Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08EB5826FA011F09A4086F0DAE4EC9C.roa
File: F08EB5826FA011F09A4086F0DAE4EC9C.roa (raw, json)
Hash identifier: y78FJhdplRsLBZVKigLkaRnreIe/KMp9qwtYbQVywos=
Subject key identifier: DC:65:9D:02:29:5B:DC:46:48:30:DC:B9:54:53:E6:C8:5B:8D:5E:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019038
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08EB5826FA011F09A4086F0DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 13:02:27 +0000
ROA not before: Sat 02 Aug 2025 13:02:23 +0000
ROA not after: Sun 07 Sep 2025 13:02:23 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102456 (0x19038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 13:02:23 2025 GMT
Not After : Sep 7 13:02:23 2025 GMT
Subject: CN=688e0c63-9aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:83:34:95:10:1b:f3:a0:41:a4:5f:04:f9:
af:63:5a:9d:84:b1:22:81:85:69:4e:e1:f6:27:63:
de:33:d1:c1:8b:77:3b:92:da:9e:3a:01:35:45:1d:
75:d3:13:80:c1:4a:82:4e:f2:e3:5e:b2:fa:8f:2b:
6b:de:27:ff:2c:9a:ef:ce:dc:6b:2e:8d:c6:6f:e9:
15:22:0b:e7:45:a6:61:aa:66:ce:a4:2d:8d:d5:57:
d8:6f:9b:14:ad:ef:83:19:2d:a7:c1:e7:c0:6f:cc:
cd:b6:8d:93:06:64:37:bc:53:35:8d:fe:bd:e9:42:
71:39:35:88:e5:cc:0d:2e:16:d6:9f:cf:d6:4d:06:
aa:af:9a:e7:70:0f:cc:1f:08:0e:d9:e7:08:e2:75:
d3:67:c6:ed:bf:6d:e9:c4:38:81:39:ed:2e:e6:43:
9a:ac:fe:88:3d:80:83:6d:1c:4d:80:48:c5:48:92:
38:67:19:d1:2c:e1:1f:61:e8:8e:e1:df:06:d3:84:
7b:1b:7b:83:21:3e:a9:03:6f:87:3b:87:f0:2b:af:
5a:d6:12:d8:87:bd:09:d5:22:32:04:71:64:06:68:
61:f7:55:15:92:93:f6:65:64:fc:2f:31:13:e2:16:
18:3f:5f:93:6a:64:cf:eb:1b:e3:8f:4d:99:26:86:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:9D:02:29:5B:DC:46:48:30:DC:B9:54:53:E6:C8:5B:8D:5E:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08EB5826FA011F09A4086F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ea:ff:e1:c0:18:21:e2:c5:ea:05:ab:0a:66:d6:98:a7:0b:
31:ae:70:d2:8d:7c:6d:b7:88:bb:41:ce:76:b0:e7:6f:ae:7e:
f5:6b:50:40:7c:1a:90:8e:bb:fe:65:b8:64:f5:a5:90:ff:a8:
90:4a:a7:3f:c0:2e:90:9e:f7:a6:9a:b3:1e:a3:79:b7:2f:53:
9b:09:ce:08:e5:2c:69:1b:d1:21:bb:2f:44:65:0d:f9:50:5e:
4a:50:6c:e1:fc:18:2e:72:d3:e4:71:8c:a9:ce:bd:f1:3f:02:
73:f4:88:c9:e0:6a:e2:f7:90:09:b0:e9:4c:5f:5f:95:b0:35:
5a:ea:83:eb:33:c7:ad:38:8a:6d:dd:e9:37:c6:70:3a:b7:bf:
a5:16:8c:cb:1e:1c:8e:24:3c:cf:5b:f3:c6:6f:ac:f7:24:c7:
30:95:a7:6d:9f:fa:74:a8:ef:d1:a6:9e:d5:9c:3d:97:af:3d:
33:b2:8c:45:ea:34:2a:4c:16:24:6a:d6:6a:ee:64:4c:18:b5:
d7:03:fe:ab:82:57:af:f3:33:67:d0:bc:d6:2e:b3:08:5e:0a:
a7:f9:5d:f4:5c:95:4d:c4:c6:9f:dc:88:e2:58:29:aa:ee:0b:
92:a1:a1:b1:a0:02:42:61:21:81:58:11:25:96:3b:8b:28:f1:
f1:26:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:52 2025 by rpki-client