Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5F6E2E5B6111F09BF504AEDAE4EC9C.roa
File: 4B5F6E2E5B6111F09BF504AEDAE4EC9C.roa (raw, json)
Hash identifier: 7PEdXF97zxUmS5RHcwhOngFQTxDxHPMCmtZqJWUD36A=
Subject key identifier: E6:12:BF:CE:59:40:7D:4A:49:4B:69:57:36:ED:C3:CA:D4:DE:DE:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5F6E2E5B6111F09BF504AEDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 18:36:29 +0000
ROA not before: Mon 07 Jul 2025 18:36:24 +0000
ROA not after: Sun 24 Aug 2025 18:36:24 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101450 (0x18c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 18:36:24 2025 GMT
Not After : Aug 24 18:36:24 2025 GMT
Subject: CN=686c13ad-4723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:a3:1d:6d:0a:15:04:20:8a:2c:0f:41:a0:
41:13:a5:2f:c1:bd:98:4c:d7:c7:1d:06:c7:60:7a:
12:f4:21:96:30:ff:42:a7:3c:87:96:f1:10:8f:d7:
24:b7:c1:c2:10:c4:e4:67:ad:d8:30:8f:f0:06:56:
21:df:07:94:fe:de:af:f8:c5:70:e3:8c:72:99:12:
26:32:c4:2d:43:14:d2:7d:dd:db:9a:e3:a0:f3:fb:
9c:a9:59:5d:7a:8a:03:40:3a:ff:15:fe:ad:80:03:
df:7a:39:97:32:b3:90:7f:cd:83:f7:c8:60:82:82:
67:3b:90:5f:3b:4f:36:b0:ae:f4:9f:f1:3e:85:5a:
19:40:51:d0:0e:eb:65:02:07:ce:97:6f:2b:af:aa:
b7:be:39:ae:d9:35:14:68:61:1b:f4:5b:50:22:82:
aa:ce:5a:2a:3a:05:77:aa:d1:e9:be:cb:ff:c6:6c:
64:a9:5a:8d:c2:6b:08:6e:a9:96:ec:23:c7:e3:1b:
bf:43:f6:b1:6f:5c:63:5e:10:a2:fb:28:9e:f5:b2:
db:6b:02:89:1f:a4:2f:04:53:9d:19:aa:ab:6e:21:
23:fe:90:69:16:0b:46:c2:6b:5e:4d:21:b0:d7:d2:
15:4d:77:0e:53:92:af:33:cf:e6:94:4a:e1:b2:44:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:BF:CE:59:40:7D:4A:49:4B:69:57:36:ED:C3:CA:D4:DE:DE:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B5F6E2E5B6111F09BF504AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d7:6f:44:09:aa:67:c7:ef:a4:89:c8:14:50:15:ad:e6:57:
b5:2e:20:3b:9e:7a:63:a7:68:87:d7:87:cf:7a:04:75:b4:8f:
36:9f:f6:98:28:43:57:39:41:17:46:96:ac:a0:7f:35:92:00:
ba:e1:7e:78:d7:1c:a6:87:e2:60:02:5d:6d:e0:12:15:ed:4b:
e6:1f:44:e1:0e:46:2c:c8:27:d4:da:dd:d5:84:a6:69:3c:e5:
4e:6b:87:e6:7f:53:b1:be:1a:81:e5:cc:3c:2e:0b:97:41:df:
f9:b5:dc:be:aa:5e:0c:f4:ee:db:a4:5a:44:66:c6:2d:30:35:
2a:35:a5:39:a5:df:64:47:ff:24:dc:a1:80:48:07:34:1e:26:
33:61:43:88:d4:49:4e:7a:3b:9c:7e:fd:06:63:41:b3:c5:08:
f8:4b:83:53:07:56:0c:74:95:13:f8:91:c7:98:a8:08:d0:a1:
86:38:d0:74:41:6b:7b:53:8b:c1:7d:70:dc:98:83:d6:bf:86:
f7:3f:c4:fc:70:da:cb:75:d7:bd:a7:ae:33:60:99:1b:d6:22:
4c:b4:f6:f3:4e:56:6c:b6:65:9f:a4:be:03:fd:69:83:b4:e8:
bd:3a:1d:9d:3e:73:84:78:61:0d:fb:03:c7:83:ea:79:fb:48:
95:92:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:06 2025 by rpki-client