Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C1C44C59DD11F0B500C3CDDAE4EC9C.roa
File: 27C1C44C59DD11F0B500C3CDDAE4EC9C.roa (raw, json)
Hash identifier: FTo5aYHbKtJEq/fRrVItbUFimJvtN80qRGV52nP+3C0=
Subject key identifier: 93:B3:F1:2B:5B:4C:4A:10:F3:00:36:AB:88:FE:57:46:DA:10:65:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C1C44C59DD11F0B500C3CDDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 20:18:04 +0000
ROA not before: Sat 05 Jul 2025 20:17:59 +0000
ROA not after: Fri 17 Jul 2026 20:17:59 +0000
asID: 139923
IP address blocks: 154.193.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101206 (0x18b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 20:17:59 2025 GMT
Not After : Jul 17 20:17:59 2026 GMT
Subject: CN=6869887c-3eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:2c:3b:cd:1c:a9:db:c4:8d:56:1b:63:12:
4b:c3:46:c5:b4:69:ff:56:f4:56:6b:0f:65:c5:4c:
32:87:fa:a8:92:71:bf:aa:ed:bb:6f:f6:14:51:a9:
4c:7b:a5:0b:fa:ed:da:31:d7:e0:9a:75:7a:4d:47:
bd:af:7c:47:ec:4f:31:0c:3e:4d:f8:b8:0e:32:bc:
8a:c8:55:73:c6:99:58:33:47:48:c9:d0:46:c7:85:
d3:5f:21:c5:ef:e2:cd:8c:9c:9c:bf:98:e8:65:bb:
0f:b9:a9:0d:20:75:d3:b6:f7:5e:03:1a:87:2f:44:
eb:04:fb:f8:ea:9b:af:46:a7:b8:ca:58:e7:7f:05:
02:35:31:6b:c2:60:22:55:cd:90:95:d3:7d:6b:7c:
40:a7:74:27:82:d0:43:b3:a2:e3:c1:fe:10:bc:ec:
94:a7:6d:01:38:17:1c:57:0a:89:57:a4:17:84:20:
cd:18:93:6d:19:0e:41:13:00:6f:44:96:9b:a8:9e:
f5:5f:cf:3e:76:1c:db:cf:ea:67:df:4c:1c:13:16:
0f:7a:3a:7f:02:ef:a7:86:cf:6f:f2:11:bd:94:f3:
17:4b:a1:16:dd:c6:72:93:c3:14:4c:11:72:f9:09:
0c:9b:80:0f:84:9f:c6:8a:53:cf:71:91:0c:b2:15:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:F1:2B:5B:4C:4A:10:F3:00:36:AB:88:FE:57:46:DA:10:65:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C1C44C59DD11F0B500C3CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
01:d7:87:e6:b3:f0:2e:ea:90:55:62:73:75:00:5a:f5:34:03:
01:6b:fd:e9:8c:be:6a:c6:aa:fe:97:3c:0b:ef:c8:a2:77:3f:
3a:73:c6:01:ac:f1:75:8d:dc:99:f1:50:ff:b6:45:76:42:0a:
ac:e1:74:77:9d:10:b5:2a:b5:65:48:93:13:59:c3:d0:f8:01:
17:98:ca:6e:a8:25:32:8f:79:80:01:68:3e:b7:8b:2d:4b:44:
1c:03:c7:14:17:d0:d5:72:5b:0c:cf:57:96:1b:71:18:34:37:
d6:98:85:96:f9:10:e2:81:df:08:fa:47:53:7b:c0:e0:c1:3f:
ef:dd:11:05:a8:b7:e6:77:f9:17:71:b3:de:b1:39:df:5f:c5:
ba:0c:53:21:53:69:44:ac:dd:a1:91:d2:1a:12:b1:c0:a1:31:
65:41:5a:c9:6b:c6:69:b5:24:f6:5a:01:1c:7c:94:5a:77:b6:
92:33:c1:7f:68:ce:84:1d:21:18:1d:8e:41:e8:de:ff:c1:d2:
15:8a:06:33:1a:93:57:9b:73:91:bb:b1:2f:83:75:b6:15:d5:
5b:c1:75:da:43:87:a9:f5:3a:ed:ec:c3:23:1c:8a:2d:fd:ea:
6b:a9:e8:f7:19:a2:4a:47:82:4b:52:14:ae:9c:95:f2:59:92:
75:64:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:10 2025 by rpki-client