Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4DB8C385D7911F0A0F27CDFDAE4EC9C.roa
File: B4DB8C385D7911F0A0F27CDFDAE4EC9C.roa (raw, json)
Hash identifier: U9WfObyRbLv5f6E7nsvMmQgKSUSkRBDprUdPWgFq0Ik=
Subject key identifier: 51:6C:5B:6A:05:CA:F6:B0:F1:1C:8A:F8:55:28:7F:07:FB:DC:BA:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4DB8C385D7911F0A0F27CDFDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:36:16 +0000
ROA not before: Thu 10 Jul 2025 10:36:11 +0000
ROA not after: Fri 22 Aug 2025 10:36:11 +0000
asID: 133180
IP address blocks: 154.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101700 (0x18d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 10:36:11 2025 GMT
Not After : Aug 22 10:36:11 2025 GMT
Subject: CN=686f97a0-e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:e2:ec:3f:ba:be:37:57:f3:57:36:af:39:
7c:e6:c7:7c:1b:d9:f6:15:63:26:25:9a:9f:47:6f:
a5:5f:17:d3:45:01:6d:a8:f7:f5:ca:59:f9:3d:02:
f4:8c:c5:34:a1:f1:67:69:1f:28:aa:1c:f3:c4:56:
ac:fe:e7:4c:d1:cd:3d:3e:b5:4b:b2:4a:b0:8b:9f:
c6:01:f6:9c:bc:00:7a:c3:1c:4b:0d:32:35:0e:b1:
0d:ca:dc:7c:46:b9:3b:6c:e5:18:06:a8:22:29:5d:
d3:d9:37:ae:d5:fc:fa:c2:0d:39:49:61:a8:46:0d:
79:2e:7a:9d:68:ba:07:1e:dd:81:60:06:c9:39:e1:
53:ed:b8:a4:fa:9d:7a:96:66:06:9e:7d:3b:08:7a:
3e:63:7a:75:20:e5:70:5d:f7:78:a7:47:49:76:8c:
02:70:06:7a:5b:5a:62:82:32:d6:ad:f8:b5:05:ab:
e5:ad:d3:09:ac:ba:ac:ac:68:b0:51:dc:f6:51:f7:
28:1b:73:ac:12:c3:a7:4c:cd:12:f4:d8:0b:d0:6b:
86:ac:d5:cb:52:f4:84:7d:5a:b5:11:8d:13:51:b6:
20:97:73:42:6f:b2:54:de:43:39:e9:5b:c2:4d:30:
c0:83:cd:33:20:3c:be:8f:70:4e:bf:f2:18:d7:0a:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:5B:6A:05:CA:F6:B0:F1:1C:8A:F8:55:28:7F:07:FB:DC:BA:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4DB8C385D7911F0A0F27CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:dc:c3:8d:4c:75:42:89:d2:20:cd:8a:b0:c3:c1:c8:b0:bf:
49:35:fa:0e:4d:be:cc:14:fa:92:af:02:13:57:05:1b:f7:58:
b2:c6:12:89:da:06:42:d8:c2:2b:42:50:4a:4f:61:b4:5c:62:
9f:a0:02:6e:a9:53:10:a5:ca:4b:09:8f:58:d7:68:ed:79:1b:
65:ee:02:f8:ff:98:5f:32:a8:1f:af:1d:18:cb:0c:0b:c5:cf:
5b:85:c4:87:b0:1c:d1:e3:df:30:f5:3d:17:4d:c5:33:14:33:
4c:22:0d:5c:cc:a4:40:96:86:3c:58:f5:c3:93:5f:fe:8b:dc:
74:af:30:d4:2a:f5:f2:b0:49:3e:bc:79:de:45:4c:03:46:46:
8f:fb:e5:25:54:37:77:4e:00:9d:f9:67:84:3a:23:52:7c:f1:
7d:f4:d9:5e:ea:54:98:7d:07:66:c4:a6:75:79:30:fd:8a:e0:
a3:1b:48:0b:5d:48:42:d7:2f:68:7c:5a:ac:d2:77:4c:ff:d8:
59:db:a2:83:b9:e5:7c:54:16:6e:b7:09:6d:dd:5d:1e:15:da:
8d:41:8c:2b:b7:f5:0a:2d:2d:dd:d2:e5:4c:41:08:eb:16:89:
db:14:74:03:f8:a0:8c:fa:ae:7b:a0:ca:e0:e8:aa:ce:0b:fa:
4b:d5:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:13 2025 by rpki-client