Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6667F78079BC11F0A9DFB6D6DAE4EC9C.roa
File: 6667F78079BC11F0A9DFB6D6DAE4EC9C.roa (raw, json)
Hash identifier: KQzhngnoxM1ToqDikfXiGj7nqmFkKEAiSO0l5ldsZV8=
Subject key identifier: 76:77:94:1B:67:7F:C3:A0:EA:B8:E2:AB:5A:63:8D:FC:D6:4D:ED:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6667F78079BC11F0A9DFB6D6DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:44:13 +0000
ROA not before: Fri 15 Aug 2025 09:44:08 +0000
ROA not after: Sun 21 Sep 2025 09:44:08 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102870 (0x191d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 09:44:08 2025 GMT
Not After : Sep 21 09:44:08 2025 GMT
Subject: CN=689f016d-5a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:e4:7a:81:a8:3c:ab:15:2b:99:a2:ed:aa:
0f:bf:f2:21:77:5f:62:14:eb:6d:ec:67:9b:de:a9:
4f:74:51:cc:70:0a:65:f1:80:a7:3a:90:a6:a7:66:
b7:ba:a3:f4:cd:37:0f:c1:f7:5a:dd:4c:39:88:d0:
78:50:9c:7c:5e:b8:ea:57:4b:0d:26:d6:14:fd:10:
d1:1f:e7:16:a7:b4:94:6b:65:d6:96:77:b6:70:f7:
76:28:36:9d:27:17:88:e0:a9:7e:58:43:3d:2c:58:
db:01:ec:29:f0:a0:c9:0e:60:f9:92:38:74:83:98:
6f:c6:ee:5e:39:94:b3:60:e5:14:3e:c2:3d:eb:cb:
81:f4:c8:57:48:ed:ab:15:72:b1:68:ac:a9:12:14:
1d:fd:1e:0b:9c:0c:ba:0f:40:98:d2:6e:f5:21:19:
1b:f8:d0:ca:24:7d:13:01:06:19:65:b5:e1:50:00:
a7:7d:d9:68:db:d9:3a:62:4c:fc:bb:c1:c6:5a:f1:
f1:19:67:3a:d8:27:45:fb:f7:c5:67:b4:b9:c4:fb:
81:3d:9f:f3:ad:3b:5c:42:76:e8:43:7d:94:e1:d2:
2e:69:ab:74:59:98:14:c9:3a:1c:5b:a8:58:41:0d:
c4:8d:7e:dd:67:53:81:3c:88:d1:93:bb:75:ba:23:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:94:1B:67:7F:C3:A0:EA:B8:E2:AB:5A:63:8D:FC:D6:4D:ED:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6667F78079BC11F0A9DFB6D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:97:c1:e5:06:1c:17:b0:e5:1b:99:b8:ca:7f:af:6d:d5:a0:
bb:5b:08:da:c8:57:7c:72:0e:d7:5e:e2:1f:5b:f3:86:d4:80:
ed:d7:1d:c8:1d:4e:28:2a:cc:8d:d3:ab:b4:ac:45:7f:db:4f:
03:30:07:c2:e9:97:90:d9:d0:7e:c6:5d:96:03:95:23:8f:cc:
48:3c:92:59:1d:57:25:c3:5f:82:5f:17:36:1e:92:54:50:28:
73:2d:d1:a1:48:4d:58:0e:fa:7d:e1:5d:6f:0d:38:32:79:94:
9c:97:2d:c7:ca:28:99:53:40:ce:2a:a4:b7:ff:84:68:7d:57:
82:7e:0b:a1:55:6b:f9:ef:de:9d:5b:60:48:b4:6d:ee:4b:02:
c4:f1:b5:df:43:3c:50:f3:18:26:27:7c:f2:6c:af:01:8e:72:
27:0e:a2:22:ce:cc:66:51:55:2f:a3:22:be:34:17:98:cb:ce:
37:b3:11:59:a6:ac:00:cc:1d:e5:69:73:c5:77:1b:3f:6f:c2:
f0:7c:d1:fe:73:ea:1b:9e:76:d4:2a:64:5d:71:02:79:dd:b2:
89:df:af:54:bd:ca:a8:23:1a:44:d2:53:66:a8:57:ed:ee:f2:
1b:17:7b:13:dd:ee:d6:c7:aa:2c:65:4c:60:90:b4:8e:f0:6c:
1d:b1:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:04 2025 by rpki-client