Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0A9918E4B6C11F0970D3CD4DAE4EC9C.roa
File: A0A9918E4B6C11F0970D3CD4DAE4EC9C.roa (raw, json)
Hash identifier: LJx9eS8njKbCQGoQUTFTDpZFaKwrMMbg9Foac6kwxB8=
Subject key identifier: FD:58:79:CC:B4:68:2D:5F:9F:51:3C:6C:0C:EC:4A:1B:3E:AB:B3:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01870F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0A9918E4B6C11F0970D3CD4DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 11:17:18 +0000
ROA not before: Tue 17 Jun 2025 11:17:12 +0000
ROA not after: Thu 24 Jul 2025 11:17:12 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 13:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100111 (0x1870f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 11:17:12 2025 GMT
Not After : Jul 24 11:17:12 2025 GMT
Subject: CN=68514ebe-65f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:5e:5e:d1:06:c7:3c:63:ba:a7:38:be:75:
85:18:84:c1:97:94:31:78:39:b1:1e:86:30:3a:11:
9f:8a:af:dd:bc:77:69:af:68:79:1a:38:c0:79:8c:
e5:2c:9e:23:56:31:d3:5e:31:04:6a:96:ed:b8:e4:
c9:96:c2:65:c2:69:e7:ee:4b:a6:b0:a7:d2:e5:c0:
bd:35:fd:19:b7:bc:ac:43:bb:59:f9:7c:7c:ed:03:
17:70:32:2d:7c:5e:ee:4c:7f:8e:f9:17:54:ec:fb:
55:7b:25:f6:56:1c:89:25:df:3b:24:30:da:5f:d6:
d8:3b:cf:23:0d:2e:16:c4:23:ea:00:ef:4f:d1:c3:
2a:67:7c:24:1e:14:ee:43:43:38:46:91:4a:7c:7d:
3f:cf:09:55:97:ae:0b:9c:6e:08:ce:02:4e:9f:35:
17:16:a6:63:96:50:7d:f2:6b:42:33:88:5e:a7:f7:
97:77:b0:34:10:e4:da:2b:4a:25:a2:b2:10:7b:89:
a4:dc:2b:27:f8:d7:a3:ed:d0:bb:2f:db:ec:7d:5c:
b6:c1:01:68:f1:2e:88:a4:d0:8e:40:62:69:68:67:
93:fe:2f:76:43:9d:fd:fd:72:c6:6b:3f:47:36:b2:
6d:a2:71:19:fc:fb:39:b0:78:5b:c9:55:97:b2:69:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:79:CC:B4:68:2D:5F:9F:51:3C:6C:0C:EC:4A:1B:3E:AB:B3:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0A9918E4B6C11F0970D3CD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:74:99:56:b3:41:90:61:12:2c:2f:7e:5c:0e:c1:97:05:06:
d6:c0:bd:43:8f:bd:60:4e:c2:62:b0:04:e8:4d:02:69:05:07:
06:2f:a8:fc:ca:16:55:64:a4:63:bc:3c:3b:5b:46:9f:7a:32:
e6:5a:57:21:f1:fe:b2:93:f5:9c:fa:2f:3f:86:61:f3:fc:8b:
c6:89:3d:c8:e7:a9:86:6e:28:c8:cc:a7:26:8f:88:b9:a6:48:
a7:af:56:51:dd:08:83:e2:b3:9b:76:fb:6e:83:74:56:98:62:
7e:e2:14:0a:76:41:d4:76:7f:9e:11:e1:56:98:69:5f:59:8a:
be:66:cf:bf:64:6f:8f:40:e3:0f:ab:b0:59:7f:8f:8f:69:14:
6e:75:41:36:50:91:b6:8e:17:f2:7a:03:ac:f2:46:4f:6b:15:
fe:af:bc:d7:6d:4c:50:5f:e4:2f:74:d0:a4:bf:fc:da:b9:97:
3e:a7:c4:73:c2:6d:06:85:b5:38:59:4c:91:5c:46:be:6f:13:
28:f3:fc:7b:be:bf:ec:65:78:4b:6f:6c:5b:5b:a7:3e:0d:c3:
06:b3:09:e6:a0:04:b1:01:38:93:56:14:0d:c0:b2:3d:94:b1:
16:68:a1:10:8b:91:d6:fa:b9:14:03:7e:e0:8c:52:7c:3e:2e:
54:6f:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:43 2025 by rpki-client