Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD51DBF65B5211F0A2E3B4D0DAE4EC9C.roa
File: CD51DBF65B5211F0A2E3B4D0DAE4EC9C.roa (raw, json)
Hash identifier: uxU6zTPq+32f7Eurgb5RiUv2ZTDabr1k0Z3XSLWa/+s=
Subject key identifier: AA:BB:D3:62:4B:DC:1E:EB:4E:74:62:05:40:A7:53:ED:16:13:8A:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD51DBF65B5211F0A2E3B4D0DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:52:44 +0000
ROA not before: Mon 07 Jul 2025 16:52:39 +0000
ROA not after: Sat 23 Aug 2025 16:52:39 +0000
asID: 21859
IP address blocks: 154.198.164.0/24 maxlen: 24
154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101428 (0x18c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 16:52:39 2025 GMT
Not After : Aug 23 16:52:39 2025 GMT
Subject: CN=686bfb5c-018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:e6:14:28:95:9a:65:bc:f7:f8:ad:84:54:
54:b5:4d:49:3a:8b:17:80:ad:2f:2c:4e:72:a2:27:
d6:e3:4b:ee:23:9f:cc:86:f3:20:cd:28:7a:11:25:
de:66:ea:fe:c0:df:64:0e:82:8b:cf:bf:00:08:7b:
b9:0a:89:09:8c:b2:cc:b9:b8:f9:e5:0c:c3:b4:d9:
e0:81:cb:06:3a:ed:de:94:3d:cb:5c:df:6d:05:55:
99:f2:94:ce:cc:ba:7f:0c:99:1d:31:d7:3a:1c:35:
9a:53:6f:65:5c:d3:f7:bf:93:46:44:2f:50:db:01:
36:d9:31:cd:b3:7b:43:84:4b:f4:62:7d:a9:9d:25:
c4:20:db:92:74:98:9f:97:f3:39:cc:24:27:05:98:
0f:5b:9f:0f:62:11:1d:e9:b6:6f:12:fb:8d:e1:cf:
b7:2a:39:d3:d8:b5:c6:ce:d0:70:ab:92:93:eb:99:
38:2d:cb:b5:87:ab:27:aa:b0:f6:a9:7a:72:49:89:
59:fc:64:c1:9d:8a:d4:d8:b6:b0:34:a0:89:33:c1:
02:4f:6c:e3:cb:24:c2:43:f0:b7:db:df:de:64:c5:
fe:94:e8:72:3d:1a:a2:00:b9:e1:c9:94:1b:b1:d2:
e5:ba:83:bf:e8:90:df:64:a2:35:41:2c:45:99:dd:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:D3:62:4B:DC:1E:EB:4E:74:62:05:40:A7:53:ED:16:13:8A:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD51DBF65B5211F0A2E3B4D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.164.0/24
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:56:bb:5a:09:17:b7:fd:13:ef:4d:4b:16:80:2a:dd:52:11:
29:68:aa:ed:84:a7:38:f0:c5:a3:e0:64:c2:81:6e:19:c1:d4:
ac:b7:ee:a5:b3:23:0b:2f:85:67:b1:1f:c4:ed:40:7e:25:26:
36:dd:9e:b0:78:82:d4:75:75:fe:c6:87:f1:e6:fe:86:85:88:
70:c8:76:9b:95:4c:90:c1:1c:14:83:f1:67:36:9a:97:fc:87:
50:e4:5c:42:0d:50:a7:36:ef:fd:23:38:ce:a5:91:a0:91:c3:
2d:11:7d:1b:5e:a1:e9:4c:30:14:49:a2:6d:e3:4b:a5:ac:11:
b1:eb:db:ce:7d:ee:07:99:36:ae:78:82:06:6a:8a:ca:f7:0b:
1d:6c:fc:d6:96:2f:24:04:f9:42:bf:57:12:61:5b:7e:0f:08:
82:71:a8:a9:4e:d6:d0:62:1e:6d:3f:6f:69:ed:83:9f:f6:47:
ba:9c:5c:61:75:cc:c1:a8:be:b6:96:dd:cc:06:95:3f:c2:40:
78:1f:fc:a1:2a:9b:2f:02:b2:94:d9:5f:b8:9a:2d:05:b5:6b:
05:dc:7b:af:18:64:01:24:a5:0d:14:09:8c:66:6c:ea:4f:9b:
25:1a:22:c7:ac:2e:14:26:7f:32:90:81:6a:d4:ad:e4:cd:eb:
5c:8c:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:15 2025 by rpki-client