Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B64C33C85A6911F0B64B91E4DAE4EC9C.roa
File: B64C33C85A6911F0B64B91E4DAE4EC9C.roa (raw, json)
Hash identifier: mFUpe2BYDeWx96NfbxG0G/aibrxOvTXL7tB/gvYoUqs=
Subject key identifier: 81:23:84:64:76:66:36:48:E3:D8:EC:22:DA:7E:1B:E3:89:84:32:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B64C33C85A6911F0B64B91E4DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:04:13 +0000
ROA not before: Sun 06 Jul 2025 13:04:08 +0000
ROA not after: Tue 05 Aug 2025 13:04:08 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101228 (0x18b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 13:04:08 2025 GMT
Not After : Aug 5 13:04:08 2025 GMT
Subject: CN=686a744d-2c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:80:eb:f2:9a:25:01:49:2c:93:6f:a2:b3:
cd:2d:d0:63:f0:b7:90:80:ff:3f:94:ea:c8:06:8e:
be:6c:f0:f8:a7:94:e1:eb:8a:a3:2f:e7:4b:25:9e:
98:08:15:3b:db:2c:ef:d1:47:9a:a1:6b:c1:5b:5e:
7d:8d:24:69:8e:17:f8:25:e5:53:b4:00:92:d0:ca:
ea:98:77:42:17:0a:02:3d:9a:65:dd:90:d3:01:74:
57:2f:fc:80:be:fa:7b:d0:d4:10:9c:2e:03:6b:b9:
76:29:c7:b1:74:41:7c:a1:73:59:80:b1:80:2d:13:
25:32:67:29:c7:e4:56:41:8e:22:f9:58:97:0f:e5:
48:53:40:98:54:05:31:e3:e4:f3:53:fd:68:bd:98:
7b:57:94:70:df:57:af:54:9b:9e:7b:c5:06:ce:3e:
db:05:c6:fe:35:3c:80:32:6f:82:37:2a:48:4f:b2:
1a:5c:c5:3f:9f:d9:b8:c7:d7:1e:44:18:9b:6f:c5:
72:84:72:77:a7:ad:08:83:9c:03:a9:a2:f5:88:46:
12:2b:a2:93:23:ee:82:12:61:35:27:54:c2:df:94:
ea:7c:2d:52:93:ec:55:b6:65:4c:a5:a5:3c:3d:e4:
23:f6:4b:7d:5c:87:fc:2f:9a:b8:7e:a5:01:3b:b4:
c5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:84:64:76:66:36:48:E3:D8:EC:22:DA:7E:1B:E3:89:84:32:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B64C33C85A6911F0B64B91E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:37:0c:15:bf:1f:d2:e7:33:5c:92:57:d0:2c:3f:a7:ea:17:
ce:cc:38:88:09:19:d2:11:6f:96:e2:be:20:f9:11:89:63:9e:
cb:42:7f:f4:16:62:57:23:75:2a:97:b0:77:c8:b0:fa:79:b6:
d4:e9:8f:c9:fd:dd:0e:be:36:7a:1e:95:91:98:00:5d:e6:17:
1e:b9:da:ba:41:6b:11:34:45:a0:52:c2:c2:c2:fa:b8:d7:76:
f5:7f:a5:37:aa:59:63:59:b5:36:39:07:a3:dd:fd:95:5a:69:
64:6b:69:e7:7f:bc:07:f4:00:0a:4b:13:be:3b:46:e8:b2:f9:
45:1e:c1:ae:80:47:c9:a7:86:9c:9b:6d:5a:dc:b1:1f:17:82:
ab:fc:c2:79:6a:fe:8c:84:79:3e:4e:7d:c2:46:6b:7a:b2:93:
98:62:85:95:1f:2b:78:e4:eb:d4:5b:e6:0e:62:36:0f:c3:e3:
27:4e:8e:4e:e5:77:b9:95:f5:f2:08:b4:c7:e5:8c:3e:e8:1a:
67:98:05:2b:6d:1a:1e:47:93:60:a9:8e:12:b1:f3:fd:5c:57:
f8:1e:07:7f:79:27:9e:ee:57:79:30:37:06:24:f5:40:15:00:
d5:b4:7b:66:f7:82:41:96:97:42:ee:32:9a:51:64:9e:2f:98:
88:c2:49:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYtsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA2MTMwNDA4WhcNMjUwODA1MTMwNDA4WjAYMRYw
FAYDVQQDEw02ODZhNzQ0ZC0yYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv6+A6/KaJQFJLJNvorPNLdBj8LeQgP8/lOrIBo6+bPD4p5Th64qjL+dL
JZ6YCBU72yzv0UeaoWvBW159jSRpjhf4JeVTtACS0MrqmHdCFwoCPZpl3ZDTAXRX
L/yAvvp70NQQnC4Da7l2KcexdEF8oXNZgLGALRMlMmcpx+RWQY4i+ViXD+VIU0CY
VAUx4+TzU/1ovZh7V5Rw31evVJuee8UGzj7bBcb+NTyAMm+CNypIT7IaXMU/n9m4
x9ceRBibb8VyhHJ3p60Ig5wDqaL1iEYSK6KTI+6CEmE1J1TC35TqfC1Sk+xVtmVM
paU8PeQj9kt9XIf8L5q4fqUBO7TFnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIEj
hGR2ZjZI49jsItp+G+OJhDKPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjRDMzNDODVBNjkxMUYwQjY0QjkxRTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtAgMA0GCSqGSIb3DQEB
CwUAA4IBAQCLNwwVvx/S5zNcklfQLD+n6hfOzDiICRnSEW+W4r4g+RGJY57LQn/0
FmJXI3Uql7B3yLD6ebbU6Y/J/d0OvjZ6HpWRmABd5hceudq6QWsRNEWgUsLCwvq4
13b1f6U3qlljWbU2OQej3f2VWmlka2nnf7wH9AAKSxO+O0bosvlFHsGugEfJp4ac
m21a3LEfF4Kr/MJ5av6MhHk+Tn3CRmt6spOYYoWVHyt45OvUW+YOYjYPw+MnTo5O
5Xe5lfXyCLTH5Yw+6BpnmAUrbRoeR5NgqY4SsfP9XFf4Hgd/eSee7ld5MDcGJPVA
FQDVtHtm94JBlpdC7jKaUWSeL5iIwkmN
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:57 2025 by rpki-client