Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E70EE85C514A11F0B2FE1A86DAE4EC9C.roa
File: E70EE85C514A11F0B2FE1A86DAE4EC9C.roa (raw, json)
Hash identifier: z55buWf35YWnCgZfN9l3VLaODrCp0t1QBCKy4zVW/cQ=
Subject key identifier: AF:EC:AB:48:DD:AF:1B:BF:CF:C6:13:5E:40:DD:02:E2:ED:51:71:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E70EE85C514A11F0B2FE1A86DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 22:31:00 +0000
ROA not before: Tue 24 Jun 2025 22:30:55 +0000
ROA not after: Wed 03 Sep 2025 22:30:55 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100568 (0x188d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 22:30:55 2025 GMT
Not After : Sep 3 22:30:55 2025 GMT
Subject: CN=685b2724-9a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:48:bc:6b:1e:1e:26:fe:28:38:76:a2:5e:
23:db:9d:bd:49:f0:9a:c1:6d:d3:21:6b:ac:85:64:
4e:d7:fc:a9:eb:a1:d6:ea:b6:31:50:6e:51:08:08:
5e:f3:37:e8:18:bf:d1:02:d0:e1:03:d1:eb:03:03:
eb:fd:6b:46:29:1f:73:80:53:c8:69:45:01:cb:1d:
02:58:31:a2:ff:33:ac:28:6d:79:ae:ed:12:82:ca:
2d:52:22:4d:a4:76:71:26:f6:a4:21:3a:70:1e:35:
ef:07:f5:b8:07:24:5f:e9:0c:03:81:a1:67:c4:e9:
c8:78:a0:56:4a:3e:08:64:cb:ca:f4:d9:f0:2d:dd:
e4:9d:09:0a:4c:6b:c7:08:5c:04:fe:50:f3:d8:24:
58:82:fc:3f:40:92:a5:e2:d3:08:eb:e9:b0:a7:b9:
2d:13:2f:6f:18:bb:64:61:a9:d3:9d:47:57:b7:83:
91:96:e2:67:73:c9:98:6a:a8:65:be:1d:2c:4f:ae:
42:f5:bc:7f:b3:74:e6:7a:6f:b4:14:2f:28:16:53:
dd:0e:86:06:6a:47:47:77:ce:e4:f9:5e:dc:e3:4e:
28:c5:96:ac:bb:11:54:42:6e:a9:97:22:02:de:f9:
a7:31:16:8b:e7:54:01:d6:83:97:c1:32:04:80:11:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:AB:48:DD:AF:1B:BF:CF:C6:13:5E:40:DD:02:E2:ED:51:71:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E70EE85C514A11F0B2FE1A86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1b:09:ee:06:59:cc:2f:ee:14:4e:9f:4c:73:3f:cb:1c:ca:
f9:81:84:57:19:f9:f3:eb:5e:bc:3e:94:44:b5:00:8c:46:69:
c6:7e:2e:90:34:9b:1b:b8:a1:aa:f0:17:3d:53:72:63:f6:1a:
a3:6f:a1:f0:bc:fd:27:76:73:43:47:50:fc:6d:8a:60:e9:d1:
ee:5c:73:59:9d:13:27:84:7b:68:eb:c4:5d:39:eb:52:f3:f8:
d3:97:73:75:0a:5e:b4:30:41:01:8f:de:67:f0:d8:f7:f7:d1:
c4:40:8a:03:31:6e:bc:a8:a8:c1:de:41:1b:ff:77:f3:8e:ce:
d3:68:a2:37:d4:c2:5b:9b:23:39:96:69:d6:83:34:a4:e5:b4:
e7:14:34:b9:0d:f1:da:b2:19:79:9e:05:22:52:de:f7:e5:24:
6f:ba:8f:f4:55:54:f1:a6:07:f4:ce:c1:84:ba:f4:e9:f5:87:
05:99:28:58:a9:b9:bf:63:8a:94:e0:29:1b:67:cb:2e:e2:36:
dc:c1:d3:aa:53:31:3d:44:28:b2:6a:ac:08:9d:2a:2d:b9:8c:
47:b7:94:b5:1a:45:18:67:23:92:cf:2d:7b:be:18:f2:c4:82:
0b:a4:54:64:fa:ae:1d:f6:f0:bf:52:c6:12:e2:ff:95:75:c7:
82:e5:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:32:53 2025 by rpki-client