Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CE2EDC6D1F11F09EAECFAADAE4EC9C.roa
File: F2CE2EDC6D1F11F09EAECFAADAE4EC9C.roa (raw, json)
Hash identifier: jCTdY5IBo7ltlitgVR9hSRarXOF7RzrLjXgg2OUkiTQ=
Subject key identifier: BC:29:C7:10:60:F6:AA:DB:9F:D7:CD:74:BE:26:E7:E9:F3:E9:D4:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CE2EDC6D1F11F09EAECFAADAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:34:04 +0000
ROA not before: Wed 30 Jul 2025 08:33:59 +0000
ROA not after: Wed 29 Oct 2025 08:33:59 +0000
asID: 135377
IP address blocks: 154.85.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102399 (0x18fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 08:33:59 2025 GMT
Not After : Oct 29 08:33:59 2025 GMT
Subject: CN=6889d8fc-96ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:69:a3:a4:01:fb:3e:4d:22:d1:9e:ac:4c:
98:a5:a4:93:34:58:4e:e0:b5:dc:a4:96:00:4d:2a:
b7:46:7a:b2:69:1f:eb:21:9f:39:78:7f:16:c2:13:
48:94:4a:5f:fa:95:53:4f:e1:8e:3b:cd:f1:7c:1f:
81:ef:30:8a:49:3c:ae:c7:75:61:d1:21:fa:fd:c7:
e8:d4:5a:cc:b1:e1:dc:6a:5a:e7:e2:af:77:35:1a:
6a:13:92:73:9d:58:2d:8b:fe:9f:b1:c8:81:66:dc:
5e:6d:06:79:5e:87:7d:02:f1:44:5a:c1:92:00:58:
c0:00:a4:52:ce:f7:db:55:2a:99:8c:92:96:db:ae:
47:d2:f4:f6:32:0d:c7:69:4d:47:b3:88:5d:60:f6:
ea:05:e8:0c:5d:9f:5a:fe:b8:45:9f:41:a4:59:95:
b7:f6:c0:c9:e8:09:e7:da:7f:4a:25:8b:1a:85:0d:
56:4f:8e:51:35:79:fc:38:64:b4:22:da:b9:fa:48:
9e:56:2a:fd:1d:7b:9e:1b:c1:d9:5a:f3:d2:f5:63:
81:1a:4a:d4:61:b2:03:c8:a0:6a:1a:6c:4f:5f:a5:
14:2c:55:6e:3a:7a:0f:3c:50:7e:b3:f7:64:ec:75:
ce:13:58:84:c9:77:26:08:aa:7a:23:49:fd:6e:6c:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:C7:10:60:F6:AA:DB:9F:D7:CD:74:BE:26:E7:E9:F3:E9:D4:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CE2EDC6D1F11F09EAECFAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.27.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e4:ec:9c:3f:62:ec:d1:a8:8d:50:16:b1:47:50:d7:b9:31:
60:9a:b6:14:f2:f4:6e:8c:3d:da:b5:79:27:88:72:60:a7:f8:
37:44:37:f7:d6:17:1f:79:aa:66:6c:e1:6c:29:07:2e:c0:c9:
26:2e:21:b3:0a:dd:ac:87:92:08:10:00:9e:16:11:97:e6:fc:
b9:cb:13:3a:e3:fd:d9:d8:77:51:57:99:8c:e6:75:3c:37:97:
af:89:75:2f:2c:06:08:60:2e:04:3a:c5:f3:7f:2e:ae:e4:7b:
0d:c1:0d:61:df:2d:d2:6d:32:63:ff:35:3d:6d:f2:a1:46:3d:
4c:dc:a8:0a:1d:11:07:dc:40:5e:ad:a8:8a:2c:f5:6a:ff:61:
df:3b:78:f9:97:89:f0:37:44:0c:80:a7:3b:f3:3f:84:fd:55:
d2:e6:94:04:bc:c5:8e:d8:1e:9b:35:24:94:67:2e:7b:ea:35:
42:82:6d:3c:a0:c8:05:1a:8a:3c:f5:76:ec:11:68:a1:8b:79:
27:a9:57:a7:3e:77:b5:8e:9f:ed:18:d2:14:09:41:2a:71:76:
9e:ed:fd:a6:b4:37:42:55:8f:a3:22:d9:00:f1:de:3e:1f:e4:
5a:c2:db:0a:1c:c9:d6:24:fe:ca:05:d3:9b:23:b0:62:52:5f:
00:fd:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:55:21 2025 by rpki-client