Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C14F7405CFC11F086F221A6DAE4EC9C.roa
File: 7C14F7405CFC11F086F221A6DAE4EC9C.roa (raw, json)
Hash identifier: +OwfVAoaiPrBFW9RHP3Gl80ODG9wo/Z8SKspm9hrooU=
Subject key identifier: AE:6C:6A:8D:36:DE:B0:C8:AA:62:19:6F:77:16:7E:8E:7D:6B:5F:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C14F7405CFC11F086F221A6DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 19:39:54 +0000
ROA not before: Wed 09 Jul 2025 19:39:49 +0000
ROA not after: Sat 23 Aug 2025 19:39:49 +0000
asID: 21859
IP address blocks: 154.198.164.0/24 maxlen: 24
154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101642 (0x18d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 19:39:49 2025 GMT
Not After : Aug 23 19:39:49 2025 GMT
Subject: CN=686ec58a-3e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:fe:f7:f6:53:ac:ba:3a:a3:7f:51:9f:0b:
4f:f6:a4:e5:61:b8:83:4b:18:34:58:3b:0e:8e:08:
2c:4c:89:16:b6:5d:b3:0c:ab:95:1b:ea:55:40:00:
41:75:19:af:81:ca:43:05:c8:23:da:1f:10:97:52:
b2:19:c5:61:90:22:42:be:d2:e3:b1:eb:3d:bb:30:
92:3e:f8:42:7b:c6:0d:f4:c8:2a:3a:bc:89:20:ea:
c3:5b:bd:e9:e6:d4:13:8d:16:0c:0f:d6:c5:7e:6f:
44:f1:d4:83:1b:cb:8a:f3:96:79:1d:e0:c7:e1:db:
99:4f:a7:25:ea:65:4a:89:3f:3d:8d:a1:c6:11:34:
d9:82:b1:d5:1d:7d:a8:70:26:90:d6:38:29:f2:16:
3e:7b:71:6a:6b:c7:47:98:54:3c:43:15:a4:6e:e8:
d3:0b:46:b8:b8:82:81:5f:45:bb:fa:ab:07:af:37:
32:c9:6e:65:41:b6:15:48:ee:11:b7:23:f4:2e:83:
90:83:74:c7:a0:10:36:fe:b5:ea:8b:04:cd:5b:c3:
9a:d8:e2:63:5b:b0:92:c1:26:17:99:14:06:c7:4d:
fc:67:d3:77:6d:f3:8b:f0:7a:fe:5a:58:f7:86:37:
3b:60:20:51:5b:fa:12:33:cf:fc:d0:3f:9c:09:08:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:6A:8D:36:DE:B0:C8:AA:62:19:6F:77:16:7E:8E:7D:6B:5F:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C14F7405CFC11F086F221A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.164.0/24
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a5:ba:89:71:f1:ae:21:f1:d9:60:b1:86:46:90:4e:e1:18:
0a:8b:60:2f:ba:37:41:f9:3e:9e:22:8d:ed:f3:ed:7d:c7:71:
36:bb:54:d2:9c:eb:fd:25:a6:1e:5f:c5:ec:19:b2:c1:29:a9:
d4:23:e2:cf:c7:a8:03:fb:cb:6c:4c:08:c7:b0:c2:86:e1:52:
74:5d:f5:99:6e:50:68:a0:d3:bf:80:ac:35:18:25:8f:72:6a:
f8:99:ef:11:73:99:3d:fd:04:d6:5f:72:07:56:35:47:45:e3:
94:ee:d4:f7:eb:f5:49:13:a5:6c:21:ab:90:cb:d4:cb:f4:4c:
03:b0:5f:64:59:ca:bd:93:2a:40:dc:e1:52:0d:45:5c:71:92:
6c:9d:09:8c:b5:9e:33:60:7c:90:17:7d:be:09:07:39:63:8e:
dc:ab:07:a1:80:32:d5:46:82:8b:05:6b:a0:85:5f:8a:1e:cb:
80:34:ef:4d:7c:49:6b:98:5f:82:40:48:8e:89:27:7c:31:04:
6c:85:1d:e6:df:14:5b:30:c7:2d:55:48:b5:49:cd:e0:a9:84:
b6:1f:7a:8e:8d:c0:92:73:75:51:98:30:79:2b:d0:13:ed:0c:
34:c1:7d:49:bc:73:98:70:3f:2d:25:48:bb:06:8b:b7:56:e6:
6c:78:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:54 2025 by rpki-client