a:3a:9c:0b:e5:89:19:38:72:ba:7e:fe:28:b4:
88:30:d5:a3:4e:ed:73:f0:92:8a:cf:f2:90:c2:23:e0:bc:dd:
45:4f:2a:f6:10:9b:ff:83:f3:73:a2:63:0b:78:ae:16:4e:19:
0a:98:21:9d:4e:1b:14:cb:bb:04:1d:86:c2:b8:52:5e:51:98:
ed:ac:ee:9c:1e:63:a3:91:0e:a3:a9:95:df:fb:07:42:0e:a3:
e7:36:25:97:1a:56:ed:ec:22:34:36:f9:34:45:a5:ea:d2:d2:
d5:d1:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:13 2025 by rpki-client