Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF62C90622911F08ECED0AFDAE4EC9C.roa
File: 0BF62C90622911F08ECED0AFDAE4EC9C.roa (raw, json)
Hash identifier: x/Tt1IFwAZ+A+18hdIP7Hb31B/8Dy0Bu2C95qZzpws8=
Subject key identifier: 5A:72:46:5C:60:09:E0:73:E3:02:B7:68:1E:9B:C6:E9:4E:EC:02:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF62C90622911F08ECED0AFDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 09:41:29 +0000
ROA not before: Wed 16 Jul 2025 09:41:23 +0000
ROA not after: Thu 14 Aug 2025 09:41:23 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101873 (0x18df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 09:41:23 2025 GMT
Not After : Aug 14 09:41:23 2025 GMT
Subject: CN=687773c8-9b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:e8:24:a8:7d:63:39:2f:79:b5:db:de:8f:
7a:23:71:36:78:63:75:a5:b4:09:37:a3:c8:c5:cc:
a4:71:2e:fb:8e:0e:11:cd:87:04:07:60:a7:32:3b:
52:7c:60:79:98:91:95:b4:a9:41:d1:92:80:ff:3d:
11:e2:86:2e:a8:ce:21:2e:f6:6b:cb:01:96:a6:a3:
9a:13:e8:71:15:07:64:9e:d4:70:c2:bd:97:ed:9b:
7a:fe:ba:57:cb:4f:47:ea:5e:d1:6d:92:db:e2:0b:
c9:e5:af:50:a6:b8:93:bd:e6:46:01:65:b9:b6:a5:
a7:7a:34:ed:fa:fd:8c:98:ce:36:77:4a:0c:fc:48:
ae:d5:8f:d5:9f:69:3e:ee:75:fe:0b:f9:64:85:cd:
c0:d7:77:57:74:12:f7:3e:21:47:74:b6:f1:cd:67:
59:52:93:a5:a7:08:24:31:50:9b:10:5a:8f:5a:37:
14:6d:9e:b7:ce:9f:25:64:c2:f5:7e:31:9d:27:46:
96:87:f2:d4:97:3c:4c:06:b9:5a:9f:19:93:60:41:
20:1a:60:59:dd:b1:e0:c5:b1:5f:37:df:99:82:42:
a3:0c:c0:66:05:3a:df:09:35:68:24:a8:69:2c:10:
7b:e6:cf:e9:ec:aa:52:ce:ba:7e:16:29:26:03:78:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:46:5C:60:09:E0:73:E3:02:B7:68:1E:9B:C6:E9:4E:EC:02:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF62C90622911F08ECED0AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
95:31:c5:44:a9:3a:93:4e:a1:44:d0:e0:3d:8b:bc:b1:b5:a0:
d7:31:c2:2b:ed:b4:92:40:51:d2:d5:ab:3d:f6:f6:8f:43:60:
f8:55:87:a5:39:b0:9e:35:04:30:98:6f:9f:3b:36:91:0a:7d:
e7:8b:f6:1a:94:af:2c:a5:62:ba:23:4b:a2:03:e1:e1:d2:9b:
80:cb:46:11:8b:46:ae:46:d7:45:3c:ad:cb:09:d9:65:e8:26:
fa:98:2b:d6:41:07:71:1d:7f:61:ec:e3:48:54:fb:21:e2:4d:
5a:b9:e8:87:8a:a5:c3:22:fa:08:8e:08:43:1b:6c:e0:78:61:
ef:73:e2:1a:3d:8f:bc:31:2d:84:b1:b2:51:85:89:86:d7:7c:
b1:6a:31:f8:6c:f1:01:8f:0a:e4:79:99:8d:21:fe:f0:77:34:
0d:ab:c7:53:df:5f:a1:4d:90:56:57:1f:ed:fd:cc:b8:42:61:
db:3c:81:9e:8c:30:52:94:e7:56:a7:4d:23:a4:12:10:bb:77:
28:05:2b:00:86:fc:21:c0:53:ef:e6:d5:c8:50:2f:c1:3a:56:
be:47:50:0f:97:78:44:f3:8b:3b:69:0a:aa:51:51:a7:8b:c7:
cb:2b:6b:ea:3e:83:48:d5:35:97:b8:1d:92:4a:8e:b3:d3:b7:
58:4e:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client