Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED4CB0667E711F09AE5FA9EDAE4EC9C.roa
File: 0ED4CB0667E711F09AE5FA9EDAE4EC9C.roa (raw, json)
Hash identifier: RKo7TVQFgjqEktq3kvJnbXSqp1Z2EVDjVgXr47VDcRY=
Subject key identifier: A1:71:1B:49:5B:43:8E:ED:D0:C1:07:D5:19:AC:3A:E4:81:89:21:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED4CB0667E711F09AE5FA9EDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 17:04:14 +0000
ROA not before: Wed 23 Jul 2025 17:04:09 +0000
ROA not after: Sat 04 Oct 2025 17:04:09 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102228 (0x18f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 17:04:09 2025 GMT
Not After : Oct 4 17:04:09 2025 GMT
Subject: CN=6881160d-52e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:c3:76:40:13:a3:ad:88:c6:c8:f7:5f:d7:
38:f5:61:73:66:d3:af:4c:0f:f8:2a:af:fc:eb:d6:
58:e1:f3:c8:29:a7:78:46:99:8f:fb:d0:c6:bb:f3:
ef:a9:3b:0a:5f:4e:77:56:81:a4:63:87:fb:bc:ff:
49:35:20:82:98:2c:c4:0f:53:5c:e0:b2:09:4e:fd:
e0:c1:44:bc:92:89:9f:86:f0:48:ca:c4:11:20:b1:
4d:11:37:6a:1f:b5:6a:e9:54:9a:09:40:a6:7e:17:
d3:86:4a:15:97:47:71:92:b4:24:3f:ab:f4:cd:ea:
4f:58:54:54:d5:5f:0a:ca:2e:46:b8:f8:09:16:9e:
da:1d:c4:83:18:8c:84:dd:91:f9:64:b8:8f:7a:6e:
1d:b8:2e:61:00:9e:9e:39:dc:9a:4a:5f:2e:c3:0e:
8c:45:b8:26:5a:1d:74:94:83:76:62:95:ac:06:38:
79:2e:f2:ba:8a:07:d2:3a:4c:32:45:49:3d:bd:4c:
e9:69:62:2f:44:72:ce:49:b5:49:13:42:9f:a8:3b:
af:cb:40:b2:db:ab:5f:4a:01:d2:b2:39:ce:40:64:
63:3a:70:4d:0d:41:7a:24:49:c6:54:65:f1:fd:9c:
4b:74:56:79:e9:6f:0f:f4:12:58:f1:1f:16:cb:ed:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:1B:49:5B:43:8E:ED:D0:C1:07:D5:19:AC:3A:E4:81:89:21:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED4CB0667E711F09AE5FA9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:88:ee:f2:1c:40:51:63:18:5b:fa:42:d8:a3:22:c5:36:69:
9c:7f:92:a1:d7:98:88:d5:38:19:a9:31:ed:fd:7a:03:83:10:
fc:bd:ea:7b:d2:3b:44:b6:59:0a:dd:05:13:f7:67:aa:16:4f:
3d:db:00:b3:a8:96:4d:3d:28:ba:92:fb:ae:b3:d4:3b:8c:c2:
29:30:6a:53:1b:af:50:0e:d0:e8:2b:3f:df:8c:f1:a7:a1:0c:
08:2d:8d:81:fd:1d:ef:ea:ca:b9:1c:05:03:5f:28:4b:ea:3d:
92:34:91:ce:bb:d1:a5:6a:fe:05:03:aa:b8:f0:11:17:b4:45:
0d:b4:51:2d:f1:b6:36:80:82:c3:40:50:5f:9d:08:2c:e1:9c:
37:51:90:79:8b:4b:24:ed:24:85:48:fb:ab:33:12:4f:3f:77:
6f:0b:e3:35:be:9d:48:62:e3:c0:c6:f5:36:1e:0f:cc:dc:15:
5a:56:12:90:35:96:00:02:4c:d5:87:8b:0e:bc:97:e7:1d:e7:
a9:12:1f:55:39:3c:81:16:8d:25:a6:5a:a4:96:46:f8:a4:a0:
15:72:89:80:7d:71:8d:04:5b:2d:be:73:6c:45:3f:6c:85:24:
61:82:34:c0:16:9e:72:dd:e0:a7:b1:de:78:dd:c1:12:44:a9:
7f:f0:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:07 2025 by rpki-client