Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD79E95059E111F0922B2FEDDAE4EC9C.roa
File: DD79E95059E111F0922B2FEDDAE4EC9C.roa (raw, json)
Hash identifier: OyP3vWcINUHsbrCbrhhtCxDiiqZLJaXwNwkqHobEpdc=
Subject key identifier: 2E:C1:82:57:AB:0D:2B:5B:52:AB:6B:04:10:6C:58:33:36:BD:30:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD79E95059E111F0922B2FEDDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 20:51:47 +0000
ROA not before: Sat 05 Jul 2025 20:51:42 +0000
ROA not after: Fri 17 Jul 2026 20:51:42 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101212 (0x18b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 20:51:42 2025 GMT
Not After : Jul 17 20:51:42 2026 GMT
Subject: CN=68699063-f6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:eb:f0:99:53:19:19:bc:5a:7f:81:63:ef:
7f:77:f7:24:a5:cf:8e:52:5f:6b:4d:c2:14:7c:eb:
bf:49:e1:29:51:71:1e:29:06:a0:cf:ed:8c:45:14:
ba:16:77:e0:17:66:52:8b:f1:51:c3:55:3d:a3:58:
8b:eb:63:5b:30:2e:a9:89:24:ee:a8:0e:ce:c3:c1:
34:e7:8c:a2:18:71:bd:7a:9a:7f:5f:f6:2e:12:b8:
c7:d2:cb:47:ac:60:4b:77:5d:a4:b1:50:30:08:6b:
25:92:b1:d3:14:91:86:a6:11:3f:25:d1:30:7d:34:
72:cf:64:7a:78:57:78:be:b2:fe:05:d0:da:62:72:
db:1f:32:5d:d8:fe:5f:50:cc:cc:0e:b4:dd:c4:5a:
dc:e4:ea:06:d2:89:b9:8a:d2:30:83:f7:54:81:cb:
ef:82:64:99:ae:0a:37:45:b5:d8:1b:8b:4e:89:91:
9c:01:5d:ad:df:31:fd:fa:5a:77:cf:39:e2:51:e5:
39:01:b0:ea:cd:30:31:ab:75:ae:de:ce:65:fc:09:
49:16:52:de:fd:67:f5:38:21:18:95:de:d4:69:a6:
7c:69:31:ea:a1:79:4e:39:87:d3:d0:6f:94:41:70:
d4:ab:2e:3c:b9:67:41:3b:f1:52:b0:66:72:b3:7a:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:82:57:AB:0D:2B:5B:52:AB:6B:04:10:6C:58:33:36:BD:30:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD79E95059E111F0922B2FEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c4:6e:89:08:91:4e:e5:bb:ad:45:2f:0a:bd:56:1f:57:25:
83:8e:49:a6:03:5f:d0:59:58:8c:12:48:91:1f:06:85:e8:e9:
79:49:3a:80:cc:51:e9:74:e6:b4:8f:69:3d:dc:8f:9a:bc:2c:
54:cb:6b:c9:ab:01:90:df:67:fd:d7:99:0d:14:82:3b:63:b1:
13:0d:dc:e1:78:9e:f7:69:fd:1e:39:31:ca:1f:65:f5:d2:7f:
89:f1:2e:4f:c8:50:48:2b:e1:82:b9:c0:78:19:7a:31:2e:ea:
97:d0:5b:db:40:b5:35:b4:28:68:19:73:c0:8f:7e:30:84:fc:
b7:15:b5:42:ae:8f:b7:e5:55:75:62:3b:6b:1d:19:ef:d4:c4:
a8:a1:28:b3:14:66:6a:30:74:12:a0:07:ba:4c:36:c1:3c:d0:
3b:82:52:dc:03:94:3d:e0:fb:98:38:91:93:e1:8e:8e:8e:84:
d7:59:bb:b4:21:73:2a:d5:ac:2a:fc:b4:ee:3d:72:1c:cd:59:
e8:46:67:e7:d9:12:10:7b:d8:23:b8:15:44:2f:f0:18:89:b6:
59:15:00:12:77:d4:8f:7c:84:ff:52:98:c5:05:e5:02:4d:87:
f9:31:25:0b:3b:0d:16:33:e5:7c:d1:27:77:7e:84:41:f7:02:
32:4a:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:04 2025 by rpki-client