Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED6B6A6E608011F087EF2EE6DAE4EC9C.roa
File: ED6B6A6E608011F087EF2EE6DAE4EC9C.roa (raw, json)
Hash identifier: SL8tw2+OBmXV3fI4tSGmmiRbKSZ1EMgbAWh+tlKefWo=
Subject key identifier: 8B:BA:BA:A5:88:4A:95:A5:80:F3:4E:E7:2F:79:FD:99:39:40:D3:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED6B6A6E608011F087EF2EE6DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:05:31 +0000
ROA not before: Mon 14 Jul 2025 07:05:26 +0000
ROA not after: Sat 16 Aug 2025 07:05:26 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101779 (0x18d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:05:26 2025 GMT
Not After : Aug 16 07:05:26 2025 GMT
Subject: CN=6874ac3b-4e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:08:7c:5a:3d:d6:0b:98:ce:74:96:fe:4a:
0c:fd:b4:04:b9:0e:16:70:93:84:91:16:c7:dd:be:
d8:52:ab:3f:37:7f:56:fb:a9:76:1d:71:9d:c6:29:
5f:70:d1:f8:ae:a6:72:43:0a:06:69:72:60:40:82:
76:f1:8f:a3:ef:13:5d:f9:4c:08:ab:5f:93:89:04:
fd:57:fb:ed:56:f4:03:b6:af:0f:0c:6a:97:41:ac:
50:b9:45:d8:a4:2b:6b:23:87:80:82:8e:07:d0:80:
42:0e:e9:86:c3:c5:bb:c0:dc:73:d7:75:f1:c5:01:
2a:b9:52:d7:96:44:94:d8:be:01:ec:29:de:af:8f:
98:77:bc:40:c3:f6:02:e9:fc:85:65:c7:58:fc:ff:
af:4b:12:cd:dc:15:25:f2:ce:87:f4:01:db:9e:03:
38:44:48:0b:93:c0:2b:6b:d4:84:53:6b:58:61:eb:
85:3d:60:35:7c:c5:73:f7:57:aa:34:a1:09:0a:04:
d9:2a:69:8a:db:9e:c2:0f:05:db:76:7d:a0:4c:75:
8b:05:af:de:ee:b4:80:36:44:df:a5:9c:28:4e:79:
05:16:90:16:68:4d:8a:2f:8c:c9:d0:8d:e4:ee:c0:
d3:17:32:66:04:1b:13:a9:ff:8b:b1:e8:19:42:09:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:BA:A5:88:4A:95:A5:80:F3:4E:E7:2F:79:FD:99:39:40:D3:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED6B6A6E608011F087EF2EE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:26:07:7f:b6:34:83:29:83:18:fd:90:4b:8c:63:aa:59:fc:
bd:62:c5:fa:44:f9:2a:e3:f0:39:39:96:a3:e6:ad:88:d0:59:
3b:a3:76:4c:b9:04:46:5a:53:df:b1:9a:f4:e0:2d:3f:60:3d:
ed:3e:f1:e0:80:85:28:08:26:2a:31:11:14:e5:d6:ed:b8:c4:
23:75:71:71:4c:b2:cc:2e:d7:7a:ad:c4:a1:aa:fb:fb:c3:d5:
70:2a:27:d9:16:9f:c4:21:dd:5b:cf:ad:42:18:d1:a3:e0:d7:
6a:ec:60:9c:50:3d:63:00:dc:7a:c0:dc:4a:5a:a2:a1:51:02:
4b:b0:e2:ea:d8:4b:46:d2:4f:40:11:3a:51:04:c5:fe:c0:08:
00:26:dc:04:d0:83:72:d9:be:99:a3:f6:e5:88:bb:6a:99:8c:
1f:fa:a8:1e:54:8e:1f:41:8e:d5:ba:d5:6b:25:7c:3c:06:94:
cb:49:60:f1:a8:bc:27:bb:c9:12:56:7e:e5:e5:70:96:e2:00:
a8:06:61:fc:9b:66:0e:6d:81:41:70:94:40:ca:48:cc:61:a5:
fe:9a:6a:e9:12:3d:30:1e:f3:ff:4a:45:0e:ae:90:d9:10:f9:
0c:bb:fe:8d:ce:a0:c7:4e:e8:1c:22:91:9a:c8:e0:99:ad:9b:
b6:81:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:04 2025 by rpki-client