Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBA98D145B2211F0A20E2EA0DAE4EC9C.roa
File: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (raw, json)
Hash identifier: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=
Subject key identifier: 23:DA:52:86:A0:3B:A2:F2:68:2A:FD:3E:15:39:95:A3:C4:BD:65:7B
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 071A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBA98D145B2211F0A20E2EA0DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 11:09:33 +0000
ROA not before: Mon 07 Jul 2025 11:09:27 +0000
ROA not after: Fri 10 Jul 2026 11:09:27 +0000
asID: 60171
IP address blocks: 102.177.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Jul 2025 00:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 7 11:09:27 2025 GMT
Not After : Jul 10 11:09:27 2026 GMT
Subject: CN=686baaec-c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:78:91:99:e7:ff:91:85:0f:b9:c9:57:6e:
99:a8:d6:2f:16:4c:ef:81:05:c5:dc:37:a3:c6:b3:
d7:92:56:1b:47:d4:64:5e:17:0c:ea:a0:a3:1d:2e:
81:2f:3f:92:11:93:45:4d:1e:e5:9a:6c:6e:19:5d:
e7:c9:a1:c0:99:0f:6c:22:a8:c0:f4:d4:d1:f9:bf:
e2:c6:dc:36:d6:4a:1d:82:7c:5f:42:9c:76:60:af:
82:97:36:4f:d6:af:0d:f9:5c:34:a4:42:dc:29:e9:
f5:8b:dc:ad:54:67:df:21:02:fc:cc:24:90:67:84:
7e:bb:31:51:42:c1:5b:80:45:43:dc:dc:b5:d8:89:
ad:7b:f7:58:be:3c:16:4b:52:e8:99:99:b9:8c:87:
30:47:5a:73:17:d0:55:5d:92:7e:39:40:5c:a9:c6:
8d:e9:66:92:1c:41:4c:09:e0:c1:c4:36:90:8e:44:
35:18:ae:a2:49:0a:65:74:5e:dc:6f:a6:5f:45:0a:
ba:39:f6:0d:6f:69:87:70:4c:71:a3:06:2c:00:82:
50:09:9d:7a:06:ad:19:e1:b7:44:b5:93:31:ff:1e:
2f:fd:b1:79:f8:e7:5e:4e:ed:66:82:72:19:2f:c6:
71:1c:5a:7e:20:9d:9a:0b:27:2b:45:84:b1:89:9e:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:52:86:A0:3B:A2:F2:68:2A:FD:3E:15:39:95:A3:C4:BD:65:7B
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBA98D145B2211F0A20E2EA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.155.0/24
Signature Algorithm: sha256WithRSAEncryption
34:25:1d:4e:13:4f:95:59:a0:70:2a:56:24:f9:4b:dd:ac:70:
47:6a:24:68:9f:67:fc:56:b4:be:b0:1d:cf:2e:0e:f7:db:8e:
26:2d:ec:9f:1e:41:11:a7:16:e5:46:89:19:81:20:b1:a5:01:
87:a0:b7:09:8c:63:d4:f9:e5:ce:c7:70:91:10:ac:dd:c3:75:
b7:2c:bf:cf:1f:1e:6e:cd:5a:29:e7:7a:35:e6:77:45:ab:51:
c7:61:f6:53:85:7a:fd:1b:9e:72:7b:b2:83:74:d4:73:cc:d1:
3c:d8:c2:1a:43:8b:c4:c2:6c:61:d5:ab:a3:f0:6e:29:f0:49:
21:08:2b:20:a3:9a:c6:11:ca:af:06:6e:9a:04:11:37:21:16:
ee:c2:10:e6:99:60:54:19:16:b8:f7:2e:72:8d:ae:67:d9:23:
66:e5:23:9f:6b:df:07:9f:0b:84:f2:b9:96:af:e5:18:c9:23:
87:46:5e:36:dd:8a:f7:b4:78:ff:a4:31:f1:f1:51:44:1a:c1:
7f:5d:28:8b:82:3c:51:19:5a:28:23:fa:16:2d:a3:77:e3:89:
6c:db:ee:dc:5b:80:55:c6:45:e1:94:b2:b8:79:a8:a9:90:d3:
d7:52:d9:7c:2e:67:1f:00:62:5a:a2:13:22:91:b3:81:35:5d:
4d:41:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:50:21 2025 by rpki-client