Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24090E58D311F087C15D8FDAE4EC9C.roa
File: 2E24090E58D311F087C15D8FDAE4EC9C.roa (raw, json)
Hash identifier: 7eYfiCCZm/F/MB2wY4LGKxxjNolAqQlcUPxXgZCrMk8=
Subject key identifier: 48:AC:60:3A:23:74:E4:0C:AD:34:94:01:D4:DC:4E:1A:97:D5:44:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24090E58D311F087C15D8FDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:34:09 +0000
ROA not before: Fri 04 Jul 2025 12:34:04 +0000
ROA not after: Mon 11 Aug 2025 12:34:04 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100950 (0x18a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:34:04 2025 GMT
Not After : Aug 11 12:34:04 2025 GMT
Subject: CN=6867ca41-a2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:ee:49:d9:bf:68:f2:50:94:13:c6:71:eb:
bf:d5:b3:f8:e1:75:0b:a3:24:bf:6f:f6:3a:5d:07:
86:f4:c4:8c:d3:b9:c3:2e:06:6f:37:36:d7:da:77:
36:b1:55:df:ac:00:19:69:e7:33:cc:5d:5e:cd:a5:
18:d5:df:52:12:66:fd:a1:a9:38:46:27:c5:08:c6:
88:9c:1d:fa:fd:c3:63:1e:cd:23:19:50:fb:ca:db:
53:2a:25:69:15:ce:74:6c:af:60:69:a2:98:81:17:
df:33:cc:8b:dc:37:6b:a6:e4:ed:c1:e7:fc:9f:2b:
c4:79:4f:00:7e:64:24:9d:7a:d5:21:22:76:93:fa:
e6:38:84:2e:5f:df:88:7e:f2:97:40:df:4c:d2:4d:
a7:ef:49:43:7f:0c:79:87:39:e4:49:cf:74:b1:e8:
5c:4f:76:77:a9:2c:7a:b0:b2:91:32:2a:27:8a:f1:
1e:e4:94:f0:28:78:e2:87:66:08:30:20:3a:9f:14:
d1:78:6a:fc:20:3f:53:ff:3d:91:05:57:25:01:83:
98:59:07:79:a8:3d:ef:bf:e0:bf:71:4d:16:a8:9f:
dc:90:4d:e9:65:15:b7:cd:73:cc:3d:7c:57:5a:5c:
56:80:fa:bf:f8:47:68:a6:8e:67:67:b8:1e:ad:73:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:60:3A:23:74:E4:0C:AD:34:94:01:D4:DC:4E:1A:97:D5:44:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E24090E58D311F087C15D8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:9f:b7:a2:fa:27:6b:5e:7b:2a:c2:76:ff:3b:ac:34:8f:fe:
1a:70:6c:ea:c8:b6:29:91:8c:06:5e:bd:9f:92:50:db:e4:f1:
5b:2b:1d:7f:33:c6:6e:8e:f5:e2:05:05:bf:b3:82:cf:82:2f:
af:df:7c:44:b1:6d:76:bf:db:77:84:a4:58:1e:20:0c:39:9c:
8f:ca:69:fd:2c:37:35:8a:35:7a:ea:ef:4a:54:7f:19:5c:c9:
6b:b8:b9:a2:97:3e:b8:91:e5:b0:18:7f:e5:c9:6d:35:bc:8b:
d6:af:83:c5:31:ab:83:66:26:d8:70:06:c5:13:38:28:69:74:
c5:77:13:f3:1b:34:8d:28:1f:25:9f:80:9a:38:ff:71:77:10:
66:da:98:e1:bb:02:00:a9:1d:6b:1e:95:69:9d:8c:4e:4e:bb:
64:c8:48:81:e3:54:a8:88:ef:b3:cd:97:d5:54:fa:91:b0:41:
7e:d5:20:9c:40:4c:ab:3e:bf:f1:65:d1:4f:99:16:6c:c2:2d:
cc:14:d4:42:a9:dd:21:f0:5a:a5:88:34:cc:63:e9:b5:ac:c8:
a0:75:79:aa:32:ee:db:08:8a:53:3f:f1:1e:57:48:8a:47:95:
e6:3c:49:63:62:22:7f:9c:99:6c:ff:2f:3d:3f:75:62:a8:d0:
1c:15:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:10 2025 by rpki-client