Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CC243BE5B2D11F08915AFE2DAE4EC9C.roa
File: 5CC243BE5B2D11F08915AFE2DAE4EC9C.roa (raw, json)
Hash identifier: o4rZet3NzAZmwwmPAgyQfLg0ml2ha84x6Jackr3cOmE=
Subject key identifier: E8:E8:A9:60:A9:FF:70:72:BC:6E:46:1A:83:91:07:28:EE:31:B1:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CC243BE5B2D11F08915AFE2DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 12:24:44 +0000
ROA not before: Mon 07 Jul 2025 12:24:39 +0000
ROA not after: Sun 10 Aug 2025 12:24:39 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101392 (0x18c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 12:24:39 2025 GMT
Not After : Aug 10 12:24:39 2025 GMT
Subject: CN=686bbc8c-ce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:e5:21:bc:c4:e4:fa:89:71:94:de:ae:8d:
9a:70:a1:3d:ed:2d:36:72:48:62:94:0b:18:40:0d:
78:f0:24:d5:f0:31:77:4a:d4:be:74:12:54:48:10:
65:f2:97:76:4a:fd:6a:48:66:3d:5f:e8:11:6f:12:
76:67:68:4a:4e:11:d5:56:10:97:36:73:d8:15:14:
99:67:cc:e3:6e:00:35:32:c9:f5:21:3e:ef:e2:42:
f2:1a:95:77:44:11:29:5f:b7:bb:3d:3d:81:92:21:
62:cf:98:62:73:d6:a3:e4:2e:d5:67:af:8f:09:99:
aa:79:cb:ee:85:07:f7:4b:01:58:de:d6:96:d9:cd:
1f:ae:70:c9:b4:3d:04:21:be:d4:52:f9:d4:6a:b5:
3f:e6:82:0a:b8:a7:a7:e2:13:91:a9:5c:88:a6:fe:
40:6b:e1:59:b5:14:14:0c:74:8a:14:60:00:d0:c9:
10:ff:c1:bb:f7:7d:ee:5b:8a:9e:38:a0:86:fe:e4:
86:8d:d2:76:db:37:44:9c:63:04:04:35:ea:6f:c4:
8f:c5:2b:5d:08:6e:a7:36:17:59:bf:0a:85:2a:62:
d1:e4:76:85:25:df:f9:5a:27:2c:6f:ae:d6:98:72:
eb:a8:a3:86:fa:a4:bb:46:87:24:b6:aa:47:3f:67:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:A9:60:A9:FF:70:72:BC:6E:46:1A:83:91:07:28:EE:31:B1:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CC243BE5B2D11F08915AFE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
79:46:9a:e8:de:35:46:75:af:b5:1c:d1:18:98:97:3e:4d:8f:
aa:84:ff:f6:bb:f8:96:b7:40:0f:0e:7f:65:3b:05:d0:78:a9:
da:96:d8:5d:35:2e:49:1e:10:27:6b:dd:41:4b:3b:c4:34:59:
43:96:04:ba:92:e7:6d:63:e3:33:2c:d0:71:3c:d3:69:75:d7:
5b:7d:cd:11:cd:3f:3c:8a:a4:86:6a:32:b5:36:8e:02:3c:9c:
05:0b:57:19:ca:a0:b5:9a:bf:68:f6:4c:d4:dc:a5:1b:aa:5d:
45:67:ca:71:f4:02:3b:c9:17:dd:14:9c:79:14:85:e2:20:a8:
f4:83:38:56:bd:1b:34:c8:a0:d9:37:8c:fa:64:e9:4e:fa:be:
05:3b:7d:48:66:3d:32:00:89:b8:21:3b:23:de:ea:d9:fd:d6:
b8:36:4a:f3:0d:97:36:26:f6:8e:65:94:7f:fc:04:e4:01:b0:
a2:f1:56:db:cd:a2:ad:f7:dc:62:f0:67:0b:8c:fa:c1:ac:76:
58:b9:c5:27:49:b6:ab:18:87:a0:c7:8f:98:f8:da:d0:20:0b:
01:d2:c4:bb:23:e5:17:21:3c:df:0b:cb:1c:a1:97:5d:f0:b8:
09:89:c7:cc:1c:41:00:98:23:19:9a:3e:23:56:58:f3:26:1f:
1d:90:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client