Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962066F25A8011F0BB798DF4DAE4EC9C.roa
File: 962066F25A8011F0BB798DF4DAE4EC9C.roa (raw, json)
Hash identifier: ZkA/pVNFmlohGgKrmBeHYFUxo98qFmZNVg7X0FFJoqY=
Subject key identifier: 55:E7:E4:A1:E1:2E:CF:F2:69:AB:B7:31:FF:00:09:89:F9:04:7E:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962066F25A8011F0BB798DF4DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:47:57 +0000
ROA not before: Sun 06 Jul 2025 15:47:53 +0000
ROA not after: Wed 06 Aug 2025 15:47:53 +0000
asID: 20326
IP address blocks: 154.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101262 (0x18b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 15:47:53 2025 GMT
Not After : Aug 6 15:47:53 2025 GMT
Subject: CN=686a9aad-bdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:18:99:fd:1e:c7:e5:e4:8b:c2:49:71:15:
0f:e3:10:ee:22:21:cf:fe:ca:bb:a9:29:16:39:6c:
c1:17:9d:dc:e3:8a:31:a5:5f:dc:98:84:74:1d:32:
64:1b:5a:c7:1d:7a:b8:bf:fd:65:1d:bb:df:2a:79:
82:d6:2a:68:8c:fa:d6:14:a8:e5:40:3e:f7:fd:17:
f2:3d:1e:bf:e8:3f:93:9c:8f:02:8c:09:ad:fa:f3:
b7:26:4e:16:8d:cb:91:8a:99:b2:c6:5c:47:44:ef:
19:75:01:54:d5:bb:d8:83:95:a6:2f:3f:9e:03:b4:
95:2f:40:ab:6d:e7:90:f4:85:e8:51:3e:1d:77:b6:
28:64:a6:b2:04:0e:ce:7b:fc:b6:37:a6:a4:0d:12:
4a:51:65:1f:7d:83:f2:0d:58:aa:3c:96:fc:b3:1d:
5e:37:f1:b4:be:9c:ac:92:7d:53:d1:78:e8:03:44:
57:71:22:73:f3:68:fa:81:c9:32:cc:16:25:9b:2a:
bf:16:83:34:14:b0:16:63:06:47:90:79:da:af:48:
b2:67:31:7a:25:db:89:77:b9:0e:8e:56:7f:a8:47:
1a:c7:49:e5:52:47:5f:00:92:48:c6:1f:dc:f0:59:
7a:e8:47:19:3a:97:c6:72:a3:c6:26:3e:bf:9c:53:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:E4:A1:E1:2E:CF:F2:69:AB:B7:31:FF:00:09:89:F9:04:7E:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962066F25A8011F0BB798DF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
35:7a:33:84:6c:ed:08:f2:35:0c:08:c4:aa:87:ca:94:0a:13:
13:1a:9b:8d:61:cb:c0:9e:45:70:43:28:a2:2a:0c:f1:19:65:
37:51:a2:96:01:fe:31:b9:af:fb:2b:51:f5:f1:44:ef:6b:bb:
51:99:16:db:64:53:66:67:02:73:0c:27:0d:6b:8c:f7:42:15:
9d:9a:da:50:ff:93:f4:60:a6:6a:c6:c6:d8:13:cd:66:df:d2:
4b:51:3f:81:cd:1c:0c:73:29:5a:10:4a:3a:cd:78:d2:4a:dc:
b2:e4:8d:85:33:4a:58:09:0b:2b:b0:83:72:8e:88:80:9a:dd:
87:ab:04:b1:a2:b1:5e:d8:38:b8:02:32:4a:e7:48:fe:0e:82:
9d:ee:f4:a7:a3:55:99:95:c8:ab:84:46:2e:71:0f:fc:e4:12:
b0:c3:33:b6:47:3a:22:bc:98:05:38:36:d2:8b:ae:30:10:51:
d4:f4:19:b4:99:f7:5f:15:c4:5c:14:f5:6e:a9:a1:f2:91:c5:
ef:b2:ea:2a:30:10:49:d5:44:04:53:c8:00:6c:27:df:6e:8e:
7f:0a:1f:7b:42:4b:ff:e6:17:7c:24:db:9f:90:78:44:76:9f:
a8:10:9f:01:cc:36:2d:ba:53:9d:d4:3e:4c:81:ae:7e:69:6e:
c8:1f:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client