Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD722AA525611F0A0FCC9E2DAE4EC9C.roa
File: 2AD722AA525611F0A0FCC9E2DAE4EC9C.roa (raw, json)
Hash identifier: cD+3d82Az46KfEP3c2Ztq852WNhmPlHYFtgYKdvjbPE=
Subject key identifier: 98:3E:47:68:6E:4E:59:70:EB:93:C2:9C:B4:2A:F1:D3:E4:16:C2:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01890A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD722AA525611F0A0FCC9E2DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:24:09 +0000
ROA not before: Thu 26 Jun 2025 06:24:04 +0000
ROA not after: Wed 16 Jul 2025 06:24:04 +0000
asID: 214432
IP address blocks: 154.89.194.0/24 maxlen: 24
154.193.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100618 (0x1890a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 06:24:04 2025 GMT
Not After : Jul 16 06:24:04 2025 GMT
Subject: CN=685ce789-f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:ac:89:61:f9:80:61:60:50:7f:fd:f9:ef:
7e:ce:37:00:1d:ff:88:ac:83:b9:e0:b4:ba:fb:90:
d2:f8:29:42:4b:87:c0:c0:81:47:30:f2:83:2c:dc:
84:d0:6f:8f:c4:29:4c:32:a9:d2:24:b9:a4:30:64:
71:e5:2b:7b:2f:f0:eb:5f:c6:f8:a2:ad:58:0d:aa:
4c:66:21:a5:77:14:9f:ce:6c:a6:de:b4:70:a2:6c:
cc:b3:67:a9:2d:81:66:18:9d:df:3e:1f:a7:45:6a:
40:0d:b1:da:f1:93:b7:3c:26:6a:61:51:08:6b:8f:
74:0a:60:bc:46:72:ae:57:ef:7b:9c:ae:9f:b7:be:
f7:9b:7b:77:23:24:28:54:06:10:18:5b:bb:11:66:
0f:5c:fc:19:cd:eb:cb:e1:c6:fc:9c:ff:83:37:bf:
35:b5:eb:93:e8:8c:61:d4:88:c4:a3:89:3c:ad:13:
46:fa:5d:98:a3:45:32:cb:1e:a3:1e:13:6e:1d:66:
30:24:67:d7:a8:e2:79:ee:a2:4c:51:f9:cd:2e:80:
e2:73:a2:45:9e:18:fb:40:5c:fb:e4:bc:16:7e:fe:
86:b3:15:3a:dc:49:11:4a:b4:1d:03:9b:ef:e9:0e:
09:56:49:6d:6c:bb:a5:12:c9:39:cd:72:bf:ac:e2:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:47:68:6E:4E:59:70:EB:93:C2:9C:B4:2A:F1:D3:E4:16:C2:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD722AA525611F0A0FCC9E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
154.193.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:71:5d:b3:fb:05:7a:c6:45:88:58:06:ca:3e:33:e9:ee:80:
51:4a:16:a5:14:09:88:5e:86:33:74:f6:db:94:62:85:ba:17:
97:c3:c9:43:38:ca:09:0b:4f:45:0b:f8:c2:f0:ed:a8:81:bd:
7a:a9:35:6b:0f:1c:2a:f1:af:4b:24:84:f5:0b:c8:da:6a:f9:
63:71:5d:5a:ef:8e:f8:66:cc:ec:2e:e0:d0:72:f1:c6:f0:13:
fa:74:1e:d0:87:b3:be:c0:e9:4a:47:bb:11:a9:9f:c5:74:cf:
a0:98:20:7d:ae:b9:35:03:98:13:f7:10:74:e7:1d:23:9a:bd:
dd:ad:19:e2:e6:44:8d:b3:9a:f9:6c:ec:ef:69:21:4d:ce:91:
1d:ef:b3:48:9a:79:07:1e:21:2c:68:40:d2:71:b8:2e:aa:59:
5a:67:31:80:fc:8e:e1:bf:81:60:4e:1e:49:36:63:96:58:1c:
29:5d:a3:71:63:73:40:cc:e0:f4:9b:94:99:34:1b:7a:f1:41:
4e:87:6f:89:f8:5f:dc:07:20:3d:8e:ef:7a:5f:75:22:ee:8e:
e8:25:9a:76:39:59:1c:2b:08:74:af:c1:6f:f9:05:92:53:54:
d2:93:ea:6c:a6:0f:74:4a:14:71:0c:ea:f6:38:04:b8:f3:30:
40:4c:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:56:32 2025 by rpki-client