Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF6C7B679D111F0B21344DDDAE4EC9C.roa
File: DEF6C7B679D111F0B21344DDDAE4EC9C.roa (raw, json)
Hash identifier: RwTNbjlJ89j80nysYhOwoilKW4IJNrL3M2mLT4vTwqE=
Subject key identifier: 64:23:FE:99:37:08:29:92:4A:96:3E:99:53:C5:B5:0F:2A:F9:2C:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF6C7B679D111F0B21344DDDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 12:17:55 +0000
ROA not before: Fri 15 Aug 2025 12:17:49 +0000
ROA not after: Thu 25 Sep 2025 12:17:49 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102880 (0x191e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 12:17:49 2025 GMT
Not After : Sep 25 12:17:49 2025 GMT
Subject: CN=689f2573-30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:cd:fb:ff:f2:31:f1:b0:1c:86:e9:96:0c:06:
55:cb:1d:b1:1a:4a:0d:76:8c:72:b6:04:f2:9a:a0:
5b:32:f4:a5:4c:16:02:01:61:6a:9a:d3:43:e1:ea:
3d:95:79:bd:47:65:0c:a7:73:40:34:cf:d5:3c:0f:
1c:8c:1d:33:99:94:88:ae:08:61:af:6e:85:d5:09:
c3:af:50:b6:ae:10:68:04:30:e8:ab:da:e1:fe:94:
66:f7:96:b8:57:d9:06:21:58:d8:07:0f:62:e0:ef:
9c:25:67:43:d3:01:45:b3:72:8f:cd:32:4e:ed:e8:
b7:b6:f9:8a:7f:d4:0a:a7:f5:89:d5:8b:63:7c:1b:
6a:70:66:37:45:46:82:24:d2:e6:78:4e:f2:4e:48:
e5:1d:9a:9b:44:6d:5e:00:2c:67:71:7a:2d:c9:a7:
df:01:4e:3c:c9:51:f9:f6:d3:1b:38:20:a0:69:29:
16:7f:1d:9d:84:78:cd:04:6e:74:7b:c2:47:94:b8:
92:da:d4:3f:e5:1e:3b:94:37:1d:e5:8a:c6:21:f1:
1a:82:2d:51:a9:79:9a:8d:de:c6:12:8d:8c:28:6e:
a5:d2:76:c2:d8:12:96:4c:96:43:b0:68:d0:30:8b:
e2:06:aa:ca:6e:b9:94:38:80:b5:50:64:da:69:c9:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:FE:99:37:08:29:92:4A:96:3E:99:53:C5:B5:0F:2A:F9:2C:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF6C7B679D111F0B21344DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
75:64:05:ca:4b:b5:a4:62:52:fa:a8:f9:01:e3:c3:27:64:9d:
71:29:74:49:1a:95:39:4e:b0:52:4a:cb:a9:bb:f4:eb:43:bc:
b7:14:e7:5a:ab:b8:28:1e:ac:da:02:3e:0a:66:c0:75:2e:33:
b5:00:24:6a:f0:7b:fb:a0:e3:97:57:57:c5:34:4b:15:05:d5:
f5:38:24:bd:2f:53:f5:b0:c4:74:94:ea:d1:dc:b7:34:35:3c:
1d:e8:b6:2f:14:41:95:a9:da:c0:ce:29:c9:c4:fe:7a:50:51:
86:f4:c0:dc:33:ca:4b:59:27:5c:19:fd:c9:c7:fd:f6:57:a3:
95:f4:1f:3d:83:08:55:3a:38:0d:38:69:c1:77:75:e8:e3:af:
41:1a:f5:0e:61:36:6e:4a:78:21:16:98:c8:dc:32:f8:6b:ff:
67:cc:51:83:84:2a:a3:3c:12:4d:92:31:14:8f:5f:be:8c:b7:
aa:25:1a:25:32:07:fc:c0:90:7e:a5:25:ab:fb:b3:ec:a0:5e:
5b:a7:04:2d:a7:09:ff:e5:d3:60:b9:93:06:23:d9:16:25:d0:
5e:1d:85:d4:b1:f7:95:2f:b4:a2:a9:80:2e:73:9e:e6:d7:f1:
e2:05:f6:4b:9c:82:01:16:b3:d0:ec:d1:c9:96:95:c1:c1:ed:
bb:3b:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:52 2025 by rpki-client