Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E791AD4258F611F09D9C1AF2DAE4EC9C.roa
File: E791AD4258F611F09D9C1AF2DAE4EC9C.roa (raw, json)
Hash identifier: tSBXIpBg59T/KTrOiHqoXPb8TkPKfQBonVxVVRs3lMQ=
Subject key identifier: 4B:0B:8D:4C:BD:3A:AC:F1:B7:18:E4:1F:02:CD:C2:E0:2F:F9:EF:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E791AD4258F611F09D9C1AF2DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 16:49:52 +0000
ROA not before: Fri 04 Jul 2025 16:49:47 +0000
ROA not after: Wed 03 Sep 2025 16:49:47 +0000
asID: 135845
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100992 (0x18a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 16:49:47 2025 GMT
Not After : Sep 3 16:49:47 2025 GMT
Subject: CN=68680630-2944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:d3:9f:12:e8:31:c5:18:85:82:29:2b:90:
ec:a7:26:95:d8:e7:65:9b:cb:bc:9c:de:f1:41:2e:
3d:84:29:40:13:8d:ba:3c:21:b8:ff:3e:26:30:b7:
96:80:cd:17:73:f2:50:b0:18:32:23:e9:95:95:6a:
5c:57:64:b8:9f:00:44:0c:12:c2:1d:b2:d0:4f:b8:
ad:53:3f:3f:46:71:02:8e:9e:8f:fd:10:8a:d8:45:
d0:75:1c:e8:9a:50:e9:8c:b0:b1:8f:2e:76:78:fd:
ab:7a:2d:a8:f6:6b:e0:93:bf:7d:85:e6:1f:48:27:
ee:6f:c8:51:21:9d:0a:58:46:5a:28:24:34:f0:d4:
a6:48:9c:05:82:07:c5:0d:06:ba:5e:8a:9d:c1:59:
bf:0f:17:81:ed:c3:26:0e:bb:a4:a9:24:56:e7:73:
c6:54:92:85:27:31:79:bf:5a:07:3c:50:40:8a:c7:
a6:31:10:d5:bd:14:ac:76:7e:73:89:e5:40:7a:00:
c9:d6:af:11:13:5f:e3:35:98:4d:37:64:b1:e9:93:
7b:8a:c1:0b:63:f7:fb:02:2e:d6:a2:04:94:8c:9a:
ba:d5:64:cd:ec:81:c0:90:53:7c:42:91:8a:37:83:
20:19:b3:e6:44:47:e6:89:8f:07:e4:8d:f9:92:13:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:8D:4C:BD:3A:AC:F1:B7:18:E4:1F:02:CD:C2:E0:2F:F9:EF:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E791AD4258F611F09D9C1AF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
86:a9:42:9f:b6:10:8f:4a:52:a4:c1:00:7e:dd:2f:b1:72:e2:
bc:9a:c0:90:a1:c4:15:8a:74:d6:94:b3:98:3a:60:01:b1:5e:
b1:8a:b7:c3:0c:ca:6a:50:31:d0:fe:ef:89:bb:4b:4a:ee:06:
89:d0:54:fa:83:c1:86:9b:89:fe:5a:9c:1e:ce:de:a0:50:00:
76:c5:e8:ca:d8:18:f6:8d:d6:1f:a6:37:45:04:8b:df:ee:74:
9b:e9:52:6a:7b:56:27:44:0c:1c:a9:ab:ae:97:a1:5e:73:9f:
1f:a3:ff:fa:3d:ab:33:51:df:8d:fa:da:d5:d1:85:58:64:a4:
d0:af:a8:f6:78:6b:22:a0:eb:2d:9b:77:54:0d:16:ad:52:86:
c9:03:d0:ad:c9:35:54:a5:e7:56:42:e5:b6:f0:ed:48:9c:17:
43:80:03:07:96:af:02:51:3d:28:f2:35:d4:e7:e3:06:19:a5:
97:7c:ae:8d:51:5f:a0:bc:b2:7e:01:81:e4:c7:b7:e9:93:c4:
3a:2a:59:dc:b4:17:87:20:f4:83:82:63:91:86:e9:ec:51:df:
2e:66:4e:f9:26:02:c3:46:df:22:43:f5:41:5c:74:89:88:e9:
59:54:28:33:5e:56:5c:25:4d:ec:da:c7:9b:8f:48:a5:24:f1:
79:88:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:57 2025 by rpki-client