Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161262E45A7B11F0A3D695D4DAE4EC9C.roa
File: 161262E45A7B11F0A3D695D4DAE4EC9C.roa (raw, json)
Hash identifier: bRlTiG/ObVK63XRNzpATDAHrLcdEnOslyXUbNrmXoQc=
Subject key identifier: 29:04:51:1A:E5:52:8B:A3:4E:E4:84:19:28:BD:4C:F3:F6:E4:66:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161262E45A7B11F0A3D695D4DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:08:35 +0000
ROA not before: Sun 06 Jul 2025 15:08:30 +0000
ROA not after: Thu 31 Jul 2025 15:08:30 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101248 (0x18b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 15:08:30 2025 GMT
Not After : Jul 31 15:08:30 2025 GMT
Subject: CN=686a9173-c54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:3e:ec:2a:a3:7e:1a:96:f2:26:42:62:8a:
96:eb:c8:d0:7b:fd:4c:e1:79:da:9f:87:1d:b5:84:
5d:27:2b:c7:5e:26:d3:6e:c4:51:c0:63:82:43:f2:
71:d9:56:8b:cd:ef:5a:78:9c:25:a6:c2:ed:9b:b0:
25:98:e4:5a:eb:34:ef:1c:e2:73:91:71:f2:e6:af:
e3:69:3d:ed:fd:a2:83:a3:05:c7:07:ac:5f:a6:63:
60:e7:33:58:5c:13:8d:de:1b:4a:d4:d2:64:8e:e5:
60:fa:03:af:7c:27:87:e0:2e:9f:42:04:2b:fa:55:
c2:26:d8:34:66:fd:51:c3:e4:d3:dc:05:86:2e:8c:
fe:a8:06:16:ed:d1:d1:c2:5f:48:af:31:c3:e8:5d:
65:7d:41:7e:93:b0:a1:ee:9a:e5:db:f7:ae:9a:2d:
1d:d5:93:11:11:db:a5:31:2e:70:dd:f7:a8:5d:c3:
0b:6c:49:da:b7:63:54:1f:90:49:46:07:91:19:ff:
c8:4b:9c:15:ff:df:df:d9:f5:3e:46:17:91:da:6c:
57:ba:c6:3c:25:e3:4b:e7:fe:e1:6e:9a:3f:06:b2:
ab:db:a2:80:7e:68:59:2c:0a:bf:6a:57:a8:38:cd:
51:c7:45:21:6e:b2:97:2d:70:50:58:2b:6f:b3:38:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:51:1A:E5:52:8B:A3:4E:E4:84:19:28:BD:4C:F3:F6:E4:66:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161262E45A7B11F0A3D695D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
Signature Algorithm: sha256WithRSAEncryption
7b:b3:f9:43:6b:93:b7:04:da:fd:90:6d:8b:24:a2:80:f2:9b:
37:a2:66:48:af:82:14:47:39:63:25:f2:fb:1b:05:d4:0b:d1:
a9:66:e9:e6:91:cd:81:a4:48:db:5b:85:2c:1c:a8:2b:2e:49:
8a:19:91:f6:10:49:fb:2e:fc:3e:93:17:1e:d3:34:57:36:4f:
49:2c:25:3e:14:40:6c:16:7e:16:c5:8a:58:ba:ef:b0:d9:a5:
b8:66:3b:db:a4:20:f1:50:6f:ec:53:6e:70:c7:80:03:32:0e:
69:dd:7e:3d:4e:10:91:f7:b6:62:3f:5f:17:6b:df:d0:40:4c:
88:e2:43:a2:35:77:4f:f2:29:58:61:2a:a8:61:ed:33:15:a2:
e4:83:dd:42:96:c4:78:93:89:4d:da:55:8f:c3:de:87:bc:20:
2a:c5:ca:c6:bf:e2:80:4d:06:37:a5:ca:82:9a:a6:60:8c:0e:
1d:c5:09:fb:46:0b:ed:a1:a6:64:fa:62:8b:c5:a0:fb:c2:c7:
0b:12:68:33:86:5d:81:59:74:85:55:c2:76:69:b2:9b:50:ac:
47:ae:ec:2f:82:09:9d:c5:e1:52:4f:3a:a9:31:df:5b:6a:21:
76:65:6c:b0:23:8f:10:20:09:4b:70:8e:ab:d5:cb:26:b2:25:
d5:fd:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:38:19 2025 by rpki-client