Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80CE8085D0C11F088BF3C8EDAE4EC9C.roa
File: E80CE8085D0C11F088BF3C8EDAE4EC9C.roa (raw, json)
Hash identifier: hmak/eqGz1zoDFSD4yAQcd2B/Q8lqkbnjjzmuXX+P9k=
Subject key identifier: 1E:55:64:99:D8:05:21:5B:DC:E1:4A:54:3F:51:A8:AB:AF:4B:53:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80CE8085D0C11F088BF3C8EDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 21:37:27 +0000
ROA not before: Wed 09 Jul 2025 21:37:22 +0000
ROA not after: Fri 17 Jul 2026 21:37:22 +0000
asID: 395886
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101666 (0x18d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 21:37:22 2025 GMT
Not After : Jul 17 21:37:22 2026 GMT
Subject: CN=686ee117-af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:65:ab:94:71:d3:45:c0:7b:f9:81:50:5c:
7a:0e:ec:fc:c3:67:dc:9a:4f:32:74:7d:53:63:99:
34:3d:9f:05:72:b1:e9:5e:25:7b:bd:1a:09:1a:16:
7e:79:0e:17:af:d0:3f:ac:7e:fa:dd:4c:74:4b:3c:
e9:b9:68:2b:fb:4b:63:90:4f:85:48:ad:23:da:f2:
52:01:0d:b9:ad:9f:14:b9:a8:4c:cd:d9:52:14:6e:
ed:bf:1c:d3:0c:b2:dc:d3:b1:e1:2a:e9:d1:2f:f8:
72:25:07:c0:6b:e6:93:96:09:7b:5c:2e:69:58:d3:
39:1c:b0:c2:4a:70:70:ee:95:c8:b8:53:73:c5:37:
e7:05:26:ae:94:d6:08:65:de:b6:c5:c1:46:08:a8:
1f:18:7c:30:3e:08:61:97:61:31:68:0b:ec:c9:4f:
30:d1:35:e9:16:d8:c7:2b:63:98:a3:cf:9a:a9:f3:
ed:c4:bc:67:b0:46:f2:63:ac:05:10:3e:e5:4f:97:
0e:ae:93:bb:a9:7a:d6:7a:49:df:9a:5d:55:6f:cf:
8c:9f:63:bd:4a:e6:69:ad:1c:40:94:5f:73:6b:d3:
ee:72:58:c1:cd:3c:60:b9:a3:a3:41:15:e9:d5:a9:
b6:1f:77:99:70:69:b5:4a:46:1c:2d:4b:83:b6:5c:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:64:99:D8:05:21:5B:DC:E1:4A:54:3F:51:A8:AB:AF:4B:53:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80CE8085D0C11F088BF3C8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
c2:12:52:45:04:3d:86:bb:4b:21:c7:5c:2f:ec:33:ac:2e:2e:
9d:7e:13:7e:fd:29:7b:ae:a1:49:73:c2:6a:68:4c:73:00:7e:
ba:07:8e:26:c5:4c:f1:87:23:cc:26:27:38:2d:5f:ed:77:3e:
42:d6:f6:0b:37:8d:47:da:63:3e:aa:6a:3c:10:90:b7:1f:a7:
f4:70:04:9f:6f:2e:ee:5e:63:7f:42:d4:59:9a:c9:4e:02:0e:
82:fc:2d:b2:6c:55:85:e5:95:39:b8:6a:62:40:e3:d4:c8:0d:
a5:4d:a9:ca:2a:22:0f:b0:90:d3:23:5c:04:74:f1:87:3a:00:
71:8f:ac:2a:79:9a:60:69:60:7c:35:2a:1c:27:44:80:dd:8b:
31:59:b7:d3:6a:26:78:a0:dc:6e:9b:f7:54:f3:56:59:59:dd:
48:88:f4:4c:6d:9c:6c:64:0b:43:3b:4a:13:c5:24:a9:ff:0c:
77:ea:15:6a:20:36:04:f0:03:52:e6:3f:a0:42:09:2a:0a:36:
80:e3:35:5c:ce:76:95:52:81:dd:52:ca:fa:ac:98:9b:5c:2c:
3e:03:1c:d1:f4:74:bc:d8:f8:9b:68:48:b0:2d:e0:23:2e:6f:
32:65:be:ea:23:a8:42:93:e9:87:ae:17:b5:e9:b7:34:c3:88:
23:50:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:10 2025 by rpki-client