Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDAD389059C911F0AC5A94D0DAE4EC9C.roa
File: DDAD389059C911F0AC5A94D0DAE4EC9C.roa (raw, json)
Hash identifier: vDtlfVSWY6xNCZAHbTqigY3ZwWbwK9cNY9WceAhMw4k=
Subject key identifier: BB:20:70:0E:52:33:A9:CF:52:EB:C6:79:3E:1B:63:87:1A:93:D2:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDAD389059C911F0AC5A94D0DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 17:59:59 +0000
ROA not before: Sat 05 Jul 2025 17:59:55 +0000
ROA not after: Thu 04 Sep 2025 17:59:55 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101180 (0x18b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 17:59:55 2025 GMT
Not After : Sep 4 17:59:55 2025 GMT
Subject: CN=6869681f-f03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:88:1c:0f:2e:43:3b:d1:06:41:b2:f6:3e:
c0:c2:b5:55:b9:1b:20:3b:34:20:1c:46:5f:83:6e:
66:e9:1c:4e:8e:b9:b9:45:19:e0:62:7e:4c:52:0f:
be:18:cd:8a:f1:dd:be:7a:ae:1d:3a:14:3b:51:ed:
3f:29:df:a1:88:dd:6d:95:21:c4:4c:02:20:d3:22:
fa:66:1e:d0:b6:66:d8:4b:34:b4:c3:02:64:fe:5f:
c0:6a:d3:db:d2:64:04:3c:31:55:4f:53:d7:ab:44:
9e:6f:43:80:66:89:8f:2b:ae:10:87:9a:13:59:e2:
94:e5:b6:d6:a8:0d:e4:2a:ec:83:19:76:e2:2c:06:
a0:23:62:c6:55:e8:2f:71:7d:04:13:2d:71:b6:5d:
51:f3:b5:40:03:81:a1:e6:df:13:42:e1:df:1d:0d:
a6:d2:43:04:c4:ca:40:c6:44:1b:9b:1c:7b:2f:58:
29:c5:7f:a6:a7:01:bb:6a:9e:e1:bf:e6:07:a8:23:
83:73:b8:64:79:95:b9:87:97:7d:07:4d:92:ec:fa:
95:d5:89:92:ed:7d:48:16:1e:5d:cb:47:2c:98:7e:
11:b9:25:41:d3:20:50:eb:f9:40:26:41:f4:e8:f4:
0b:e2:69:44:20:53:b4:68:9d:73:a4:9f:c2:1d:2d:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:70:0E:52:33:A9:CF:52:EB:C6:79:3E:1B:63:87:1A:93:D2:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDAD389059C911F0AC5A94D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:09:4a:d0:14:cb:a9:bf:36:d3:83:7f:8c:d7:d8:86:72:7e:
fb:84:69:8b:fc:8b:93:aa:83:49:04:e3:38:97:53:2c:d4:68:
8c:6d:b9:a9:db:ab:3a:c8:60:fa:b5:8a:87:87:41:06:5e:55:
da:49:b8:bb:a3:a3:da:a5:02:d5:97:62:de:18:33:e2:32:da:
09:02:f8:e2:ac:b7:78:fc:e0:86:fb:e4:5c:df:20:7a:ff:38:
7f:3a:d5:d2:34:ca:7c:1c:94:af:6a:2b:2c:59:7d:e4:7f:6c:
7b:6d:ac:ed:18:48:e7:92:3b:a5:3c:fd:d1:ae:90:a2:52:76:
61:31:ad:70:7f:22:0e:db:2b:f3:c9:6a:73:f7:26:23:45:1a:
92:34:59:be:8d:97:3c:3c:ea:d3:9b:d7:78:8d:a3:c9:15:67:
f7:12:33:c5:c0:f0:66:3e:cc:9f:27:b2:ae:b2:ba:f3:52:66:
a6:88:13:ef:b3:70:c0:c3:e6:9b:82:50:be:39:d3:31:86:d4:
ae:07:7b:46:27:64:69:bb:52:10:18:2e:5d:c5:ab:b2:48:5c:
e6:83:c7:5c:70:d3:07:8f:99:10:f7:fe:8f:94:dd:fa:ba:f7:
21:7b:6a:9b:62:db:64:b3:c5:f5:92:46:5c:2c:9d:f4:79:85:
28:aa:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:20:24 2025 by rpki-client