Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82670A165B4411F0B8970CF6DAE4EC9C.roa
File: 82670A165B4411F0B8970CF6DAE4EC9C.roa (raw, json)
Hash identifier: MJlFaPwG9GiAWkat/G02jxBJ+IbCuKDuKSxAnnJr16s=
Subject key identifier: 3B:6F:66:A3:ED:C2:70:7C:55:50:FD:F9:94:3B:FF:3B:FB:3C:CA:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82670A165B4411F0B8970CF6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 15:10:26 +0000
ROA not before: Mon 07 Jul 2025 15:10:21 +0000
ROA not after: Wed 13 Aug 2025 15:10:21 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101408 (0x18c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 15:10:21 2025 GMT
Not After : Aug 13 15:10:21 2025 GMT
Subject: CN=686be362-3f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:b6:4c:26:7f:6a:7e:01:9f:7e:a4:5d:4c:
62:f8:f3:c8:a9:01:64:23:ae:03:b9:63:9e:a3:54:
27:4f:3d:7c:35:0a:f8:1f:cf:f6:58:c1:ba:7d:63:
3f:fb:1c:72:3f:43:cb:0e:b0:18:a2:a7:9c:57:a4:
78:1f:26:8d:39:5d:5c:7c:95:52:bc:0d:02:a0:cc:
18:e6:30:9e:5f:22:9c:eb:5a:5d:5c:de:57:d4:1b:
da:51:ae:74:f4:16:b0:0f:52:b1:e1:2a:0a:96:4b:
0e:13:18:84:e4:2f:6c:41:fc:42:20:c3:4b:6d:24:
2c:69:67:1e:55:33:3d:02:fb:8e:79:ae:c1:8f:63:
c4:6d:58:76:6d:5f:b7:d2:6c:24:58:ce:f9:99:86:
e8:40:03:27:db:85:c7:5c:4d:c6:e4:7c:ed:25:41:
68:04:4a:c1:ac:4e:8f:87:fd:d6:eb:8d:5b:f1:84:
39:8b:1b:bb:03:3b:b8:88:ee:30:59:06:08:c2:d9:
6f:63:39:86:4f:72:5f:56:d9:8b:20:37:67:26:f2:
14:ba:bf:d1:c0:eb:e5:24:22:10:46:04:aa:8a:2e:
bd:a2:84:f5:c1:d2:7e:1b:5d:8d:03:24:39:18:97:
63:83:61:55:b6:f1:0c:3d:f6:f6:1f:94:02:d7:3a:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:66:A3:ED:C2:70:7C:55:50:FD:F9:94:3B:FF:3B:FB:3C:CA:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82670A165B4411F0B8970CF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fd:53:91:85:7a:8f:40:7d:ef:c4:03:31:24:59:9b:4c:04:
56:10:38:7b:a3:6d:c9:cd:f1:24:6c:14:ae:c1:50:dd:e7:aa:
50:5d:e3:39:f8:3c:10:4e:0d:ba:87:21:7e:9f:35:66:37:3e:
23:dd:10:9a:64:71:c0:bf:5a:5a:fd:55:43:2c:6e:a0:5f:85:
93:64:60:8b:e9:56:88:5b:b9:45:e8:58:71:ed:79:a0:f8:0c:
61:b5:4a:4b:5f:c4:4b:83:6d:77:20:71:b9:76:46:d6:07:67:
8e:df:74:fb:f7:5e:22:97:79:b2:f1:69:46:15:6e:c8:51:5c:
ed:81:3f:57:c6:8f:25:6e:3d:d3:9c:83:66:dd:57:1f:47:3a:
bd:8b:4d:38:2d:f6:57:da:15:61:80:36:3c:61:76:88:d1:ea:
de:e7:03:05:b0:60:68:20:d4:c9:30:2a:9d:57:9a:19:c8:de:
50:50:17:48:0e:69:81:62:f0:43:d0:94:c7:46:ff:c3:28:78:
2e:1a:a2:8c:2f:78:bf:f6:57:17:38:b8:52:e3:20:d8:69:62:
f7:4e:e4:8c:0b:e6:92:99:b0:94:dc:65:da:5e:6b:f0:e9:9a:
17:53:5c:46:8b:e1:2c:7b:99:85:ad:80:b1:ca:1e:fa:de:57:
d3:d1:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:47:03 2025 by rpki-client