Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1074C5A4618111F0BE457EE5DAE4EC9C.roa
File: 1074C5A4618111F0BE457EE5DAE4EC9C.roa (raw, json)
Hash identifier: DfKGvsCxXbKpyX64V/ohLfT+JoxWv2OoTMMRqRTcnFU=
Subject key identifier: AB:F7:FE:33:F1:2E:BF:EC:19:A8:D9:5A:59:06:C3:07:82:39:D0:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1074C5A4618111F0BE457EE5DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 13:39:01 +0000
ROA not before: Tue 15 Jul 2025 13:38:56 +0000
ROA not after: Mon 25 Aug 2025 13:38:56 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101860 (0x18de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 13:38:56 2025 GMT
Not After : Aug 25 13:38:56 2025 GMT
Subject: CN=687659f5-5811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0e:bb:3d:4c:8f:9c:f6:1a:9d:f6:0e:ae:75:
b0:28:81:90:55:49:b0:46:35:20:ba:3b:b0:8f:14:
f2:5f:3e:50:06:23:cf:73:e7:27:95:3a:0a:b7:f7:
de:94:9a:f0:91:ea:47:85:31:9d:d2:46:b7:c4:b1:
42:57:5e:5b:52:f8:79:11:f4:b3:7d:bb:da:54:79:
84:54:ff:51:ce:2d:ef:a9:8c:12:7f:e9:3d:6a:e8:
51:bf:01:1b:d9:4d:a7:3e:99:4e:f0:e8:29:53:3e:
ea:5f:fb:0a:21:c1:ad:0a:ea:84:b6:54:33:37:28:
fb:ac:97:0c:b9:0c:ae:82:f0:a6:d3:ae:70:5c:12:
d0:3a:dd:e5:e7:c0:a4:fe:9a:ef:a7:ae:a5:76:9a:
56:d9:bb:31:2c:b2:ef:11:04:8f:ed:ef:24:c0:c1:
dd:65:d6:06:b7:a4:a6:1d:7f:f1:7d:10:42:81:7c:
70:06:30:22:2e:b8:82:8f:4a:bf:be:5e:8b:97:00:
13:58:e1:73:98:27:a1:48:53:8a:97:76:c8:82:40:
94:86:ec:b6:bc:c2:ed:14:ea:5d:26:51:5e:13:ae:
a8:83:53:90:db:f9:05:ec:e1:10:d9:a5:9e:4e:29:
b7:9a:37:0b:99:33:78:92:6d:bb:11:fb:f2:18:0b:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F7:FE:33:F1:2E:BF:EC:19:A8:D9:5A:59:06:C3:07:82:39:D0:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1074C5A4618111F0BE457EE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:48:6f:f9:54:66:20:ee:c3:85:95:52:6e:ff:88:0d:5b:5c:
84:a9:cc:e8:28:71:f4:82:82:46:b5:52:8c:37:04:6a:64:77:
6d:c8:a0:04:0c:8e:12:3a:6d:1b:ea:22:8a:89:2f:54:6a:5e:
13:aa:0e:5e:39:96:f3:31:75:74:6e:e5:28:d5:17:c1:86:8b:
25:91:57:08:9f:32:cd:21:9f:8f:9f:41:ef:6d:db:63:86:9a:
7b:07:82:ce:82:69:67:40:ec:ba:52:d1:b9:36:d1:5f:20:37:
27:6b:62:09:13:34:20:fe:f5:39:bf:b8:23:16:2c:d6:1a:4e:
99:cd:eb:88:ce:34:cf:d0:06:ed:f9:67:e2:6d:fb:76:91:a6:
9e:75:e4:df:9a:ed:f5:35:23:2c:b5:13:9d:29:35:a1:b5:c6:
a1:7a:b0:b8:64:71:eb:f8:8a:b1:61:f6:94:2b:a5:57:2a:4c:
a3:63:89:a3:64:5f:1e:61:6c:fa:c9:94:93:c7:e9:87:c9:14:
dc:54:8a:6b:a3:35:5c:e1:5f:e8:17:0b:6b:66:de:b1:d2:61:
c6:6d:c6:9c:71:f9:60:db:7b:66:86:d5:e5:58:13:78:9e:09:
ca:d1:e5:77:7c:11:6f:c1:62:78:24:dc:7b:c7:8c:18:02:ac:
98:e0:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:16 2025 by rpki-client