Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD3E2DA5AA711F080044AEEDAE4EC9C.roa
File: 2AD3E2DA5AA711F080044AEEDAE4EC9C.roa (raw, json)
Hash identifier: SkXvhatESf8+KI9ch0neqnohv77xOvuLqLX3C7TGiWg=
Subject key identifier: 69:DF:2D:F0:7D:D8:D9:35:3D:8A:C8:D2:3A:3A:BB:33:47:C1:00:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD3E2DA5AA711F080044AEEDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 20:24:08 +0000
ROA not before: Sun 06 Jul 2025 20:24:03 +0000
ROA not after: Sun 24 Aug 2025 20:24:03 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101304 (0x18bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 20:24:03 2025 GMT
Not After : Aug 24 20:24:03 2025 GMT
Subject: CN=686adb68-f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:18:2e:8a:89:ef:64:83:92:3a:48:0c:11:
10:43:eb:eb:94:5b:0c:34:23:c6:e3:3c:2b:d8:74:
c6:50:ef:82:dd:1a:2e:5a:43:3a:ce:ff:88:bc:ec:
f7:10:b9:48:63:32:47:db:1b:d7:42:6d:60:7d:e5:
22:4a:61:27:6a:83:9d:a1:b5:0e:d1:ad:f4:49:7a:
8e:ca:eb:94:7e:61:0d:72:5a:cc:18:16:9f:c8:9c:
34:d7:27:33:c3:00:a0:26:81:dd:18:72:24:2b:f2:
f0:bf:97:46:c7:54:1e:e0:2e:44:6c:8e:ac:da:69:
6c:e2:ea:f7:dc:78:f4:45:ac:ee:a8:4c:2c:ff:45:
5b:27:01:45:0f:0c:24:07:9b:b3:45:bd:ea:e7:3d:
93:e2:58:33:41:d6:73:08:1e:d6:23:36:2e:c7:c8:
65:da:6f:a7:52:18:dd:42:92:ee:35:0a:54:1b:07:
63:c8:66:f3:18:9d:b9:08:d0:44:a1:7c:91:0a:ef:
e7:38:5c:bc:af:b5:37:ec:90:3f:3a:f0:03:cf:df:
44:d8:c6:dc:f6:bd:ec:0c:26:62:49:e0:ed:c6:7d:
6b:c1:5a:69:5a:56:c3:d8:da:44:61:2b:05:12:4c:
02:af:16:0e:78:4b:c2:bf:ec:a8:1c:c2:19:9c:d3:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:2D:F0:7D:D8:D9:35:3D:8A:C8:D2:3A:3A:BB:33:47:C1:00:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD3E2DA5AA711F080044AEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:2d:4d:e4:d7:fd:f0:ed:4a:a6:f3:5e:0d:a7:17:f0:70:f9:
d8:79:3e:98:68:8c:5c:df:3e:18:70:d1:35:6f:42:46:ea:f8:
7d:b0:41:68:30:ef:2e:fb:c3:ff:0f:16:6a:43:78:fc:71:83:
10:28:3d:e4:d0:9e:de:3f:48:06:0a:4f:0b:b4:68:41:71:44:
dc:63:2b:6f:e4:50:02:32:6c:48:db:c6:4d:65:9a:64:1f:a7:
8b:a8:41:c5:89:48:a8:1d:13:69:a4:df:49:a2:77:e1:39:14:
e4:3c:09:2c:35:aa:f2:86:cc:76:cc:2e:0a:47:9c:bf:b1:25:
22:7d:8a:0b:a2:eb:31:60:36:37:aa:90:00:ae:9b:dc:e3:39:
0d:ea:dd:94:fa:b6:cf:4e:55:2c:c3:47:a9:83:2b:5b:81:b3:
d1:6a:c0:82:f8:3b:d8:1f:ff:6e:a2:8c:d7:c6:66:f9:b8:79:
f5:bb:e3:50:64:8c:82:c2:1e:71:f3:0b:8c:f4:33:f6:ea:47:
41:79:f3:51:c9:b4:ef:b1:5b:6b:ea:32:9c:9e:6a:91:d6:4c:
6c:a6:74:19:a5:49:49:cf:77:9f:be:b3:81:43:bb:c1:f4:57:
16:c5:21:dc:2c:ef:3c:9d:12:1b:9a:27:9b:e1:75:d7:6c:a1:
7c:c3:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:41 2025 by rpki-client