Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EDE9EA65E4611F0890574D4DAE4EC9C.roa
File: 0EDE9EA65E4611F0890574D4DAE4EC9C.roa (raw, json)
Hash identifier: yP8M24W0lISZGEHE0wW6oaqTGhbyI+7ropY3U1xCqTk=
Subject key identifier: 1F:40:CB:A7:68:CF:E9:69:07:1B:85:CB:ED:11:A3:30:3E:E3:DA:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EDE9EA65E4611F0890574D4DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:59:04 +0000
ROA not before: Fri 11 Jul 2025 10:58:59 +0000
ROA not after: Sat 16 Aug 2025 10:58:59 +0000
asID: 29066
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101724 (0x18d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:58:59 2025 GMT
Not After : Aug 16 10:58:59 2025 GMT
Subject: CN=6870ee78-ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:14:e6:59:5c:d8:aa:c3:44:fa:48:46:a9:
df:19:a7:e4:cb:ce:cd:45:34:e0:8b:7a:10:54:7f:
71:66:79:24:1c:d1:fd:ae:b1:60:b6:88:e0:92:7a:
d4:89:9a:61:11:c3:cd:9c:f6:87:89:6b:75:49:34:
df:a3:06:dc:2e:da:f0:a7:2b:a4:ff:a7:ac:74:bd:
5c:d8:a2:d7:b7:e2:a7:b4:64:56:bb:2f:ff:d7:d4:
4d:36:2a:16:92:bb:e5:63:c4:70:d2:8f:e0:d1:97:
af:84:66:b3:b1:4a:a6:16:0b:3b:e7:93:8f:fe:a8:
63:af:9c:66:09:4c:cc:c5:b1:66:c3:cb:16:29:6c:
94:dc:f5:f1:5e:8a:1c:a7:d5:09:5c:6f:15:45:fd:
98:b5:5b:28:c4:81:f4:4a:6a:ef:b6:5a:ed:86:c8:
f6:1c:81:10:3d:3e:ea:b0:69:a4:4d:97:79:bf:65:
c9:37:23:92:46:3c:69:8a:33:8f:26:c3:a6:e4:50:
00:65:f3:db:56:f1:e4:ba:6a:08:75:27:22:d9:d1:
6d:ec:d2:91:61:a9:c6:45:da:6b:6c:62:95:72:9a:
0f:48:17:76:b5:bc:67:2d:b5:1a:83:40:cb:6f:7b:
fd:6d:a4:56:ee:1c:2d:bc:44:03:59:76:80:be:0e:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:CB:A7:68:CF:E9:69:07:1B:85:CB:ED:11:A3:30:3E:E3:DA:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EDE9EA65E4611F0890574D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
13:d7:c1:f6:83:44:a9:99:af:15:89:41:9a:be:96:0b:b7:38:
1d:62:30:08:32:43:71:66:c1:60:ad:ab:21:ff:b0:16:f3:9d:
59:27:26:df:90:4d:5f:56:f4:8d:14:c5:48:8c:33:c7:21:32:
a9:26:a3:b6:69:ed:ca:f7:41:bf:b9:d0:17:c0:97:64:fb:fe:
ab:f1:b1:95:b5:a4:40:29:5c:02:19:be:10:ad:b0:89:54:e3:
45:28:87:8f:eb:59:c3:52:2a:8c:4a:12:1d:cd:1a:e5:85:c8:
0d:93:91:22:5f:cd:7d:d6:37:be:3c:d9:f5:55:c4:c7:28:dd:
50:a4:91:27:63:7b:35:bb:63:06:de:3a:2e:3d:66:dc:65:c2:
68:2b:8c:c2:84:7f:c5:1c:b9:03:99:3c:04:b2:df:05:1d:d4:
db:d1:48:df:4a:fe:37:22:91:ac:ff:3d:8d:15:c5:b1:b0:90:
bb:c9:a3:c9:f9:28:a4:76:f5:d2:ca:71:04:d7:18:f7:f5:ea:
60:02:1d:f4:54:92:46:80:ec:72:3d:64:89:01:44:7b:6d:84:
aa:df:41:0b:3c:c2:0e:a4:74:bd:60:f0:ba:62:29:39:34:16:
f1:69:05:b4:91:3e:ce:02:0a:4c:71:41:9e:04:09:a5:d5:1d:
ac:4e:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:12 2025 by rpki-client