Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DDFAAC7F4211F0AE0BE7F5DAE4EC9C.roa
File: 26DDFAAC7F4211F0AE0BE7F5DAE4EC9C.roa (raw, json)
Hash identifier: OPU/KckK2WMUasW/XDwGkAjvb+XmilxoHp1WpXpnpM0=
Subject key identifier: BD:6B:41:A7:2C:8E:54:E9:C0:DA:FB:15:76:32:A3:FD:9D:22:F3:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019488
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DDFAAC7F4211F0AE0BE7F5DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:24:15 +0000
ROA not before: Fri 22 Aug 2025 10:24:10 +0000
ROA not after: Sun 31 Aug 2025 10:24:10 +0000
asID: 23764
IP address blocks: 154.209.21.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103560 (0x19488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 10:24:10 2025 GMT
Not After : Aug 31 10:24:10 2025 GMT
Subject: CN=68a8454f-c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:42:33:1c:f8:f4:c1:22:ad:a3:d4:fa:a7:ae:
8c:72:f5:65:92:de:a5:25:c3:9e:d8:08:a4:13:3d:
65:b5:f6:08:b0:87:f2:87:6c:69:82:32:3e:8a:33:
8f:bc:c0:07:80:c2:5b:1c:01:95:10:57:ba:a9:be:
cc:96:f2:17:ec:e7:6f:b4:95:b1:89:07:a7:3d:ae:
44:bb:ca:4a:44:03:83:7d:4b:1d:06:a6:d5:6c:c9:
b5:bf:c2:98:90:9c:0d:2f:12:9a:66:74:9f:1f:a4:
f1:a8:54:3c:e6:11:4d:22:1e:94:03:22:91:82:97:
a5:12:1c:1e:7d:ba:c9:d7:81:51:f3:b5:7e:09:52:
bd:f4:fa:87:5d:52:22:0b:f5:b3:c2:37:eb:98:97:
e7:3a:dd:b3:0e:47:19:cf:f2:c0:f5:44:05:1c:5b:
5c:a0:d9:2f:fe:9a:51:fa:c4:cb:16:fb:7f:9a:31:
e7:54:ef:c5:e0:4a:fc:e0:cf:ff:b5:53:d9:a4:31:
b3:a8:ae:26:21:cc:cc:fb:0d:7c:02:48:6d:a6:70:
8c:6e:46:ce:d9:dd:0a:1b:5d:a5:52:84:89:6d:04:
48:02:64:c7:e1:d8:93:0e:dc:ee:f2:43:35:f0:04:
3f:18:77:5e:ea:06:95:c8:5e:dd:5d:20:5e:13:99:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:41:A7:2C:8E:54:E9:C0:DA:FB:15:76:32:A3:FD:9D:22:F3:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DDFAAC7F4211F0AE0BE7F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.21.0/24
154.209.23.0/24
Signature Algorithm: sha256WithRSAEncryption
77:96:c4:2e:22:bc:ed:ce:4f:93:3e:14:79:b7:90:16:61:fe:
6e:4d:80:4d:b0:17:aa:44:26:2f:b7:aa:49:04:f6:37:a2:35:
29:93:12:f2:77:b2:54:02:1c:53:2b:06:29:8f:66:79:97:66:
f0:5a:73:27:2b:0a:18:9e:ec:2e:9f:ca:3e:68:15:03:94:69:
84:42:fe:2b:05:6b:a5:33:0f:8a:94:44:72:83:21:0e:0e:98:
c9:53:39:4b:de:e1:fe:a0:52:4b:33:02:22:4f:8d:f5:05:cd:
f3:a4:e6:e7:03:fe:e0:cf:26:66:dd:1f:c0:d6:ad:04:c8:b9:
8a:54:ab:59:b2:52:a0:5d:20:8c:48:da:1e:18:3f:a5:cd:83:
29:f3:21:ac:a6:c4:43:a8:de:ae:a3:f3:18:49:f2:aa:8c:94:
dc:cc:d1:15:36:ad:f3:6b:f0:a5:b0:a2:d2:ce:ce:9e:4c:c8:
7d:d2:98:2f:f2:37:0d:c9:61:54:1c:13:02:75:eb:5f:d7:62:
1a:15:41:db:1f:66:9d:9e:f5:61:99:06:2f:ae:1a:7a:ec:9a:
94:3e:91:da:11:65:97:c3:7d:79:2d:bc:f6:8b:a1:ee:f2:6a:
45:3e:ec:28:b2:70:4d:26:a2:b2:35:2b:5b:19:ae:e5:aa:3f:
a4:c9:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:25 2025 by rpki-client