Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50DE2D843AC11F0B604B6DADAE4EC9C.roa
File: A50DE2D843AC11F0B604B6DADAE4EC9C.roa (raw, json)
Hash identifier: gMC3cJq8Mae4ZHjHA/N5ZlFlRm23fVUEs26roBJJ3dg=
Subject key identifier: B0:0C:B4:58:01:7A:F6:18:C2:E1:D9:16:EC:CF:4F:E6:67:C9:28:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018574
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50DE2D843AC11F0B604B6DADAE4EC9C.roa
Signing time: Sat 07 Jun 2025 14:35:24 +0000
ROA not before: Sat 07 Jun 2025 14:35:18 +0000
ROA not after: Wed 16 Jul 2025 14:35:18 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99700 (0x18574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 14:35:18 2025 GMT
Not After : Jul 16 14:35:18 2025 GMT
Subject: CN=68444e2b-ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:44:27:85:a8:de:9d:86:37:f0:72:6c:d5:
87:5c:6b:d9:0f:45:0f:c5:01:37:6b:d3:78:b8:6c:
42:81:69:00:62:5c:84:d2:0c:60:33:24:e1:fd:6b:
37:80:b4:34:6d:c7:96:eb:cd:d8:6d:55:a3:ff:48:
b0:e0:e1:a0:77:ac:a4:73:a4:32:64:3f:07:c1:c7:
24:23:1f:b4:f0:59:e4:cf:25:aa:e9:ea:66:4b:92:
1a:3c:21:a6:a3:46:fd:ee:ee:ca:ac:54:d7:91:89:
04:7e:28:8c:47:fd:35:4d:23:30:fa:c7:8c:9f:fd:
a6:aa:61:d7:b8:21:7a:1e:9c:fc:70:fd:06:06:05:
01:70:21:35:45:69:cb:17:59:bd:dc:75:44:14:6c:
84:69:6d:9f:2c:1b:d8:7c:3e:e7:22:03:58:88:60:
99:01:60:b5:92:c4:58:eb:10:2d:fa:c9:f4:61:0d:
79:1c:80:84:7c:ff:53:6c:80:52:59:15:6d:1b:6e:
5b:17:8c:9e:28:cc:5a:84:85:b3:60:79:e5:a2:13:
83:6b:02:e9:de:13:01:42:6b:1f:9f:43:d1:48:3d:
07:4a:61:d8:ad:ce:6f:bb:bf:ab:f0:a4:ea:da:26:
92:5f:c3:23:d5:80:01:50:c0:5b:6c:ab:ba:e9:d3:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:B4:58:01:7A:F6:18:C2:E1:D9:16:EC:CF:4F:E6:67:C9:28:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50DE2D843AC11F0B604B6DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:df:8e:55:f2:04:12:4c:e5:54:0d:56:33:0e:ae:4d:65:ae:
e8:f0:34:8e:1d:f6:b5:37:25:46:9e:72:88:63:a9:e0:84:95:
78:03:bf:6c:b8:45:08:c0:6d:d9:7a:49:59:23:04:62:d3:88:
02:04:7b:4b:7d:b6:a6:f4:3b:89:b1:be:5a:e5:76:e8:55:94:
ad:9d:ea:71:1b:79:dc:96:02:34:45:f5:4f:6c:b2:1e:b2:2c:
2d:8f:1d:20:56:ec:69:c5:79:ad:8d:39:12:35:7e:aa:85:91:
df:b4:34:65:23:96:b0:ce:83:d2:5b:8d:13:85:64:f1:07:b1:
26:be:8a:c5:56:bc:82:9d:8e:79:b6:f8:63:b1:be:29:e3:06:
4c:47:3e:bf:55:37:ee:de:9e:66:5f:8a:04:75:01:ab:bb:b0:
3a:87:f7:10:ab:16:d4:06:21:06:4d:8e:e2:9d:1c:87:74:39:
0e:f4:7d:24:03:17:76:69:23:b0:bb:8f:d8:f5:33:d0:3b:13:
ee:5c:2f:f0:10:b4:fb:dc:34:96:ef:72:dd:40:7d:47:b0:f6:
44:67:61:a8:0c:a6:f3:ba:53:36:41:bc:f3:83:3a:8f:0f:de:
9a:d1:14:fa:92:89:0c:d5:02:ab:72:63:31:91:3b:f4:73:8e:
7c:e6:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:11:05 2025 by rpki-client