Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4EE7346FE311F09F3AD79BDAE4EC9C.roa
File: 6E4EE7346FE311F09F3AD79BDAE4EC9C.roa (raw, json)
Hash identifier: eVqtzoU2DmqZxp8G/8MHWa5qVdev0bDV4iAAMv2rhN8=
Subject key identifier: 6C:B8:4A:56:54:CF:E4:F2:55:F7:A2:BE:36:F4:D3:7C:76:24:7C:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019078
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4EE7346FE311F09F3AD79BDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 20:58:25 +0000
ROA not before: Sat 02 Aug 2025 20:58:19 +0000
ROA not after: Wed 24 Sep 2025 20:58:19 +0000
asID: 138195
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102520 (0x19078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 20:58:19 2025 GMT
Not After : Sep 24 20:58:19 2025 GMT
Subject: CN=688e7bf1-46fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:c9:4a:72:59:2f:46:10:52:fe:7b:a9:ca:
36:25:fd:85:3b:bd:00:97:fa:9d:05:24:81:76:d7:
aa:28:aa:d3:7a:83:cb:b4:ab:5b:b9:01:e3:69:ad:
1b:89:4f:b8:0a:f3:81:20:b3:bf:40:67:1a:c3:37:
27:49:1c:35:16:72:58:97:ca:ed:cb:39:f4:d2:00:
00:ce:5a:b1:9e:0f:2d:82:13:2c:1a:7d:cd:9f:b3:
91:8e:31:9f:e0:a8:4b:b2:ca:b3:8d:78:b1:99:fe:
6c:1f:45:a3:a2:89:34:f2:eb:57:70:b8:2f:f1:1c:
96:f9:d0:2e:d1:75:81:14:29:2a:56:50:b6:60:4c:
2d:3d:0c:4a:a9:6f:7a:be:8b:66:f4:fe:31:d1:0c:
86:90:9d:5f:08:c3:31:0f:d1:e4:91:f6:70:1c:ab:
4a:13:15:57:65:48:e3:15:4f:ef:0c:69:86:54:e3:
1a:98:be:3a:53:de:6a:d7:e6:4c:55:6b:ee:b1:ac:
91:30:30:72:c7:54:24:5a:ee:f6:e6:85:a8:ff:65:
c8:fc:46:23:33:0f:e1:01:e4:f7:c4:00:42:f5:3a:
d3:cc:3e:84:08:75:00:fa:1b:58:c0:94:1a:72:4e:
43:c6:9a:b7:6f:25:fe:d1:cd:9c:e0:57:78:f5:28:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:4A:56:54:CF:E4:F2:55:F7:A2:BE:36:F4:D3:7C:76:24:7C:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4EE7346FE311F09F3AD79BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:21:ec:81:ed:85:72:54:3e:df:04:1e:23:e1:cf:37:34:62:
6e:80:09:bc:40:cb:bb:c3:d2:bb:56:18:91:2c:19:ed:de:03:
29:db:5b:74:3b:fb:d5:ca:5c:50:72:55:81:58:0f:0a:cb:97:
77:29:fe:ef:55:f9:09:45:5c:2e:54:7d:20:31:08:9b:52:97:
2c:55:15:3e:35:e8:79:4a:90:a5:e9:e1:21:46:df:3c:c5:19:
19:ba:e1:43:e2:d4:f9:3e:f7:60:f3:a4:27:b3:a1:f6:56:0b:
db:4e:bf:a7:1f:41:f5:e6:4f:fe:5e:b3:d7:f7:78:4c:2c:d7:
4d:99:c0:39:cb:e9:7f:bf:b0:c1:b6:b5:de:8e:a9:3f:c0:63:
4e:01:64:cb:8b:9b:0a:0f:b6:d8:e6:e1:c2:52:7b:e0:cb:9b:
26:de:ca:97:2a:b6:2a:4d:07:a5:3b:c4:a2:37:47:77:31:bd:
76:b2:36:1f:cd:b5:6b:61:e5:52:68:d2:1b:3c:a2:58:80:7d:
f3:83:bd:dc:ea:d7:f0:3b:51:53:88:be:79:07:b9:ff:6c:1a:
d5:be:f5:a9:89:7d:e1:dd:16:a9:c8:47:be:48:81:36:f1:8b:
18:b3:f7:a4:ef:9e:e7:00:ff:e6:99:a8:f2:9c:ad:82:71:06:
c6:34:fc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:58 2025 by rpki-client