Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1E8BF85E4311F0B0EC8DC2DAE4EC9C.roa
File: AB1E8BF85E4311F0B0EC8DC2DAE4EC9C.roa (raw, json)
Hash identifier: SfQ54mwZXcqO30/lGeJiyrQML2iZXO6hoHUDNLb4M/k=
Subject key identifier: A5:AF:CC:0B:03:38:E3:3B:A7:A4:C4:0A:02:B9:F9:2D:60:C8:38:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1E8BF85E4311F0B0EC8DC2DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:41:58 +0000
ROA not before: Fri 11 Jul 2025 10:41:53 +0000
ROA not after: Thu 24 Jul 2025 10:41:53 +0000
asID: 214413
IP address blocks: 154.194.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101718 (0x18d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:41:53 2025 GMT
Not After : Jul 24 10:41:53 2025 GMT
Subject: CN=6870ea76-5129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:de:42:3b:ed:df:6f:98:d2:1b:dc:45:b4:
8e:2d:6a:b0:60:35:d6:51:19:de:dc:f1:36:6b:e2:
ba:41:ef:4f:43:80:7f:d7:45:f9:d8:eb:23:b5:1b:
ab:66:ab:41:ff:db:ab:f9:d9:1a:e9:72:d8:98:6e:
19:ca:5b:70:80:24:9f:1c:7d:49:b7:5c:7c:8a:6f:
3c:ed:07:05:b4:26:9e:91:0c:da:43:73:67:35:57:
df:cf:a2:57:37:87:76:54:2d:56:1f:53:2d:13:72:
87:7e:b7:0a:cb:a9:b7:68:fe:d9:c1:ce:68:5c:c3:
aa:b2:ec:cc:ef:ad:ae:63:9a:a8:aa:9c:39:24:15:
4f:1d:a2:9c:4d:f2:db:d8:c4:2f:ae:e3:c4:01:3d:
29:04:c8:90:d8:7c:f7:5a:87:b0:cd:22:80:1d:72:
8d:60:36:a4:97:b5:da:05:7a:e2:7a:76:99:ff:03:
0d:02:97:14:1c:7f:74:41:f3:e2:df:48:e6:2a:7d:
5a:4a:44:0c:b0:cd:3b:a9:9c:1f:56:46:e9:1d:c7:
f4:52:fb:b1:5f:51:ac:2d:bd:9b:9c:6e:0c:8c:0f:
52:92:51:47:98:88:be:c8:f6:f0:fb:3b:8e:e2:cf:
e7:bc:c2:7b:7b:a8:a5:4e:f4:31:6e:6e:54:8f:dc:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:CC:0B:03:38:E3:3B:A7:A4:C4:0A:02:B9:F9:2D:60:C8:38:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB1E8BF85E4311F0B0EC8DC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.226.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:62:71:a8:84:94:9a:54:b9:9a:24:60:2c:fb:e9:e9:d8:0e:
9d:6b:2d:5c:24:2b:09:5b:16:ea:3e:cb:2f:de:7d:ad:c4:28:
62:b6:b9:13:b3:8d:a6:eb:6c:95:ec:db:13:a6:37:f2:20:8f:
cb:73:54:c0:bf:be:2b:28:75:d3:92:d4:38:56:3f:d1:07:be:
64:e3:1c:8a:4b:f1:76:7f:4f:9e:f8:e3:ce:f7:b2:7d:0e:ab:
67:d4:b9:14:1e:22:19:1b:0d:fa:bd:e1:7c:4f:2c:42:e5:cf:
09:ab:92:e2:f1:31:c7:8e:33:35:dd:94:a5:a0:5a:fb:9c:98:
50:d1:ce:f4:5f:98:1a:ba:bb:b3:44:90:04:47:4f:65:df:d9:
10:bd:57:35:57:15:44:d1:06:70:a7:cf:ea:7b:23:fd:06:cd:
e2:16:26:ae:4f:32:19:6b:ce:ca:ca:5e:14:76:c9:aa:dc:d8:
3c:3f:df:e3:69:af:58:d5:21:cf:1b:f7:1d:3b:17:43:7d:f8:
90:f4:4b:6b:18:e2:00:7e:7f:67:c4:c0:8f:8d:e8:75:38:14:
cc:da:0d:9c:b5:be:d8:c9:d2:55:a2:25:df:9a:c6:87:25:5c:
ea:47:88:c2:38:8b:77:54:8d:54:9f:1e:6f:3f:00:4b:a1:64:
e5:6f:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:45 2025 by rpki-client