Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB12DD438A811F08C2DCDB6DAE4EC9C.roa
File: 7EB12DD438A811F08C2DCDB6DAE4EC9C.roa (raw, json)
Hash identifier: x1a7P6RitvetaIClbHbxRmTuq9LJVGjfaMJhM4ca6qI=
Subject key identifier: 53:18:44:93:34:D0:C8:79:CA:71:BF:C5:C0:F7:B4:6A:83:B4:B8:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018294
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB12DD438A811F08C2DCDB6DAE4EC9C.roa
Signing time: Sat 24 May 2025 14:07:58 +0000
ROA not before: Sat 24 May 2025 14:07:53 +0000
ROA not after: Tue 01 Jul 2025 14:07:53 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98964 (0x18294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 14:07:53 2025 GMT
Not After : Jul 1 14:07:53 2025 GMT
Subject: CN=6831d2be-ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:74:97:a6:92:df:c1:f9:a8:3c:9e:5e:fe:
39:df:25:55:95:60:41:be:e5:55:bf:b4:a7:e0:89:
b8:44:5b:11:84:be:f5:b4:bb:af:a5:22:da:ce:78:
0f:a6:1e:44:4f:fb:83:40:3c:46:82:f5:55:cd:54:
e2:c5:0c:e0:89:7f:f5:0f:62:75:ad:5d:3a:d9:1e:
1c:94:ca:82:8c:64:73:5d:83:57:cb:1f:f2:07:a2:
77:b3:de:8b:91:8c:1d:65:32:78:0d:9e:b8:62:09:
a0:db:26:af:82:45:ed:bf:a0:c4:be:de:ca:7b:8d:
00:e6:fe:72:7f:6c:b3:3c:38:59:33:83:96:74:ea:
dc:f7:a4:22:66:f8:7e:4e:eb:0c:7d:15:22:7a:d9:
b9:b8:94:99:89:9d:ba:da:32:ed:d0:28:9c:1e:27:
f1:ff:30:4f:3f:f6:a3:f0:0d:1d:be:b9:be:2a:c5:
25:a2:f3:88:59:35:16:da:74:e8:6d:bc:3d:bf:a7:
12:ec:63:c7:38:bd:f7:ba:6f:a3:57:54:a0:fe:2a:
84:8c:9d:7f:c8:69:6c:d1:35:ab:31:1b:41:7a:e9:
d6:94:7b:2a:21:5c:ce:fd:7b:82:b4:6f:cf:da:c4:
10:5f:c8:17:fa:9a:c8:4c:ba:02:2c:21:95:4c:7e:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:44:93:34:D0:C8:79:CA:71:BF:C5:C0:F7:B4:6A:83:B4:B8:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB12DD438A811F08C2DCDB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
87:19:21:05:64:14:dd:ed:ea:30:fa:73:1c:b2:80:47:1f:fa:
aa:35:6d:eb:88:4c:ee:0a:be:74:b1:9e:91:68:ae:6b:13:73:
07:07:d8:34:4c:e9:68:48:72:e0:04:9f:15:2e:fd:de:66:2a:
a4:51:3c:d9:85:2d:7d:79:23:f0:c2:bb:65:bd:fa:5a:47:75:
a8:7d:6c:9d:a9:a7:c6:f4:e5:fc:74:64:ec:fd:db:9a:9f:02:
8f:4f:07:e6:2b:e2:f0:f8:5b:94:fa:f5:d4:0e:a6:4d:50:ec:
92:c2:21:ba:79:c2:47:25:3f:52:76:af:c7:a5:25:07:eb:97:
20:43:4a:24:a3:b7:6b:5a:1b:04:df:67:53:68:02:a6:3e:87:
1e:99:10:88:b7:2a:bd:b4:1c:9c:ae:5f:33:d8:11:fb:5d:b1:
5f:0a:a9:d6:0e:53:af:e0:ae:eb:2f:3e:e9:6c:4f:86:4e:16:
13:08:d8:07:2d:fb:bf:eb:2a:20:a6:16:02:9c:cf:d7:95:24:
1e:41:63:c4:73:98:07:a8:a5:7e:74:3b:04:38:2c:04:15:b9:
05:49:b6:42:01:11:05:af:e4:82:a5:1d:91:3b:27:b5:55:0e:
7f:33:b2:4a:99:ba:44:b4:e4:1c:02:7c:3f:4f:c6:79:57:45:
55:31:44:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:41 2025 by rpki-client