Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3198F259A911F0A5F3DD88DAE4EC9C.roa
File: EE3198F259A911F0A5F3DD88DAE4EC9C.roa (raw, json)
Hash identifier: b6vW/3Lui+h0bzhLv5IiYra4dawJMdNDKGMKZ/5lpWg=
Subject key identifier: 54:4F:17:63:CC:1C:9F:B0:82:70:26:DF:B3:CE:9D:FF:AF:C5:0E:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3198F259A911F0A5F3DD88DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:11:23 +0000
ROA not before: Sat 05 Jul 2025 14:11:18 +0000
ROA not after: Fri 17 Jul 2026 14:11:18 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101122 (0x18b02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:11:18 2025 GMT
Not After : Jul 17 14:11:18 2026 GMT
Subject: CN=6869328b-ed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:6d:8c:36:70:75:18:dd:28:de:6b:e8:b9:
c1:ad:46:11:06:d2:e5:08:56:4b:a5:bc:97:4b:92:
2a:5f:3b:04:e0:16:9d:54:13:02:bb:3f:c3:96:1b:
5b:f2:44:8e:37:ce:d4:3a:df:00:68:9d:4f:e3:25:
91:c4:10:30:f3:4a:7e:2d:03:05:4a:8e:d2:32:b6:
53:1e:6f:9c:15:ae:15:d1:e7:84:16:18:33:4c:a8:
68:d1:53:41:00:45:43:b7:87:22:90:2e:87:1a:b4:
95:53:7a:b0:e8:f2:51:f2:0a:f5:bf:4a:2b:79:09:
ee:4b:c4:40:bc:ec:fa:8c:47:52:e9:42:1d:42:d2:
0b:9b:95:a2:3e:a8:5c:60:fb:c2:15:37:48:b3:00:
d1:af:33:fe:83:bc:98:65:d6:39:5a:6e:f5:8e:c2:
4e:84:a4:ea:84:32:95:22:dc:7e:ec:66:5a:31:60:
79:5a:5c:ab:9c:34:78:07:9a:09:2e:e1:86:3e:32:
0f:78:de:70:84:db:8d:5b:fc:a4:50:01:ed:b5:99:
ab:f7:0e:b5:24:cf:ca:ef:4c:d0:4d:04:1f:7b:4c:
63:9f:1b:e0:c5:77:61:10:85:44:0b:b3:c6:2c:85:
a5:45:c2:ec:1e:8d:43:d2:65:33:8b:1b:29:17:fc:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:17:63:CC:1C:9F:B0:82:70:26:DF:B3:CE:9D:FF:AF:C5:0E:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3198F259A911F0A5F3DD88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
06:6d:a2:d0:b1:8b:08:b4:a3:d6:fc:39:68:5a:dd:bf:05:55:
a9:81:93:89:d4:0a:05:5d:4b:ac:b4:42:5e:b2:a9:24:b2:90:
6a:81:6a:2c:7c:ea:c7:b9:33:a2:b3:9a:74:bd:20:8f:92:10:
5c:2d:89:03:c4:d3:1b:e7:42:5d:f6:6c:f4:61:d0:2f:87:17:
51:48:7a:23:20:22:60:01:ee:ab:83:01:2f:b1:94:b4:bb:82:
19:15:12:9e:70:b5:e6:bc:b6:56:a8:56:66:38:a1:fa:a8:bd:
f1:f7:83:cb:c1:65:c3:ae:2c:1c:f6:49:cf:f7:00:1a:dd:16:
84:fa:94:e5:14:0a:1a:bd:75:3e:54:78:3e:a2:63:d0:43:7e:
b8:a1:f2:cf:46:ce:64:4b:b4:88:cd:25:35:d8:df:6f:47:09:
3b:9d:50:a9:54:ea:02:a0:d7:be:cd:c4:0a:db:5b:fa:9e:c1:
89:5f:d3:27:ad:2b:0b:c2:d7:09:4c:a7:95:c2:c7:6d:59:1e:
48:69:fe:f8:35:30:19:4f:ff:f0:20:29:af:ab:4d:cd:d8:52:
f6:f9:14:42:44:70:33:61:40:0a:b8:af:2a:73:83:4e:a0:ed:
95:29:d2:77:4b:ce:28:4c:64:a7:a5:60:48:2b:82:77:4d:4a:
e2:c2:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:39 2025 by rpki-client