Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF13CF266E411F0A1125E92DAE4EC9C.roa
File: CEF13CF266E411F0A1125E92DAE4EC9C.roa (raw, json)
Hash identifier: I+9BoZSYePzWlnKsI9U4QVrdIHoOpUHCBu+acWaMWBM=
Subject key identifier: EF:8E:89:71:49:93:E0:77:2C:D7:BE:39:2E:73:43:02:02:66:F7:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ED6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF13CF266E411F0A1125E92DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 10:15:36 +0000
ROA not before: Tue 22 Jul 2025 10:15:31 +0000
ROA not after: Tue 02 Sep 2025 10:15:31 +0000
asID: 174
IP address blocks: 154.88.32.0/24 maxlen: 24
154.88.33.0/24 maxlen: 24
154.88.34.0/24 maxlen: 24
154.88.35.0/24 maxlen: 24
154.88.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102102 (0x18ed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 10:15:31 2025 GMT
Not After : Sep 2 10:15:31 2025 GMT
Subject: CN=687f64c8-3b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:8e:a9:37:06:ab:23:09:7e:12:01:d4:28:
f8:dd:0e:65:49:31:92:d8:07:28:cf:78:0d:0b:81:
97:a3:61:62:36:67:8a:9c:90:2b:99:92:f5:a3:55:
a9:1e:d1:3e:de:eb:17:19:df:eb:09:9c:f6:82:50:
51:9c:db:39:68:8d:6e:fc:7c:4f:2a:a7:63:74:ba:
46:f1:b6:71:15:53:dc:fb:5f:53:aa:9c:ea:f4:0f:
a3:59:1d:12:0e:d5:87:78:87:e7:e1:5c:4b:dd:5f:
70:f3:cb:25:b1:85:60:59:33:7b:f0:10:a9:73:cf:
31:63:3e:15:71:b2:e2:6a:79:cb:c9:66:a6:c3:88:
f7:10:cf:15:42:27:6c:b2:69:0d:fa:55:3d:9d:2f:
c5:bf:f4:cf:ee:f3:bb:b7:67:74:69:80:c8:6c:50:
3a:e6:9e:1c:ec:cc:d6:72:9f:9e:21:c6:d0:35:2a:
54:5b:f3:fa:b5:fa:ba:bf:47:54:7b:5f:4f:97:74:
7f:d2:6e:79:a4:a1:9b:48:e5:ea:4b:0f:39:11:0b:
c4:b9:8f:b2:21:ec:21:70:8e:3d:f7:5f:4e:97:7c:
a4:a3:e5:b7:e0:00:ce:9b:50:59:7f:20:8c:9f:85:
05:52:d0:66:ef:9c:9a:2a:51:16:ef:ed:1e:08:04:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:89:71:49:93:E0:77:2C:D7:BE:39:2E:73:43:02:02:66:F7:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF13CF266E411F0A1125E92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/22
154.88.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f5:27:62:98:90:41:41:ce:a7:ac:13:a5:d3:36:c6:e3:ad:
50:b5:61:6e:7b:c9:1d:0e:33:f0:a0:11:cf:7f:ac:f8:0f:6a:
d4:c2:96:f0:3f:29:e9:1a:4d:99:9e:46:7f:d0:5d:f8:99:60:
fb:06:cc:2b:88:33:ac:05:92:aa:2c:56:71:74:9e:d8:8e:9e:
f6:7d:e4:be:ff:dc:c5:04:ea:22:57:e2:8b:ae:1f:2f:2d:1f:
de:2a:3b:1b:3c:d7:7d:53:44:f7:91:50:fd:a2:7f:d7:87:7f:
57:72:c0:d7:ac:ee:26:16:b9:b4:d7:80:f8:f9:8c:a9:3c:bf:
1c:87:c7:7b:43:9f:ee:14:73:6b:73:5f:4f:c3:2e:fa:6c:1e:
f3:3d:c0:b8:2c:81:29:db:b8:56:6a:47:4e:7b:61:84:7c:e0:
41:8c:98:3b:df:7b:d8:27:da:5d:6a:71:8a:f6:1f:7c:62:53:
38:94:91:60:4e:50:a4:69:ae:65:13:72:5b:3e:dc:f6:cf:09:
6e:68:ce:7a:64:12:72:0b:cf:31:91:af:19:6c:f8:50:6a:b4:
a4:32:3d:7d:58:6b:ff:6b:f3:36:a6:07:7a:e3:c8:1e:c5:61:
1d:1f:46:c8:99:c5:5e:1a:7f:15:7b:ed:da:ef:d0:1e:6a:8b:
1f:46:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:08 2025 by rpki-client