Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335CE7545A9711F08F78DF88DAE4EC9C.roa
File: 335CE7545A9711F08F78DF88DAE4EC9C.roa (raw, json)
Hash identifier: avCSKlKdIx3/CjKLqUrCCs6BgKACs/A1r4ygWJlOEuo=
Subject key identifier: 78:BA:CB:20:00:29:A1:68:30:4D:E3:A5:0E:D1:47:34:AB:48:18:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335CE7545A9711F08F78DF88DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 18:29:50 +0000
ROA not before: Sun 06 Jul 2025 18:29:45 +0000
ROA not after: Sun 17 Aug 2025 18:29:45 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101286 (0x18ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 18:29:45 2025 GMT
Not After : Aug 17 18:29:45 2025 GMT
Subject: CN=686ac09e-13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:38:32:96:1c:b2:b9:b9:b3:98:39:f4:70:
2f:3c:d6:b8:c0:06:04:55:79:6c:36:7b:93:e2:d1:
e7:09:6c:83:b2:2e:c8:70:7a:97:55:40:aa:fa:1d:
a9:0c:4a:ee:d4:8d:10:61:ff:ca:90:06:7f:20:6d:
f5:64:35:4f:63:29:d4:3c:16:fb:57:35:87:b8:45:
f5:27:8f:3a:bb:1b:07:a0:94:65:58:67:a8:ce:0f:
31:ad:99:b9:af:c3:dd:5e:21:d3:ba:dc:b0:58:17:
9b:57:5f:f3:75:02:9f:c9:f0:de:be:76:ed:b4:5f:
b2:1d:af:d4:b1:cf:0e:4b:31:03:2a:b0:e5:86:c6:
61:69:c2:13:9d:12:a6:a2:13:0a:51:5b:c4:42:ef:
c8:53:ae:05:2c:34:4b:47:b8:69:86:9a:d5:71:5b:
06:8e:80:d7:eb:fa:b1:7a:ba:2b:58:b4:c2:f0:1f:
93:59:87:9b:01:51:5d:48:ac:e4:85:af:06:b8:ee:
2a:71:ff:cc:c0:00:9d:b8:f3:dc:0f:3f:09:22:87:
52:31:86:24:b2:4f:8a:8b:07:d1:55:42:6e:1c:e9:
08:22:ad:89:a6:f6:5a:87:98:a6:05:b4:b5:d3:04:
91:d5:20:05:ae:78:c7:b8:e8:05:5e:e3:52:e4:e7:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:CB:20:00:29:A1:68:30:4D:E3:A5:0E:D1:47:34:AB:48:18:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335CE7545A9711F08F78DF88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:31:e9:8b:f8:78:cd:89:cf:9e:a7:67:93:3c:0d:69:31:d0:
37:06:38:aa:32:8d:0c:b6:3d:eb:d5:9b:48:f8:b2:f0:21:21:
c2:49:23:e5:4d:59:f4:cd:06:d8:50:af:08:e9:0e:b8:a5:94:
3c:4c:e5:71:92:81:95:79:b8:52:8c:0e:17:c7:bf:eb:27:2f:
bf:93:0d:d0:8f:13:9d:34:60:5f:bb:b4:70:99:c8:00:f9:34:
63:1f:c7:77:cd:a9:1b:ed:b3:1e:7d:dd:73:85:f6:09:2c:85:
fd:63:d0:bf:9c:fa:aa:b6:45:ae:07:6f:ee:44:0d:b5:9b:b5:
13:b7:87:5b:00:f9:21:d1:12:7d:de:7c:a3:d6:f7:04:cb:81:
5c:93:53:6c:19:68:cb:9c:d1:c9:84:c9:74:31:20:8a:7d:3d:
18:1a:e8:ab:20:1e:17:58:61:48:2f:db:75:86:ef:f1:aa:66:
cc:0b:3e:9d:c4:9e:e1:92:d2:3e:c7:30:4d:56:e1:95:63:18:
75:35:4b:92:c3:26:51:42:5c:45:5b:b1:d3:77:6a:a8:e1:64:
d0:d8:30:ee:b1:f8:0b:44:f5:bf:ad:08:49:ef:37:e8:51:4b:
b7:55:87:ba:2b:54:da:0f:16:ed:28:4c:19:4e:e3:e9:24:29:
c2:22:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:00 2025 by rpki-client