Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E27B76617011F09BA5DF80DAE4EC9C.roa
File: F8E27B76617011F09BA5DF80DAE4EC9C.roa (raw, json)
Hash identifier: wdftQsMPJCfvNJcZ3Kuzh4ngxHghYC2P+mreQRMMrKA=
Subject key identifier: E8:F5:06:70:C4:5F:3A:60:5C:62:31:EB:53:27:54:9F:2B:B1:46:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E27B76617011F09BA5DF80DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:43:49 +0000
ROA not before: Tue 15 Jul 2025 11:43:44 +0000
ROA not after: Tue 19 Aug 2025 11:43:44 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101838 (0x18dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 11:43:44 2025 GMT
Not After : Aug 19 11:43:44 2025 GMT
Subject: CN=68763ef5-2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ea:cc:e1:b4:c8:90:a7:c4:ae:eb:dd:40:b0:
50:47:fb:ea:9e:f3:73:d5:22:d6:15:35:70:35:27:
fe:e3:41:98:86:c5:5e:a8:10:c9:5c:a1:df:dd:25:
1f:a9:4e:56:89:6e:c7:0a:44:53:60:70:cd:61:94:
b3:62:9e:6f:02:88:71:96:d2:5c:01:f8:25:cf:35:
1a:bb:01:ee:d0:ff:bc:c3:08:05:3a:f2:fb:4e:fb:
97:09:ff:42:b2:a1:a3:37:96:52:38:5e:31:86:22:
87:cb:e3:8a:66:4f:ce:d0:7d:9d:86:00:f7:f4:bc:
cd:8d:0f:0d:28:8d:d2:1e:3b:32:55:8c:6c:91:98:
3a:18:7a:0e:d4:bc:7f:c5:b5:ff:5c:1c:6d:8c:bf:
da:b2:44:0d:e8:d9:00:4e:64:d2:f9:6b:b9:db:a2:
44:7f:e3:d4:cb:58:47:44:8d:4d:2d:98:af:ce:13:
ff:37:b0:ec:b0:54:fe:a0:3f:e3:e5:44:9c:eb:b2:
fd:47:e7:12:91:f1:b7:57:b3:fb:52:e9:5b:60:17:
0f:a8:17:ec:a2:e4:6a:a7:61:4e:72:9d:eb:30:13:
db:fa:8e:56:31:0b:54:0e:dd:0e:b7:40:4c:c2:c8:
39:4f:c4:f0:c4:fc:a5:33:5c:05:44:b1:f2:e3:a4:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:06:70:C4:5F:3A:60:5C:62:31:EB:53:27:54:9F:2B:B1:46:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E27B76617011F09BA5DF80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1c:13:03:7c:e5:24:37:01:4f:ad:4b:f5:ab:30:a7:d7:04:
b7:41:b0:e1:74:ea:b8:97:af:de:40:99:b3:1f:78:c4:ce:17:
6b:f8:e6:98:f5:9c:c3:e5:5b:53:20:46:40:e7:dc:c4:99:d0:
ae:e4:8e:c4:c9:3d:e0:64:42:b7:5d:47:47:e3:09:1d:87:9e:
6f:0a:ef:8d:a6:c9:b4:18:86:42:87:eb:dd:df:b1:47:65:f3:
05:40:67:ce:da:4b:05:85:82:df:1a:8c:ba:8c:35:74:33:4b:
91:6e:d9:3a:ce:cf:a7:25:ae:68:c1:21:64:36:e5:54:ca:4b:
60:96:b8:fd:5a:ca:a4:5a:8d:c2:eb:f1:ec:3a:42:0c:b8:84:
9e:79:2a:2a:0f:50:13:d2:55:d1:44:94:9e:97:33:fc:3f:f2:
07:3c:a1:a9:22:53:65:9a:f2:84:b5:af:fe:96:7b:e4:f2:42:
07:27:ca:31:ec:39:d4:95:aa:41:43:b6:82:51:1e:2f:43:78:
5e:ce:0b:8d:5c:ca:ea:ae:19:ca:b5:03:d0:d8:e5:eb:cf:ee:
c2:97:fe:7c:67:d1:92:db:45:f4:68:91:64:2d:87:5d:5d:5f:
6f:c1:ff:6c:ff:ad:32:78:22:cd:cb:09:5f:95:a6:5d:db:7c:
66:76:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:16:42 2025 by rpki-client