Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB2CFF2616D11F0943F76E8DAE4EC9C.roa
File: ABB2CFF2616D11F0943F76E8DAE4EC9C.roa (raw, json)
Hash identifier: DQx538PP6Kww4N07evJpIhMEXs/rr93PiYhkSl20bqE=
Subject key identifier: 21:69:3A:AD:09:0D:5D:5B:93:71:C4:15:EB:91:FF:44:AA:9B:FA:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB2CFF2616D11F0943F76E8DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:20:11 +0000
ROA not before: Tue 15 Jul 2025 11:20:06 +0000
ROA not after: Sat 15 Aug 2026 11:20:06 +0000
asID: 984
IP address blocks: 154.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101828 (0x18dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 11:20:06 2025 GMT
Not After : Aug 15 11:20:06 2026 GMT
Subject: CN=6876396b-7085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:dd:e9:31:da:1d:9e:10:4b:d0:e5:01:ab:
9b:83:2f:20:1d:33:10:b8:48:ee:ea:49:73:98:91:
b6:2c:71:85:1a:22:e6:fe:da:ea:cf:23:47:8b:88:
33:d1:a9:91:98:9f:f4:0c:10:7e:02:b6:b1:af:11:
06:34:d0:54:bc:93:0f:bd:66:33:47:eb:d8:ad:29:
fd:57:81:f9:3b:e9:f9:26:33:79:92:ad:47:30:10:
2d:a3:54:8b:92:0d:de:a9:c8:9e:dc:31:82:6d:1d:
89:fd:05:74:7f:97:4f:44:43:fc:08:7b:5d:d3:ec:
04:32:ac:27:0c:83:38:7e:2f:2c:a6:47:40:b9:89:
4a:34:da:06:e6:b5:b5:56:5c:e5:4a:e9:02:7f:1f:
69:35:e4:3c:6b:48:a6:e3:b6:d9:59:b6:d8:69:a5:
78:a3:27:16:48:32:ba:6a:2b:19:f0:41:bb:e6:d1:
08:7f:2c:e1:8e:c6:16:5f:70:31:56:99:7d:22:38:
b9:d9:04:e4:0d:cd:7a:eb:19:89:ba:ca:fd:1c:98:
15:f9:60:87:bd:77:f3:9e:b0:b0:8b:57:6e:24:18:
fa:a6:62:f4:cd:65:5f:cd:a2:7a:b8:55:e4:2c:5b:
42:c2:2c:27:4b:1d:23:94:be:82:48:d4:34:71:35:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:3A:AD:09:0D:5D:5B:93:71:C4:15:EB:91:FF:44:AA:9B:FA:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB2CFF2616D11F0943F76E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.3.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:0c:3d:30:6a:23:b3:2e:20:3e:3f:66:b7:69:dc:b8:93:07:
e8:19:f1:4c:b9:4b:5c:9d:86:07:e7:35:f2:65:34:a8:dc:76:
2a:30:36:81:bd:13:0f:1e:5a:e5:39:2c:4c:e1:05:23:3d:71:
68:c5:30:f3:dd:ab:4f:a5:6a:ee:89:c0:5d:41:c5:e4:3e:21:
e5:25:ac:b5:8e:ec:bc:11:19:9e:eb:5f:74:ae:4e:94:c7:94:
1a:c1:42:69:09:95:71:95:de:c9:6d:d3:44:4b:27:c0:83:66:
cf:86:45:20:8c:2b:83:a7:d7:3e:07:d5:61:d2:16:2b:7c:c8:
3d:aa:d8:bf:df:44:4d:0e:81:9c:c7:39:88:b4:eb:ea:f8:03:
92:5f:83:1c:90:bc:ff:ed:ce:bf:e9:3f:36:e3:26:b3:c2:34:
a4:54:2a:a0:4b:44:ba:f9:0a:16:b5:44:22:dc:cd:e5:cb:9c:
6d:73:57:f4:db:07:3b:ef:d5:3b:9b:b6:63:ce:56:1a:81:53:
eb:99:f1:93:f7:3c:a7:4c:10:7b:c7:03:93:72:4b:2a:5b:66:
86:5d:7d:fb:2d:f1:7b:7b:be:13:53:25:17:5a:e3:e7:76:98:
6b:e1:76:79:61:10:4b:03:60:7a:94:73:41:c9:4b:5f:5e:0a:
4a:e3:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:44 2025 by rpki-client