Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/26D0B8E25E3611F0887D5CE9DAE4EC9C.roa
File: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (raw, json)
Hash identifier: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=
Subject key identifier: 6E:EC:59:0E:3E:F4:39:78:87:92:AC:88:A7:FC:25:FE:42:AD:F7:ED
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0609
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/26D0B8E25E3611F0887D5CE9DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 09:05:12 +0000
ROA not before: Fri 11 Jul 2025 09:05:08 +0000
ROA not after: Wed 10 Jul 2030 09:05:08 +0000
asID: 22355
IP address blocks: 41.206.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 Aug 2025 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 11 09:05:08 2025 GMT
Not After : Jul 10 09:05:08 2030 GMT
Subject: CN=6870d3c8-914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:97:5f:9e:19:32:02:32:f5:5c:05:20:9b:
ab:b2:61:99:e8:c8:cc:ff:4b:ac:12:22:76:40:8a:
3e:20:a8:2f:46:78:55:7f:37:f2:d6:fc:b5:dc:da:
8f:f5:5a:75:8f:4d:f0:54:71:ab:a4:43:a1:c3:46:
23:bc:a4:43:10:d2:ad:2c:ae:70:b6:81:a1:d2:c2:
6b:df:0c:7e:0b:83:16:4a:c9:92:13:53:29:a3:ac:
ca:00:46:af:0e:73:80:50:8d:90:a6:36:44:93:3c:
e2:30:d0:0c:b9:69:57:5b:f9:fb:64:1c:c0:10:5d:
1e:7a:98:bc:6f:03:a3:e5:2e:1e:33:89:3a:a4:3c:
13:6e:bc:b0:46:c9:31:a1:9a:ee:94:20:fa:2e:a6:
4c:f7:2a:8e:86:c7:8e:c1:ac:cc:2b:45:64:66:7e:
0c:e9:1a:66:3c:a2:34:8f:38:61:eb:4b:6b:f3:27:
61:6f:5d:a2:3c:70:b3:de:a5:a2:e1:a1:f7:16:fe:
a6:ae:1d:ff:8f:cf:8c:45:c7:c6:d0:e8:9a:bd:76:
aa:0f:b8:72:c6:77:38:74:d2:e2:71:33:c9:de:b8:
a9:ef:2b:72:02:6c:31:4c:b9:d1:5b:68:9a:02:59:
09:00:41:b6:51:3f:15:eb:5e:ef:05:ab:cd:e0:02:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:59:0E:3E:F4:39:78:87:92:AC:88:A7:FC:25:FE:42:AD:F7:ED
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/26D0B8E25E3611F0887D5CE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:02:2e:88:17:41:de:2b:43:0f:12:9e:78:db:50:c2:06:f5:
3c:d7:27:85:f0:04:ae:d4:99:e7:17:9d:ce:fa:7b:c6:e8:a4:
73:96:43:c9:c2:ef:6b:74:9b:47:96:d2:82:20:82:df:4d:ba:
77:ae:98:2c:86:9c:54:38:57:16:93:e2:a0:e4:df:54:ad:5e:
23:a7:2d:ad:45:ee:ea:79:b9:6a:88:27:33:20:56:24:87:ae:
0d:6d:26:85:b1:d4:27:d2:40:a6:10:a1:a5:c3:ae:89:ed:40:
fb:ad:c1:03:7c:79:29:a1:2b:66:d3:1d:19:16:be:22:4e:48:
65:71:31:be:18:2e:f5:4f:52:2c:8b:c5:a9:d9:da:fc:12:45:
2b:c1:3d:29:2b:ee:06:ae:f6:54:97:d4:f2:c5:e2:f4:01:d1:
86:17:ab:59:57:a7:b5:4d:77:d8:98:49:de:1c:38:01:7d:79:
61:da:7a:e0:44:09:a0:56:53:7c:b3:4b:50:a5:94:b4:fc:db:
0c:15:23:2e:24:41:3c:63:b7:3a:65:e7:15:4d:9a:e6:f3:a5:
77:3d:a3:f1:d3:2d:ad:ee:51:63:ba:7d:74:e5:a8:a5:f4:ef:
32:d6:a0:7d:4b:f2:42:b0:36:9a:cf:c8:5b:d9:d7:2a:14:a3:
0d:c9:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:40 2025 by rpki-client