Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1813936A572E11F0A09C4EDDDAE4EC9C.roa
File: 1813936A572E11F0A09C4EDDDAE4EC9C.roa (raw, json)
Hash identifier: +FRSTJiX9Whm9Ch4YaLIBEGgYXLjkTaZ5PvVoJJN3OQ=
Subject key identifier: 1B:5C:D6:4A:60:BF:C4:E3:40:B5:D1:C9:FE:20:8E:5D:71:15:67:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1813936A572E11F0A09C4EDDDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 10:19:54 +0000
ROA not before: Wed 02 Jul 2025 10:19:49 +0000
ROA not after: Thu 07 Aug 2025 10:19:49 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100788 (0x189b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:19:49 2025 GMT
Not After : Aug 7 10:19:49 2025 GMT
Subject: CN=686507c9-ac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:85:e3:43:22:2a:6e:bf:67:e3:07:76:b1:81:
dc:05:86:7c:3c:43:f8:59:ee:11:c1:ae:ea:9b:5c:
d7:c7:0b:09:cd:c2:67:8a:3b:4d:64:cd:b9:8f:35:
e1:6a:96:6d:0e:4e:a2:d9:f1:94:e0:c6:d0:f8:e0:
f3:b5:87:a9:b9:27:57:83:17:46:af:50:e7:b2:33:
8a:0c:7e:97:95:09:64:72:f5:c5:51:f1:20:d1:c3:
13:aa:e1:ba:c8:37:5b:e9:49:9f:5d:21:3a:20:b3:
91:a3:53:eb:f6:af:d1:57:0f:90:97:29:f0:c2:00:
8e:7f:b1:9f:7a:fa:00:df:c2:73:c3:d5:27:60:f0:
9f:33:6a:68:8d:1b:c4:c4:48:1c:d9:3d:f7:4f:58:
9d:a9:b9:d7:74:8d:a8:0e:f5:dd:c7:7c:00:4e:20:
f8:03:34:1e:17:5a:91:c3:34:c8:1e:37:53:8f:5f:
1f:2d:f0:78:68:74:a9:8a:f8:0e:15:a8:7b:3e:bb:
9f:82:d5:07:56:5f:c8:a1:29:1c:fd:0a:09:af:1a:
68:bd:29:52:a1:5d:f3:2e:f0:12:b7:7d:e2:7d:60:
b4:35:19:5e:99:69:54:7d:15:1e:6d:2f:a1:eb:03:
cc:c2:6e:e2:64:04:74:93:a8:f0:2d:9b:8e:4a:c0:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:D6:4A:60:BF:C4:E3:40:B5:D1:C9:FE:20:8E:5D:71:15:67:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1813936A572E11F0A09C4EDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:e8:3f:ef:ca:78:91:56:84:0a:6a:bd:b8:e4:0f:10:e8:72:
e3:ee:d3:45:4d:f5:24:39:d0:a4:23:6b:2d:4e:5d:88:36:7e:
c1:03:3b:e6:22:8a:4e:a3:8b:d2:b7:17:77:2c:b9:ef:8d:9e:
e1:69:d6:99:cd:bc:50:2c:6c:b8:99:3a:48:87:fd:18:8b:50:
5d:5f:22:0c:62:4c:c4:0b:0b:a0:36:dd:a9:30:cd:de:6b:95:
5f:80:91:16:e1:93:ed:dc:5e:95:9f:5c:12:d5:c1:f8:75:f8:
cf:dd:1f:f0:91:04:54:df:30:c2:be:ba:3f:38:bc:8a:9b:30:
48:d5:a8:5e:9c:2b:6e:cc:b0:b6:ef:6f:a2:39:31:f5:3d:4a:
28:6d:5e:1b:af:34:48:ce:52:cc:a9:17:5b:e0:ce:58:6f:b6:
de:f5:98:26:34:31:bd:14:6a:4c:26:37:2d:18:e0:4f:75:b9:
12:3c:22:cb:a0:42:61:cc:47:46:38:0b:2a:3c:6e:80:39:4d:
e9:29:f7:cd:93:b4:a1:99:29:24:e3:a4:3e:69:41:13:71:6e:
f6:24:3b:a1:6c:17:44:68:2b:0c:6d:33:4e:0c:b1:a0:9e:8c:
0d:5a:cc:79:27:9d:e9:cc:27:ea:05:b7:ee:94:08:8d:42:07:
56:dc:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:14 2025 by rpki-client