Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C09B8C0608311F0BE3BD6F4DAE4EC9C.roa
File: 5C09B8C0608311F0BE3BD6F4DAE4EC9C.roa (raw, json)
Hash identifier: 04DW2RvMvyMfJlC2MoJxIOn5PH2zsPKCCl7oqmW1YE8=
Subject key identifier: C0:C5:45:79:D6:9E:99:9A:0D:00:54:B3:94:95:F0:8F:32:C2:92:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C09B8C0608311F0BE3BD6F4DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:22:55 +0000
ROA not before: Mon 14 Jul 2025 07:22:50 +0000
ROA not after: Sat 16 Aug 2025 07:22:50 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101783 (0x18d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:22:50 2025 GMT
Not After : Aug 16 07:22:50 2025 GMT
Subject: CN=6874b04f-1810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:19:5e:e6:2b:20:be:2e:fe:e2:22:60:20:
b4:f1:00:6c:f0:a6:4c:88:03:df:75:02:6d:93:bc:
ac:23:4d:8c:df:ac:d9:0d:87:b1:e9:d7:5d:dd:71:
8d:13:6e:3e:9c:ef:e7:4f:ed:b4:27:02:47:57:91:
70:4b:65:70:4e:93:ca:ff:60:cb:9f:38:bd:02:d3:
62:05:4b:b1:c5:a7:d9:b7:a8:e5:5b:02:f3:25:a9:
cf:61:ab:82:e3:06:94:f8:6a:82:e0:81:ca:32:28:
7d:bf:66:be:b5:16:8b:2e:3a:fb:8e:f7:20:41:40:
11:f7:2b:ea:06:bb:05:a7:d4:c8:1f:a8:1f:40:91:
4f:19:5b:f1:b5:61:6d:f4:a1:06:c9:75:a8:a2:74:
61:6e:4a:69:88:54:1a:df:16:cb:2c:1a:d6:cf:de:
79:ae:de:75:75:be:23:a6:37:e5:da:71:03:7c:6c:
36:66:56:2f:2f:fb:39:00:b6:75:af:1d:7f:8a:09:
e0:89:ac:04:a6:8f:52:33:69:a5:32:27:6a:4b:3b:
29:94:42:52:e9:05:cd:ca:ad:5b:88:c5:9d:bd:bb:
b0:3e:53:4b:74:83:c5:0d:d2:65:6f:0b:e1:c2:ec:
71:70:f1:aa:31:a0:12:54:94:3e:91:6e:14:5f:93:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:45:79:D6:9E:99:9A:0D:00:54:B3:94:95:F0:8F:32:C2:92:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C09B8C0608311F0BE3BD6F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9a:c0:0b:21:74:26:91:13:83:5e:2c:1e:8d:9e:07:52:7c:
ae:12:64:b0:df:2f:ea:64:d1:74:40:09:02:c6:3b:5a:6b:27:
9e:a2:6f:8f:1c:10:ff:c1:aa:a0:9f:48:f9:45:07:89:f6:9d:
a6:ec:88:65:ca:b2:a7:32:23:4f:da:2a:ec:21:b1:1d:41:37:
00:0d:ae:ae:68:ee:8e:45:1b:1b:6f:5d:d6:4b:0d:af:84:23:
02:59:e6:c7:d9:d0:06:e3:35:a8:93:51:43:dd:36:3c:f3:66:
ba:a7:86:c1:ec:23:bd:cf:82:c6:7a:55:d4:eb:88:99:32:3a:
2a:26:d9:84:e4:57:8d:62:f1:66:f1:c6:c1:bd:04:b9:70:9d:
02:e0:50:d0:8b:14:42:3e:31:66:07:c1:a0:36:8f:b8:01:f2:
9a:91:b9:b2:7f:8f:94:5a:e4:b1:5a:d0:4e:14:5a:28:49:b0:
04:1c:51:26:94:e9:b8:93:2c:5c:d3:8c:af:1b:70:68:47:f7:
73:a3:c2:e9:7d:f8:13:7a:35:e9:98:c0:df:d6:33:47:96:c7:
57:06:b9:da:4f:ea:37:f6:ac:b3:4b:d7:34:99:ab:c3:30:21:
d3:10:20:25:51:fb:eb:38:cd:33:14:93:92:28:22:88:82:7c:
63:7d:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:43 2025 by rpki-client