Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CEAD66BE58AA11F096F2648CDAE4EC9C.roa
File: CEAD66BE58AA11F096F2648CDAE4EC9C.roa (raw, json)
Hash identifier: DsmnAFx3Ka4uMC2+10ofx2Y7bl3eOVnEPXtr3CeaKCs=
Subject key identifier: 56:07:DC:C5:08:86:B8:B4:09:D1:A5:5A:A0:D3:81:33:EB:5D:D9:1F
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 06B9
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CEAD66BE58AA11F096F2648CDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 07:45:09 +0000
ROA not before: Fri 04 Jul 2025 07:45:04 +0000
ROA not after: Thu 04 Jul 2030 07:45:04 +0000
asID: 834
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 4 07:45:04 2025 GMT
Not After : Jul 4 07:45:04 2030 GMT
Subject: CN=68678685-374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:c2:e6:65:69:0a:a2:87:63:3a:bc:aa:5c:
88:60:1b:a1:23:f8:31:75:1f:3f:5c:03:d5:c2:4f:
ad:6b:32:29:df:76:f3:b4:e4:d7:1d:c4:de:51:6a:
47:aa:06:32:78:3e:af:f6:9e:dd:98:43:26:79:c2:
0f:7c:a7:3d:16:c8:43:ef:9f:ad:fb:d2:68:5d:c6:
7b:3b:21:ff:fd:c2:d3:c0:4d:c5:f2:3a:64:22:c3:
ce:cc:07:19:7c:6e:17:35:62:ce:61:70:6b:7b:25:
09:1a:8c:25:78:e6:9a:7d:a4:8d:9b:ad:1e:7a:80:
93:1f:66:97:0d:08:83:bb:80:6b:2e:cf:9e:5a:e2:
34:3a:4e:77:a2:9f:b0:d3:54:73:3b:56:eb:ae:0f:
24:ba:c5:54:38:30:84:ee:94:8b:65:e0:cb:55:18:
45:7d:2c:41:0d:6f:6a:bb:c3:15:b0:02:e9:7f:d2:
6b:39:99:0f:31:e0:db:a0:4e:b1:ac:3e:b9:fe:c3:
61:7f:4e:4b:99:6a:a6:cf:47:91:d9:a1:f5:17:5b:
f4:3f:61:d5:69:db:8b:94:58:dc:96:eb:e8:40:03:
1d:d8:8b:b7:ac:ed:fe:c0:1c:fc:7e:22:3d:a3:41:
3f:d8:6d:52:91:d7:84:8e:0f:3f:01:f5:d8:b3:05:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:DC:C5:08:86:B8:B4:09:D1:A5:5A:A0:D3:81:33:EB:5D:D9:1F
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CEAD66BE58AA11F096F2648CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:b4:1c:22:c7:64:c8:7e:da:70:a8:1e:02:38:27:5e:37:
ca:51:3c:4c:b1:59:6b:67:4e:a1:e7:9f:50:10:4e:15:ef:62:
ea:15:37:30:d1:2c:e3:57:99:cc:5b:5b:96:41:a7:38:18:da:
05:f8:28:5f:db:03:4b:f2:1a:e1:6b:32:00:5f:af:0b:93:07:
81:e8:d4:1e:9e:96:3b:c4:91:d2:0a:7d:ac:45:18:4b:13:ae:
43:96:4c:1c:da:62:10:72:e6:b7:2b:0a:21:2e:fb:3b:25:99:
17:34:b2:fb:a7:d8:22:dc:c2:f3:6f:cd:bd:42:73:ce:de:13:
13:76:f5:37:86:3a:97:73:c5:2b:72:7b:7f:68:13:6e:0e:02:
50:b6:65:68:d7:d0:64:00:90:1d:46:7a:98:58:e0:56:e6:10:
60:76:e6:73:c1:76:59:a2:8c:d1:15:a9:40:77:90:36:09:c8:
f9:7f:7d:04:be:75:5a:00:87:ba:44:17:17:c4:00:f2:35:a2:
ac:75:25:95:79:aa:93:0f:2e:53:1f:02:7b:7d:58:59:5e:57:
84:8f:e3:03:76:00:45:ce:48:54:67:a6:c8:93:be:6f:24:fe:
59:4e:8f:6a:86:88:45:a1:ab:9e:f3:2d:f3:25:aa:1c:96:2f:
4f:17:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:05:33 2025 by rpki-client