Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D99DCA43AD11F087C768DFDAE4EC9C.roa
File: 67D99DCA43AD11F087C768DFDAE4EC9C.roa (raw, json)
Hash identifier: 9KC0RbhoLPRZ/vqXYjAZ+BR9bwtbs7PHtJGWzocUZgY=
Subject key identifier: E0:BF:9F:7B:E5:8E:05:64:35:3E:9D:64:A3:77:6C:5D:5D:31:49:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018576
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D99DCA43AD11F087C768DFDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 14:40:50 +0000
ROA not before: Sat 07 Jun 2025 14:40:46 +0000
ROA not after: Wed 16 Jul 2025 14:40:46 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99702 (0x18576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 14:40:46 2025 GMT
Not After : Jul 16 14:40:46 2025 GMT
Subject: CN=68444f72-af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:70:cc:95:ca:fb:c9:0f:8d:7e:26:4c:7c:
d6:d9:0f:ae:45:00:93:93:c3:a1:0a:eb:b1:de:30:
9b:d1:e2:0a:58:e2:62:9e:09:34:fe:ed:0a:26:8a:
5a:6e:ba:01:30:9f:cc:16:21:20:ad:c5:7c:b2:1e:
a2:e7:f4:95:37:8a:b2:a1:15:db:53:86:01:d3:44:
b3:31:c1:92:c0:a5:c7:8b:09:9c:7c:3a:59:84:5f:
e1:21:ed:87:5a:8d:d8:cd:8c:55:31:62:5d:7f:4b:
69:2b:1c:fa:92:ec:d7:ef:37:44:90:a6:4a:54:e9:
da:4d:81:c0:b9:30:57:c2:c7:ce:3c:22:d6:d1:fb:
bc:86:18:5c:d6:61:b3:72:2b:03:03:24:58:f2:2a:
bf:d1:8e:20:b3:46:77:95:e3:4d:34:50:d0:ea:6f:
42:91:d5:67:9f:19:de:d1:54:23:5b:7f:a4:9f:71:
d6:df:3c:4c:76:8d:19:84:fa:94:46:16:48:5a:6e:
0e:cf:49:3b:3e:e5:2d:98:87:66:82:4c:00:12:07:
fc:29:b3:e2:d4:67:aa:4a:65:d5:09:e9:5b:24:be:
b3:f4:5e:43:60:b2:b1:27:a7:78:7b:4c:5c:a0:62:
5e:66:b5:67:cf:99:7c:22:17:dc:c5:ae:c5:6a:2a:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BF:9F:7B:E5:8E:05:64:35:3E:9D:64:A3:77:6C:5D:5D:31:49:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D99DCA43AD11F087C768DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:da:f1:51:f2:30:d6:e9:89:96:f2:c0:0b:2f:b3:62:c5:20:
34:6c:db:96:8d:97:05:09:58:6d:89:e9:ac:58:b4:fe:dd:f8:
1a:ec:4e:e4:d9:d7:c8:4f:73:d1:74:c5:33:df:49:c1:b8:c0:
6d:16:a5:f4:01:27:1d:58:2d:98:4e:d2:a1:09:3b:55:42:c7:
cd:8e:16:56:ce:97:b1:61:04:78:34:cc:18:e4:81:55:36:4c:
85:5d:de:11:6d:b5:2b:70:f4:d6:16:e6:dd:c7:0f:ff:c9:3e:
a3:32:53:c8:bb:1a:92:87:7f:24:ad:e1:e0:21:74:eb:68:f9:
6e:9c:91:c8:83:32:91:d4:56:c2:7e:4c:2f:29:da:a4:04:df:
97:77:cd:11:97:94:26:d4:4b:db:e5:47:87:1b:b2:81:d7:88:
c2:5f:0b:e0:e5:94:5f:9c:cd:23:03:3d:e4:b8:b1:05:3e:75:
e7:ab:27:a9:28:9a:9d:68:6f:91:3a:6a:b3:0b:3b:b7:67:c1:
df:5e:b6:17:ab:cd:91:e2:3e:7d:f1:3a:5b:7c:ce:c4:40:22:
25:0b:0f:6f:9e:31:c8:b5:86:b1:90:75:89:52:1e:24:a1:cd:
cc:35:7e:29:63:97:82:24:81:d0:c6:fc:31:45:1c:a8:b3:54:
8f:e2:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:49 2025 by rpki-client