Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41F55647ACB11F0995E55B4DAE4EC9C.roa
File: E41F55647ACB11F0995E55B4DAE4EC9C.roa (raw, json)
Hash identifier: kHoz42yJWjvlzrj24k3QR2QJxIW1JHDuChcHSXMLZWs=
Subject key identifier: 8E:78:4E:82:E1:81:F1:09:15:87:6E:E7:B8:C6:18:96:05:D3:2E:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41F55647ACB11F0995E55B4DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:07:38 +0000
ROA not before: Sat 16 Aug 2025 18:07:33 +0000
ROA not after: Mon 22 Sep 2025 18:07:33 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102895 (0x191ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 18:07:33 2025 GMT
Not After : Sep 22 18:07:33 2025 GMT
Subject: CN=68a0c8e9-551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:8c:a4:91:7e:de:f4:c6:dd:fc:e3:b2:8f:
80:04:f5:e9:a2:f2:ed:27:c4:fc:0c:83:a1:e5:bb:
61:c6:69:e2:24:17:c8:99:5d:85:9f:20:85:5e:86:
5b:7a:d1:7e:f2:24:b4:1a:df:b1:b1:6b:e7:3c:e1:
70:4c:bb:7a:a5:30:36:9b:8d:05:69:de:89:b2:13:
e8:e5:2d:8b:0f:d5:df:68:19:f1:e4:79:38:b4:48:
bd:4f:4e:e3:08:3f:20:cd:7c:e8:c5:90:c7:f7:02:
d2:a1:0e:f7:7d:19:d0:6a:24:15:28:8d:da:30:9b:
dc:40:af:4f:5f:17:7a:e7:7f:6b:40:c0:f1:54:b3:
62:a5:86:db:31:d9:ac:e8:94:09:c5:01:ba:2b:71:
85:d5:db:ea:b4:d6:7c:59:8a:d5:ba:4d:a4:32:8b:
80:b5:2a:af:25:5b:58:ca:6e:ec:8d:ea:58:e5:e6:
48:46:17:bc:9c:fc:40:ca:54:43:b3:1a:63:b3:14:
fa:89:54:2f:72:d1:01:02:4c:ad:26:a0:a1:a7:38:
9e:83:bf:1e:c1:c3:3b:46:fd:dd:7d:01:30:d5:5f:
b6:9c:1e:a1:fb:8e:6c:c4:2c:7e:27:c3:73:dc:63:
62:62:5d:46:42:3e:14:0f:4d:fd:f8:0a:b5:06:2a:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:4E:82:E1:81:F1:09:15:87:6E:E7:B8:C6:18:96:05:D3:2E:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41F55647ACB11F0995E55B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:71:32:23:5d:9f:e6:14:c1:98:6c:6a:7f:b4:cb:69:2b:
81:78:2e:5d:de:45:83:13:67:e1:4f:ee:0b:6b:57:ef:ec:54:
4b:3d:04:0e:24:81:63:f8:aa:7c:2e:43:03:ed:37:d0:e7:7e:
96:c1:c9:e9:e8:09:57:64:0a:81:73:94:42:93:15:cf:7d:2f:
02:ca:bc:87:42:b0:e3:e3:a3:ad:d3:65:bd:4a:4b:95:38:aa:
7d:07:78:5c:69:85:e2:ec:ce:6b:e7:91:5c:71:e8:1c:c2:e1:
a3:13:81:f9:29:d8:9a:1d:43:31:85:92:61:9f:d2:90:4d:68:
e9:12:9e:6a:05:35:6c:8b:01:85:2a:eb:5e:05:60:f1:25:b7:
0d:15:53:43:86:7e:80:61:14:33:17:9e:88:9b:27:d9:5a:f1:
82:73:cf:ea:d4:a4:61:d3:95:e9:46:9c:91:e9:c3:bd:76:d7:
f9:09:b5:5b:20:7d:ac:be:fc:ca:ee:14:ca:88:0a:8f:1f:47:
f3:f5:d0:80:ea:37:c7:2a:8e:bf:a1:5e:ad:4c:1c:0e:87:b2:
e6:25:37:5a:f6:7d:30:5b:5a:08:1d:29:7c:94:b1:24:79:91:
f0:3d:fe:6a:55:a6:a2:76:1d:ea:e4:5d:ac:f6:b9:c6:27:f2:
55:5c:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:41 2025 by rpki-client