Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284F8F18514811F0B6BFDBF2DAE4EC9C.roa
File: 284F8F18514811F0B6BFDBF2DAE4EC9C.roa (raw, json)
Hash identifier: igwagUl5hto6lL0GkvLLR9cLT1u1cC/xgbbR7jPCSSA=
Subject key identifier: F4:BF:EC:A8:DC:7E:B3:B5:0B:7A:4D:22:FA:E1:45:E8:3F:35:4D:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284F8F18514811F0B6BFDBF2DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 22:11:21 +0000
ROA not before: Tue 24 Jun 2025 22:11:15 +0000
ROA not after: Wed 03 Sep 2025 22:11:15 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100562 (0x188d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 22:11:15 2025 GMT
Not After : Sep 3 22:11:15 2025 GMT
Subject: CN=685b2289-c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:96:02:61:21:6f:28:01:ef:80:25:af:27:
44:cf:9e:c7:9f:61:cf:1d:c0:f0:bc:c0:58:40:57:
d5:bf:d4:ff:93:d3:9c:62:c5:27:91:f9:5d:97:61:
2f:9b:8c:08:71:0d:86:aa:b8:1a:18:8e:c6:f7:07:
28:52:b9:64:30:09:74:e7:df:97:e7:b4:36:da:af:
b4:f9:7f:52:47:ed:6b:70:6f:1d:cf:b1:9a:9e:0a:
9d:f7:b3:cd:0d:77:67:2d:b4:2c:f5:d6:e5:4b:ff:
b8:42:b5:87:8c:a0:db:45:57:75:e5:21:d4:d5:fd:
14:66:ae:03:8d:27:b8:d2:f6:35:9d:c7:07:6e:6c:
d5:c2:03:28:96:33:c5:b1:af:76:99:1c:6d:f8:78:
7e:a8:1e:50:b4:a8:ca:40:b4:f2:34:c5:e0:f1:a4:
3b:a7:64:73:a3:ed:ac:60:fd:1c:cf:f9:e9:f5:92:
8d:58:03:2d:f8:a4:64:14:10:76:c9:41:c2:4b:be:
84:59:ac:08:c5:5a:25:24:cf:61:8b:5d:d1:d6:49:
cf:53:50:22:cf:4b:1e:f8:ee:85:6a:a9:bc:14:b4:
60:e3:25:2d:3c:4c:4d:46:5d:7d:e1:cd:49:8c:47:
f8:97:d0:32:1e:82:70:36:68:6f:89:ab:71:6b:de:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:EC:A8:DC:7E:B3:B5:0B:7A:4D:22:FA:E1:45:E8:3F:35:4D:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284F8F18514811F0B6BFDBF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f9:95:94:8d:c2:7e:ec:da:d6:38:ab:7b:12:ea:56:11:12:
ab:7c:d7:00:e3:54:81:dc:ed:69:6e:7b:c5:48:ed:41:b1:5b:
61:b7:44:c1:58:59:07:cd:7b:cb:1c:8d:20:e3:84:74:13:9e:
b1:5a:be:e8:c2:52:f8:2c:f7:10:38:17:3d:d5:8c:5a:69:0d:
40:4c:cd:03:ce:08:20:be:93:24:c9:13:0e:68:f4:6b:72:55:
6a:b0:42:e7:a5:22:89:84:35:fb:80:b8:e6:f1:5e:01:8f:9e:
3d:dc:4c:0a:80:18:82:7b:d5:75:ae:10:98:8e:5f:30:40:10:
f3:96:63:c1:bf:cd:0a:2d:10:4b:02:73:20:da:89:6d:1c:20:
7d:58:c5:c3:c6:46:7a:db:76:c6:14:83:98:4c:a0:33:df:e0:
9e:5f:ae:67:48:36:f9:d3:f3:cb:c6:e7:07:30:c4:8b:7b:b9:
3b:0a:2f:fc:60:b5:d6:cf:84:d9:eb:50:94:22:5f:a2:f3:1f:
69:14:3f:af:26:3a:ce:21:14:c6:b7:13:6d:47:19:ae:43:69:
17:27:10:76:d9:16:4f:d7:45:a0:74:61:82:ad:48:f3:ba:48:
d8:91:95:23:40:37:d5:05:97:7a:98:82:a2:89:f7:ca:2d:24:
f5:d2:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:34:53 2025 by rpki-client