Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D42F4C5B3111F0B1B7B07ADAE4EC9C.roa
File: 45D42F4C5B3111F0B1B7B07ADAE4EC9C.roa (raw, json)
Hash identifier: Uyn4/1t8JWtjnP07kFxYu+ipEMmKjDGqfIcMzIVxqa0=
Subject key identifier: C0:B7:9D:84:E6:C2:80:0E:06:AE:78:43:4E:16:0B:30:F4:45:3D:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D42F4C5B3111F0B1B7B07ADAE4EC9C.roa
Signing time: Mon 07 Jul 2025 12:52:44 +0000
ROA not before: Mon 07 Jul 2025 12:52:39 +0000
ROA not after: Mon 11 Aug 2025 12:52:39 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Jul 2025 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101400 (0x18c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 12:52:39 2025 GMT
Not After : Aug 11 12:52:39 2025 GMT
Subject: CN=686bc31b-2572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:b7:b8:27:1d:8d:31:8c:9a:69:ae:be:c1:
51:f9:c8:c0:0b:8b:85:4a:1b:74:db:6f:4f:d0:11:
7b:83:44:b1:7c:78:d6:9e:c0:8a:91:22:10:5b:9f:
a9:1b:4e:b4:db:9e:58:ab:9b:9f:91:54:df:f9:4c:
6e:69:ae:6b:9f:57:a0:25:9b:35:8e:26:d5:48:60:
52:c6:80:04:eb:ba:4b:7d:1a:f6:99:ba:4f:df:6d:
b5:97:2b:45:89:6d:4a:27:73:85:24:cc:9b:8c:15:
52:e0:b9:9a:52:6c:fa:e8:df:18:8c:fa:ae:a4:53:
4d:40:dd:51:d2:4e:39:c5:59:ab:43:98:65:52:b0:
15:15:fe:7e:24:0f:7e:2c:60:4a:0a:60:26:30:9a:
1a:cb:48:0a:a5:a7:56:f0:ac:0f:19:f1:6b:bb:a2:
dc:79:4b:d5:57:34:0b:41:9e:eb:49:2e:59:18:13:
d4:fa:b8:36:49:a4:42:b0:57:42:89:6a:3e:b8:07:
72:91:c7:2d:2c:a7:7e:34:b5:68:a4:d2:33:89:71:
c1:cd:8d:77:58:f3:ab:b8:bb:cc:89:d3:ea:d9:76:
49:5e:1c:46:42:cc:bc:1e:65:18:f0:99:02:a0:72:
c4:35:a2:bf:c3:a7:be:25:b4:25:ee:89:52:36:cb:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:9D:84:E6:C2:80:0E:06:AE:78:43:4E:16:0B:30:F4:45:3D:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D42F4C5B3111F0B1B7B07ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:e9:f3:8e:28:d9:72:1b:06:59:8c:b5:ef:9e:37:bb:38:58:
18:55:47:6a:de:50:22:88:99:ba:49:48:eb:b8:76:db:aa:69:
28:17:71:e4:f8:dc:4b:d3:29:99:6b:02:0e:01:03:d8:43:27:
af:a4:0c:f6:9c:12:a1:83:9d:89:47:1c:c2:57:a3:7e:05:aa:
8e:72:1b:7e:0f:21:52:da:6e:94:ab:6a:71:8f:f2:8a:c6:67:
64:4e:52:7d:0f:ff:e9:3b:7b:c1:ac:e0:ac:04:05:dd:af:59:
c7:c6:67:08:6a:51:66:06:3e:9d:2c:a1:fd:49:5e:84:3c:d0:
13:f2:70:38:6c:16:f4:87:ed:99:63:07:38:0c:bd:20:af:89:
b2:b7:7b:5a:4b:49:b1:4d:cf:14:b3:8d:03:e0:58:8a:cd:4e:
e4:5b:d6:50:ed:ee:51:b5:bf:2f:58:95:bc:2a:1e:67:e7:fe:
13:9a:db:d8:a7:ec:b5:16:96:85:2f:5a:0c:c9:8f:67:93:66:
9e:44:66:ea:5b:ef:d9:9d:4e:1e:6c:00:39:05:0a:bd:6c:6b:
f7:5e:75:22:33:9f:23:87:ac:72:e5:11:07:07:2d:11:fe:cc:
36:e4:c7:95:a5:60:5d:ba:59:6d:a0:84:04:78:a7:e0:fd:f1:
f6:2d:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:29:28 2025 by rpki-client