Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663A22864B4711F08034BBE5DAE4EC9C.roa
File: 663A22864B4711F08034BBE5DAE4EC9C.roa (raw, json)
Hash identifier: jBb2L/PTns0dPkZW0iFWH3nnDFQwZ/FhKinti5uoVd8=
Subject key identifier: F4:F8:55:EA:BC:B5:20:E0:01:15:2C:0C:EB:6C:D8:BB:67:AB:D0:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663A22864B4711F08034BBE5DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 06:50:48 +0000
ROA not before: Tue 17 Jun 2025 06:50:43 +0000
ROA not after: Sun 27 Jul 2025 06:50:43 +0000
asID: 135845
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100074 (0x186ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 06:50:43 2025 GMT
Not After : Jul 27 06:50:43 2025 GMT
Subject: CN=68511048-aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:4c:9c:95:b8:cd:7f:5e:cc:6a:9a:d2:1d:
4e:92:8a:55:c0:60:6f:a5:69:ba:16:de:1e:89:fb:
bf:a3:24:ea:f4:e7:ec:ba:19:da:78:0e:18:96:bc:
2b:e8:e1:fd:48:1f:70:16:49:19:e5:6d:b7:93:77:
1c:41:dd:59:5a:fe:24:30:55:bd:57:0b:ea:c4:14:
02:1c:9e:51:b9:48:06:11:5f:b8:66:d9:c2:6d:13:
a0:f8:e0:eb:9e:1f:ed:35:b5:92:04:50:27:70:bf:
58:4d:a9:57:de:39:f7:31:d2:da:94:84:81:f6:4c:
7f:2c:ca:6e:3f:77:7c:0a:31:2c:da:42:c0:2e:85:
b5:1e:9e:9b:4f:21:8f:55:3a:a5:54:92:c7:8c:48:
07:5c:11:4f:11:0b:a5:6b:1e:66:f0:be:28:c3:2c:
a8:eb:82:8d:36:5d:bb:f9:dd:27:f7:ee:52:69:e0:
e3:34:21:ad:1e:2d:e7:0d:24:83:f9:12:eb:e2:44:
b4:e8:d5:77:a5:7f:f3:63:3f:3a:9c:fc:e6:d6:d5:
3d:2c:5c:90:a0:5d:77:96:db:93:cf:21:7e:04:2d:
ec:ea:ac:eb:12:d7:08:d9:b5:f2:ca:13:16:9e:22:
3d:f0:79:34:a4:66:73:95:fd:2b:35:d7:47:23:13:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:55:EA:BC:B5:20:E0:01:15:2C:0C:EB:6C:D8:BB:67:AB:D0:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663A22864B4711F08034BBE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:b6:e7:c3:dd:5d:e4:24:74:99:d8:de:66:fd:37:5b:e2:fe:
43:f9:5d:44:83:24:dc:2c:82:8d:33:96:1d:76:ba:9b:52:c6:
2f:63:cf:98:d7:98:33:b8:2a:59:5e:d7:bd:09:49:aa:02:bf:
2e:cf:5e:69:93:1e:0b:2d:43:09:71:0f:a8:b3:4f:16:55:79:
b9:16:a7:32:72:b4:c1:a0:1f:f5:e0:ae:1a:60:dd:c8:51:d0:
f9:2b:77:5d:2c:5a:55:3e:ab:de:22:fe:34:8a:eb:21:25:61:
f8:8a:93:18:02:ef:bd:a8:5c:a4:b7:a5:25:6c:c0:01:ac:4f:
af:4b:09:7f:ed:6f:f6:d2:74:de:ae:53:85:9e:3c:be:4e:0e:
4f:40:39:c7:02:6b:a1:2e:c8:3d:19:33:73:8b:2c:01:4a:6c:
98:06:ff:18:dd:47:15:29:b6:f3:ff:3e:c2:6d:2f:a2:fa:16:
ce:d4:63:e6:e7:69:b9:41:ca:24:d0:b8:93:0b:70:d0:12:0e:
71:04:cb:93:4e:f5:f6:a4:a1:27:9a:6c:a8:85:6b:60:22:0f:
2d:d5:d4:9b:2a:bd:71:5f:7f:07:c7:26:e4:31:f4:61:68:5b:
63:80:50:7e:bf:a6:22:84:5b:15:50:f6:93:ab:08:96:d2:3c:
dd:af:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:41:45 2025 by rpki-client