Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E499CC5CCD11F08DE243F6DAE4EC9C.roa
File: 66E499CC5CCD11F08DE243F6DAE4EC9C.roa (raw, json)
Hash identifier: aUkS8OQlhq+9zgqUknIEQ6Q8L/de6f0r37hDTWx4pFk=
Subject key identifier: F5:57:FB:4A:B0:9D:A0:8A:C4:BB:E9:49:F5:FB:B7:88:53:71:F1:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E499CC5CCD11F08DE243F6DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 14:02:52 +0000
ROA not before: Wed 09 Jul 2025 14:02:47 +0000
ROA not after: Sun 10 Aug 2025 14:02:47 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101596 (0x18cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 14:02:47 2025 GMT
Not After : Aug 10 14:02:47 2025 GMT
Subject: CN=686e768c-92a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:f6:91:b1:57:21:51:e9:de:91:31:c4:a6:
19:80:b3:8b:99:cc:bd:30:27:7d:6e:db:18:cd:e0:
67:c5:b9:17:b1:9b:39:49:cd:14:cc:b8:92:10:f8:
6a:e3:95:a4:2e:fb:a1:21:18:8d:c5:70:7c:fd:28:
ce:48:f8:d5:fd:89:ec:6c:43:33:8a:da:77:dc:f8:
6b:fa:00:40:5a:a2:43:d6:2a:c3:8b:1a:3b:6c:10:
a9:76:e9:fa:dd:3b:51:68:85:0f:69:5a:4f:6d:13:
13:66:1d:fe:38:62:7b:8d:78:3e:5f:6f:4f:f3:99:
07:0b:93:0c:75:ec:58:11:4f:2f:b4:94:87:23:97:
ae:2e:25:3d:70:66:db:47:a7:f6:14:bb:83:89:14:
39:54:ca:c5:e4:18:a7:6e:c1:4b:03:90:ee:79:67:
0b:10:4d:01:f7:d2:20:44:58:b3:22:90:68:e0:39:
31:13:90:ca:aa:bf:72:1b:19:25:7d:b2:fc:52:1c:
1f:55:d5:39:22:30:18:4b:5f:80:12:fd:be:fb:09:
66:01:6a:6c:aa:df:6b:ad:8b:02:91:ba:14:0f:25:
4e:7b:52:8a:96:3b:53:fe:a2:30:a0:45:d6:3b:07:
68:f9:cd:a2:04:9b:1a:05:c8:12:eb:cf:1a:1d:a1:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:FB:4A:B0:9D:A0:8A:C4:BB:E9:49:F5:FB:B7:88:53:71:F1:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E499CC5CCD11F08DE243F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e7:62:f9:ec:59:00:a8:4a:2f:92:f9:55:ce:82:b4:e7:20:
db:55:64:af:54:cf:ab:42:5a:5f:23:5d:16:25:5e:1c:f6:e7:
f8:c8:64:3b:9c:4b:6c:11:78:7a:42:27:5a:78:16:9c:e5:1f:
fd:3b:ea:50:12:dd:65:0d:59:77:f3:7e:e1:b2:bc:bd:dd:c8:
77:10:55:e8:1d:9e:49:12:cc:b7:b5:75:ac:2c:e4:93:35:b8:
a2:c4:e5:2c:a6:a8:15:56:c4:1d:42:71:d2:39:2a:57:a7:50:
5e:b3:81:09:3e:bc:e1:0f:d0:7b:e6:b0:d9:97:50:b8:3b:c1:
ff:14:eb:23:13:ec:19:1a:96:9b:89:84:6b:ae:58:cb:d8:be:
53:30:fa:4a:99:e4:34:cc:fc:6d:5e:f8:68:2d:30:0c:90:e3:
d8:a2:3a:f1:e1:7b:fc:b8:ab:a9:df:56:02:f8:a6:1f:e3:3c:
af:d6:f4:65:de:57:94:ff:ad:a5:f3:d4:16:68:84:93:f1:28:
5d:1a:37:12:74:c1:49:86:9d:b1:68:3e:9c:e0:7a:a2:41:c4:
7c:b2:3d:cf:99:1a:7d:24:ba:1e:3a:6e:71:9f:c7:84:24:2a:
0c:37:ff:1f:6e:73:14:45:c5:5b:e8:61:81:67:5f:80:aa:9b:
f7:34:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:00 2025 by rpki-client