Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A083A7A05B5A11F0BEBF3786DAE4EC9C.roa
File: A083A7A05B5A11F0BEBF3786DAE4EC9C.roa (raw, json)
Hash identifier: TjSo+S2Upf+rGb9zhafsClns+3mnI3Lkw2rfgKi0M4U=
Subject key identifier: 0B:42:27:3E:01:61:44:BD:51:04:93:7F:0C:84:69:13:B9:6D:BD:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A083A7A05B5A11F0BEBF3786DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 17:48:45 +0000
ROA not before: Mon 07 Jul 2025 17:48:40 +0000
ROA not after: Sun 24 Aug 2025 17:48:40 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101436 (0x18c3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 17:48:40 2025 GMT
Not After : Aug 24 17:48:40 2025 GMT
Subject: CN=686c087d-5d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:b4:d3:9d:46:3b:35:5d:7e:39:27:87:98:
1f:71:07:3e:c5:c4:fd:d9:43:2b:3b:9a:84:d1:3b:
25:53:c4:6c:98:34:92:8a:7c:f8:19:2f:19:4d:7f:
9c:51:55:b1:03:c5:91:5f:91:9e:f8:9f:aa:70:c8:
3d:11:00:2a:e8:50:6b:8f:64:f6:21:26:3b:3e:91:
41:b7:79:d3:71:cc:84:95:a7:3d:2d:18:69:9d:99:
e7:00:ab:c5:5c:d6:f9:03:ac:b9:58:59:06:63:b2:
9e:af:80:ec:1b:5a:36:83:cf:71:cf:8b:fa:b0:24:
87:01:69:c3:2f:45:b7:e7:b9:15:e8:b5:90:da:d8:
c2:b9:d0:a7:a2:31:e5:6f:4b:ac:6c:e4:20:9e:50:
7e:0a:55:12:bd:32:60:ad:9d:b9:27:91:04:58:8e:
9f:0d:50:b0:70:b4:b7:41:ea:d2:5a:3e:55:13:23:
89:d0:d3:2f:b4:ef:10:63:63:7f:44:83:12:c4:7c:
04:af:0c:57:e1:6a:ab:83:3c:fc:7d:39:14:b0:b2:
c3:5c:62:7a:4d:77:ac:b7:fd:d3:de:fa:e4:f6:5c:
50:74:f1:0e:8a:87:b9:7f:8b:2a:48:de:de:2e:d2:
40:00:7a:db:65:43:7a:dd:9a:5e:99:43:10:a7:2a:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:27:3E:01:61:44:BD:51:04:93:7F:0C:84:69:13:B9:6D:BD:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A083A7A05B5A11F0BEBF3786DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b6:86:d3:27:a4:64:50:a7:92:87:04:06:98:39:7b:46:94:
02:da:a0:5a:50:e4:a8:cf:6c:39:8f:3c:b7:32:e6:4c:42:6a:
a5:0e:8a:f4:1b:8d:5a:3d:9f:43:3d:d0:47:b0:9d:c0:52:f2:
0b:04:d8:8d:72:ec:4e:1c:4c:7b:98:14:b0:60:b3:ae:b8:3c:
cc:d2:de:d7:9f:14:fc:be:bd:67:0e:9b:8c:c6:0c:9a:fa:33:
75:38:ef:8c:4c:68:53:01:d3:3c:83:1e:f8:2d:19:14:80:31:
30:df:d0:8a:60:11:01:d8:50:00:a5:dd:41:9d:cc:a7:c2:b6:
a1:69:44:b1:19:c0:97:09:15:d0:ac:9a:02:10:19:1e:33:8d:
8c:e5:3d:23:e1:dd:2a:e5:e9:43:8f:9a:1a:70:77:7a:79:99:
7a:87:bf:73:6a:44:b2:3e:d5:a9:43:35:c0:35:d2:9e:18:74:
fb:a2:be:8a:6e:9e:ed:fe:55:77:73:dc:d9:bd:16:6a:75:5d:
bb:c3:fb:8c:ff:05:37:e9:89:b9:3f:48:52:3f:3b:d6:cc:4a:
41:4a:15:ee:48:e5:55:8f:af:69:be:b2:72:73:8d:72:f3:bc:
8c:1c:f2:c3:2d:5d:00:35:0c:2d:4e:ed:d3:68:4a:ee:34:58:
e2:95:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:09 2025 by rpki-client