Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8BC7D60607D11F09EFBABD0DAE4EC9C.roa
File: B8BC7D60607D11F09EFBABD0DAE4EC9C.roa (raw, json)
Hash identifier: rtKpZRDAAdeaGS5b3s9H/UPRDA7/eZfdn1KmjFJdmF0=
Subject key identifier: BC:83:7C:03:68:B1:98:43:C1:F4:FF:8B:50:68:BC:E1:1B:66:34:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8BC7D60607D11F09EFBABD0DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 06:42:34 +0000
ROA not before: Mon 14 Jul 2025 06:42:29 +0000
ROA not after: Sun 17 Aug 2025 06:42:29 +0000
asID: 138915
IP address blocks: 154.81.0.0/24 maxlen: 24
154.81.1.0/24 maxlen: 24
154.81.2.0/24 maxlen: 24
154.81.3.0/24 maxlen: 24
154.81.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101775 (0x18d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 06:42:29 2025 GMT
Not After : Aug 17 06:42:29 2025 GMT
Subject: CN=6874a6da-c961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:39:60:27:04:5a:09:10:f8:14:14:0c:d8:
42:4b:43:c7:9e:e1:80:dd:41:c8:7e:a4:1b:7b:af:
0d:33:3d:25:fd:19:b5:f2:2c:f1:05:d6:fd:90:a4:
f2:e6:67:57:e0:5f:f8:0f:24:0e:c2:07:d7:c0:2a:
0b:b3:b9:95:cc:d3:c5:2f:22:e6:8e:cb:4d:97:45:
bf:94:b5:98:fb:f9:f5:59:6c:e8:9b:40:e0:20:e9:
a8:44:cb:c1:af:a7:4e:28:67:bf:e3:ce:eb:21:10:
7e:6a:04:4e:88:79:1e:26:ba:32:c7:61:46:d9:12:
32:b0:f4:de:93:94:86:a7:58:16:8d:a7:33:3e:bd:
06:27:9c:19:15:2f:3c:e7:9f:d5:52:c7:92:c5:4f:
65:1c:21:ec:2d:c5:31:89:fe:93:a0:29:99:e0:d7:
6d:1c:8e:e4:73:b9:b7:3c:c4:6b:ec:71:d6:2d:80:
b1:c1:c4:ac:29:fd:6f:26:eb:3c:62:4d:85:e6:2c:
83:ab:87:22:04:cd:9d:3b:ce:9c:16:3f:5a:20:61:
18:e4:17:e6:40:9e:de:64:da:87:0b:60:e8:f8:12:
17:54:65:9b:19:1e:07:fd:f0:80:02:1b:6f:43:d2:
ce:27:01:b6:50:aa:21:b6:85:ba:31:68:e8:54:be:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:7C:03:68:B1:98:43:C1:F4:FF:8B:50:68:BC:E1:1B:66:34:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8BC7D60607D11F09EFBABD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0-154.81.4.255
Signature Algorithm: sha256WithRSAEncryption
83:3f:8a:aa:70:62:23:ef:f7:ba:b1:9c:07:d5:7e:91:70:d1:
07:09:f9:b3:7a:a8:2f:83:a0:18:11:f3:1c:28:6a:71:c2:68:
ec:20:2a:11:77:5a:ac:2f:16:e0:f5:54:c5:d2:0b:a8:8d:cb:
7f:36:ad:ed:5d:c8:11:8a:ee:08:5a:bf:f2:79:24:93:91:0e:
5f:99:8c:18:ed:63:db:4a:f7:ec:c8:7c:f3:da:af:66:f3:36:
62:c5:f6:92:2f:30:6e:fa:26:ce:22:95:8a:cf:da:04:36:d9:
34:f9:46:29:8f:0c:c9:3c:07:f1:84:fd:8a:0f:e1:a8:00:7e:
77:be:17:aa:80:6f:35:d1:13:72:03:2f:81:ba:14:e8:3b:61:
8b:c6:8a:8a:af:c1:7f:93:62:e1:60:e5:56:8c:30:8a:4f:6a:
e2:3c:b6:0e:de:c1:6f:d0:fd:73:5d:ea:86:be:29:de:bf:00:
c1:b6:4b:79:5d:44:12:51:17:13:87:71:49:b0:b9:87:dd:3f:
63:ed:a6:5b:82:5f:1c:db:6e:83:6d:de:d3:ee:33:e6:c6:40:
3f:03:9b:99:f0:0a:27:f1:38:40:43:36:50:1a:76:f1:ba:b0:
2f:87:9c:29:e7:97:9f:bd:6e:e1:cb:fa:75:47:db:cb:8f:ae:
6c:12:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:15:46 2025 by rpki-client