Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/108FE9DA4ABE11F0B79CD1E1DAE4EC9C.roa
File: 108FE9DA4ABE11F0B79CD1E1DAE4EC9C.roa (raw, json)
Hash identifier: zBCvq1mjtCf1BHtWMyiX4jTDyCdWwSBigDenws7cufI=
Subject key identifier: 4D:84:16:2B:35:74:A5:50:19:33:DE:41:93:C3:5A:DA:1D:44:26:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/108FE9DA4ABE11F0B79CD1E1DAE4EC9C.roa
Signing time: Mon 16 Jun 2025 14:27:44 +0000
ROA not before: Mon 16 Jun 2025 14:27:38 +0000
ROA not after: Wed 23 Jul 2025 14:27:38 +0000
asID: 133180
IP address blocks: 154.83.4.0/24 maxlen: 24
154.94.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100071 (0x186e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 14:27:38 2025 GMT
Not After : Jul 23 14:27:38 2025 GMT
Subject: CN=685029e0-d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:95:e0:21:de:51:de:29:48:87:23:8d:23:
b3:96:e8:5d:22:f8:1f:f4:4e:de:06:9f:ca:55:1d:
a2:ff:4c:fe:b3:af:af:22:bc:e8:dd:34:29:72:00:
58:5c:67:f7:a2:8a:15:a9:79:e9:70:8d:cc:72:8b:
ad:27:aa:c1:02:69:fb:e1:2e:b6:b1:76:25:d9:84:
53:bf:ce:63:15:5e:72:a2:b6:e4:51:77:6f:5a:33:
37:f0:ee:59:45:7e:09:62:ea:bb:f3:9a:b9:d3:e9:
64:c2:f3:80:25:ff:27:4b:18:87:32:6d:19:7e:76:
60:0b:4a:87:c0:46:cf:1a:f5:58:88:ee:4d:b2:2c:
84:a4:1d:11:b1:22:f8:79:2d:2c:4a:3f:36:85:37:
a8:cf:30:87:8f:df:65:81:b0:c5:96:45:c2:1a:4d:
67:3f:b4:0b:22:00:cf:63:98:b7:ce:9f:81:88:77:
e8:a9:78:ee:40:c2:b4:68:d0:51:71:b3:e4:82:ed:
ee:51:16:51:75:af:34:fb:31:e7:9d:9e:a2:51:7d:
0e:e1:92:bb:42:d0:bf:03:4a:87:f6:3c:09:42:88:
d0:12:96:6e:a3:be:72:c9:8a:bf:fc:5f:92:01:fb:
51:a2:4f:56:43:f1:64:bd:39:ec:2d:9d:11:3a:f5:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:16:2B:35:74:A5:50:19:33:DE:41:93:C3:5A:DA:1D:44:26:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/108FE9DA4ABE11F0B79CD1E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.4.0/24
154.94.16.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a4:d5:59:05:94:97:29:0b:c0:ea:37:7f:27:0f:43:86:f8:
e6:99:49:19:11:e6:37:7e:97:97:cc:04:c5:1e:df:31:01:49:
49:ba:dc:e6:c9:cf:d6:11:de:dc:e8:ed:da:0a:e6:6e:c9:60:
87:c7:c2:69:c3:00:0b:1c:04:a8:59:94:ea:fd:a8:7f:96:2b:
9c:ff:10:33:6f:45:c1:02:eb:55:a0:1b:07:2b:85:17:8c:d6:
15:aa:7b:5a:ba:03:fe:62:7f:6b:ef:0e:cd:97:70:36:bb:9d:
3f:44:c4:d2:32:96:12:4a:a9:e0:04:4c:1b:14:9f:1e:d2:cd:
ce:ae:c5:cd:0b:6a:91:90:35:82:95:b0:cc:14:02:23:fd:6c:
1c:f4:9d:fa:84:3b:87:a2:01:3d:f2:f8:7f:69:d9:6e:3a:0a:
96:16:4b:4c:8d:ca:7a:da:07:08:03:23:f7:f9:ef:f5:8a:de:
2f:0f:38:4d:57:a7:65:20:83:64:b9:3c:24:25:31:e4:ea:35:
ef:35:d7:a8:26:fc:48:bd:87:1a:9a:57:72:12:cf:af:a8:19:
7d:ff:e2:b7:9b:9c:e8:2e:e8:51:a0:7c:8f:c3:f4:09:4b:2f:
f9:50:4c:84:0f:f5:ed:63:0c:07:67:c4:c2:8a:95:dd:01:df:
9b:c6:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:14:08 2025 by rpki-client