Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ABF55785CC511F0A11E32C4DAE4EC9C.roa
File: 4ABF55785CC511F0A11E32C4DAE4EC9C.roa (raw, json)
Hash identifier: /ZdaHjDEpr3lYWhNdEpx5MXUt6ykhUN0lvtj+j7GuJg=
Subject key identifier: 91:1D:FC:94:31:06:07:A3:12:C6:E0:2A:C4:DD:65:C1:A8:CE:D0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ABF55785CC511F0A11E32C4DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 13:04:49 +0000
ROA not before: Wed 09 Jul 2025 13:04:43 +0000
ROA not after: Sun 10 Aug 2025 13:04:43 +0000
asID: 53808
IP address blocks: 154.94.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101573 (0x18cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 13:04:43 2025 GMT
Not After : Aug 10 13:04:43 2025 GMT
Subject: CN=686e68f0-0d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:11:1b:fc:5e:49:b4:e3:16:66:b7:00:9e:
0f:2d:f5:0c:c7:2b:e6:60:31:0a:40:73:e2:1d:87:
fb:62:5b:f9:f9:57:1b:f2:c5:60:81:bf:17:3b:7b:
c4:58:ce:ca:35:a9:a3:13:37:7a:d8:08:3b:1f:f6:
cc:22:28:fe:2b:56:92:1d:e6:a8:11:e4:c7:74:2b:
b1:5b:47:14:2f:fd:f0:5f:35:95:39:44:11:5c:0e:
56:cd:ff:bc:64:f4:ee:aa:34:b7:2c:d5:6c:02:f6:
3f:9d:ce:13:9a:76:07:ce:f9:71:19:9c:6b:cb:c2:
6e:10:8c:df:8a:5e:0e:ae:95:67:45:b4:7f:bd:a6:
58:01:68:cf:1e:aa:9d:be:52:60:19:7f:45:bc:4c:
f3:ac:a7:80:7a:29:8c:b4:18:16:95:77:9a:47:43:
f8:c0:df:6e:80:7d:b4:35:b1:2e:40:a6:79:43:d5:
7c:4a:16:56:c0:25:90:7f:d1:ad:3c:68:b5:62:57:
b4:e7:2b:27:00:32:31:3b:3f:9f:ff:20:95:ee:ff:
58:1c:e8:26:3f:85:51:4f:28:70:48:0c:05:b3:a5:
7d:a8:8c:25:2c:9d:f6:61:dd:63:e1:e1:b8:c8:b3:
65:a8:55:2a:4d:70:64:01:f4:ba:c5:59:b7:2f:64:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:FC:94:31:06:07:A3:12:C6:E0:2A:C4:DD:65:C1:A8:CE:D0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ABF55785CC511F0A11E32C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.226.0/23
Signature Algorithm: sha256WithRSAEncryption
78:57:fb:cc:47:0a:d9:66:ac:ed:8d:96:36:4c:65:cc:47:94:
99:1f:5f:4a:16:4f:e1:73:25:1e:45:a0:c5:a5:46:f0:27:54:
d4:09:87:fd:78:5b:f4:74:5a:f9:e7:bf:70:17:7e:f8:ed:71:
66:ec:0b:6e:5f:07:a4:8a:57:c7:2a:73:d8:5b:57:31:9d:da:
9a:72:cb:15:de:71:ef:69:59:e5:f8:cb:5b:8c:32:26:5f:4b:
f4:1e:7c:9a:6d:03:68:8c:a5:de:a3:ca:6c:a9:dd:a0:a1:67:
d5:29:97:9b:cd:3b:82:00:e7:b4:27:00:5c:ed:b0:7f:47:b6:
ca:d9:81:4d:af:e1:b0:89:95:1b:45:08:bf:de:68:12:c3:70:
24:cf:3b:be:6d:cc:26:1a:52:ac:bc:95:6e:37:4a:84:0a:3c:
76:70:a3:15:3f:b0:d9:08:dc:9b:c4:83:70:d0:28:ad:4a:71:
86:b5:e2:86:b8:6a:34:01:3d:66:8e:3f:29:a6:92:4b:af:ec:
a4:f0:e2:8b:72:8b:ed:ed:e4:ce:27:40:b5:ea:3c:de:5d:81:
c0:75:b5:ec:d5:f3:cd:ce:12:68:4f:18:33:9a:41:00:9e:af:
ed:1c:88:d8:41:13:4f:97:a4:b2:b7:43:20:34:c7:d1:b1:97:
d9:31:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:43 2025 by rpki-client