Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230A45645B5E11F0B6C00E9CDAE4EC9C.roa
File: 230A45645B5E11F0B6C00E9CDAE4EC9C.roa (raw, json)
Hash identifier: HhKYQnvozP6o2UMCCEXGbTZ4cNTudVbzjOW8kvf+zGI=
Subject key identifier: 2B:2C:88:52:A2:0A:37:29:F4:43:7F:7A:AA:F4:F1:35:CD:73:BF:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230A45645B5E11F0B6C00E9CDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 18:13:53 +0000
ROA not before: Mon 07 Jul 2025 18:13:47 +0000
ROA not after: Sun 24 Aug 2025 18:13:47 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101444 (0x18c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 18:13:47 2025 GMT
Not After : Aug 24 18:13:47 2025 GMT
Subject: CN=686c0e60-77ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:4c:8b:de:3d:72:02:ef:e7:e8:f5:81:53:
74:9a:6a:c3:00:fe:a0:06:84:28:ba:c1:65:df:92:
ce:5b:6e:d8:07:e7:6e:5c:99:1a:25:89:e6:da:18:
4a:17:d4:62:9c:fd:84:ff:ce:7b:38:86:9b:e8:4e:
42:1e:29:f7:bf:f1:09:40:f8:51:c8:80:80:41:47:
7f:b8:a6:55:53:53:49:76:1b:25:c8:e2:d6:bb:22:
f6:df:0f:9e:20:a0:62:7a:68:1b:db:59:6c:27:2f:
ff:15:2c:34:8d:d9:a6:2b:56:1e:63:25:fe:78:56:
0c:b9:a3:9b:2e:fc:d3:27:07:08:4f:7b:15:08:41:
62:d4:c8:b9:d8:ab:83:e3:47:2d:12:15:27:57:8a:
4a:10:a5:45:bf:1e:ec:7a:41:04:eb:d5:24:bf:3d:
ca:bc:ac:dd:51:d7:92:a0:c2:8d:05:8d:87:20:4f:
a7:37:55:bc:9d:68:dd:8c:6e:9c:37:8a:6b:d1:4e:
dd:62:b9:68:ce:4d:eb:86:0a:95:14:4d:fd:1b:be:
00:3a:54:9d:f3:bf:c4:ec:4a:09:82:ee:f6:21:4d:
c6:03:78:13:dd:79:7b:45:1c:a8:23:a4:db:ca:fa:
9f:5b:f9:eb:e7:35:80:94:19:25:12:96:06:27:3b:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:88:52:A2:0A:37:29:F4:43:7F:7A:AA:F4:F1:35:CD:73:BF:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230A45645B5E11F0B6C00E9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
77:0f:63:fd:ca:9a:91:d0:8b:03:84:d8:f0:37:2e:fc:d5:7b:
d9:fc:77:90:ad:ab:d0:c2:6c:fd:61:a7:53:ca:34:59:47:12:
d5:15:61:fb:da:60:b2:7c:eb:22:24:99:b3:1a:ee:62:0b:5b:
f6:50:2a:23:78:a2:08:5b:da:a1:2b:75:33:64:cc:4a:b3:18:
db:c4:1f:cb:aa:9d:6c:6f:79:19:88:5b:4e:f6:39:29:27:9e:
ae:0f:46:65:83:01:07:e2:04:e6:5b:e5:fd:a4:ff:bf:d4:5a:
3c:40:d3:92:f2:94:98:0e:30:53:82:26:4a:a3:6f:1a:ab:90:
f7:5c:7c:0e:16:f8:5e:62:04:ea:18:6a:04:9f:89:f2:09:c2:
0a:64:07:83:07:a2:d9:5d:00:91:92:2f:b4:36:6f:0a:b8:ef:
81:32:ea:2e:19:34:1d:13:d5:18:a4:87:f0:ef:72:f4:c9:8d:
dd:3b:89:51:06:78:39:fd:b5:7c:c9:c2:29:30:c6:b9:78:70:
5e:88:c8:7a:67:ab:ec:0e:8b:77:06:59:08:b4:1d:81:f2:32:
7c:06:f2:79:3e:98:b4:85:db:be:b2:f0:58:0a:38:6d:99:ae:
2d:d0:87:25:ff:58:6e:11:38:95:53:a8:a9:7b:bf:a7:09:20:
e3:c2:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:56 2025 by rpki-client