Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EF8B0858D211F09A26FE8ADAE4EC9C.roa
File: 64EF8B0858D211F09A26FE8ADAE4EC9C.roa (raw, json)
Hash identifier: zdNd88+WGmRvJf4W484iMN8j1Lrh1nievTyiWI5YxfE=
Subject key identifier: 86:3E:E5:4F:27:0E:4A:EE:83:D7:A9:90:5E:85:EF:35:48:46:EC:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EF8B0858D211F09A26FE8ADAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:28:31 +0000
ROA not before: Fri 04 Jul 2025 12:28:27 +0000
ROA not after: Mon 11 Aug 2025 12:28:27 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100948 (0x18a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:28:27 2025 GMT
Not After : Aug 11 12:28:27 2025 GMT
Subject: CN=6867c8ef-086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:05:26:21:2b:4b:ed:1a:a4:f0:ba:84:0b:
7a:f2:e6:1e:a3:2b:a1:03:97:ee:38:6e:14:f8:3d:
87:63:6b:90:b1:64:6f:09:5e:9c:f3:24:d4:5e:b8:
eb:e8:40:0e:bc:c7:d5:c9:1b:9a:25:e1:88:a1:62:
02:d0:e6:5b:ad:f0:69:be:90:50:96:a5:23:68:18:
41:c0:e2:bc:d9:6c:19:93:11:ef:d9:c7:b9:99:8b:
c9:1c:19:89:86:9f:e6:19:ed:9e:7a:95:3a:2a:07:
16:8d:c0:03:a4:2d:77:6a:ea:7a:43:c9:05:32:30:
04:04:a4:59:f8:4a:1d:af:f9:c7:75:9d:69:df:11:
d6:e3:4f:45:61:b1:87:1d:b1:5d:2a:60:95:03:b8:
8c:17:93:94:a0:54:d6:91:cf:2b:6c:f1:8b:07:49:
cb:c3:45:ba:11:42:08:ad:9c:30:4b:02:2d:5d:99:
94:c8:e6:c4:e4:aa:ef:5d:65:38:1c:6b:dd:c3:96:
ab:20:78:08:e7:92:64:22:ff:24:5e:20:6e:d9:cd:
74:d4:90:87:64:26:99:8d:95:f5:a7:7e:65:f4:86:
fa:ed:53:03:93:23:5a:0a:84:25:d7:e9:d1:16:bb:
a7:09:ad:f3:26:ec:cd:d0:51:52:6b:5e:79:c0:ed:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:E5:4F:27:0E:4A:EE:83:D7:A9:90:5E:85:EF:35:48:46:EC:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64EF8B0858D211F09A26FE8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:69:4d:fa:e8:1b:34:55:3a:ca:17:71:c4:e0:06:d0:ba:68:
c8:9e:e9:5f:ae:06:90:2c:40:6d:4d:1c:54:3d:6a:46:7e:e8:
7c:68:20:55:e3:f3:66:71:90:2f:9e:0c:9e:63:d1:21:58:5b:
c2:e4:62:c1:e0:83:53:6d:ea:6b:14:98:2d:dc:b2:18:aa:99:
e2:df:b1:4b:7d:dc:7a:6c:e3:1a:ed:38:72:6b:76:67:4c:0c:
64:44:c1:a4:0a:14:51:33:68:e9:5e:d9:05:13:30:25:80:96:
03:4d:15:8c:07:94:b6:4e:53:8c:ca:21:1e:69:35:5a:d7:12:
3d:a7:fb:6e:3d:0f:69:52:cf:98:1f:5d:b5:c5:b3:82:42:13:
02:4c:a0:9f:6d:d6:fa:3e:c3:5e:3e:a4:29:47:9c:d8:0e:b0:
04:2d:ce:46:40:b2:93:78:33:0d:0f:1d:15:17:7b:04:0c:73:
df:3f:b3:df:4e:55:09:27:8c:c4:0b:30:e9:fa:dd:cc:01:9f:
c5:4f:2c:91:1b:aa:b1:ed:4d:8d:a9:02:fa:fc:87:a4:e5:b8:
1b:ed:c9:1c:ba:e1:fb:94:13:2f:49:57:8d:f9:10:49:15:f9:
17:d0:4c:1a:e2:8d:20:4f:5a:8a:d8:bc:a9:d0:73:3f:2c:d5:
e1:d4:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:41 2025 by rpki-client