Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD18C067B011F0A74E6ABDDAE4EC9C.roa
File: 26DD18C067B011F0A74E6ABDDAE4EC9C.roa (raw, json)
Hash identifier: tcVDlu+GFjLhTheYL274uyleT92T+SUhYDd3kAGZ3bA=
Subject key identifier: DC:F1:2B:75:39:96:4E:95:52:CA:66:7C:03:D8:DC:A7:9E:86:67:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD18C067B011F0A74E6ABDDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 10:31:12 +0000
ROA not before: Wed 23 Jul 2025 10:31:07 +0000
ROA not after: Sun 26 Jul 2026 10:31:07 +0000
asID: 209242
IP address blocks: 154.194.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102153 (0x18f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 10:31:07 2025 GMT
Not After : Jul 26 10:31:07 2026 GMT
Subject: CN=6880b9ef-7271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:c1:d7:93:7b:f5:62:8b:36:d6:6f:3d:13:
c5:97:0b:a8:f3:4d:9e:c9:1a:93:b7:d4:07:4c:9e:
a4:35:84:c8:9b:21:72:0f:3a:55:67:b5:69:cc:11:
0a:26:1e:c4:bd:5c:da:11:d3:34:e9:e2:fc:1e:df:
4f:e1:da:6f:74:d2:dc:6e:e9:80:f4:fc:1d:e9:3f:
c0:5d:5f:e6:a2:2d:39:08:6b:05:d4:6e:a9:1c:a0:
c6:91:c1:c9:b5:a8:f9:39:f4:95:95:06:6b:7d:b4:
f1:99:22:c0:20:b0:4b:fe:e9:c3:a5:61:b7:68:f6:
33:3f:2f:68:04:0a:f6:92:7f:c1:04:d4:6c:08:64:
7e:44:f6:50:b3:dc:5e:4c:d5:06:6c:55:8c:ec:2d:
41:3b:ee:cb:1a:b1:3b:d3:19:41:f0:b2:4d:a0:90:
f5:6f:68:64:72:99:98:4f:a4:80:37:60:ad:33:a8:
bf:53:7d:97:c9:9f:b0:69:85:b1:16:fc:be:ad:72:
61:d8:fb:33:80:9a:59:0f:fb:48:3a:22:f5:ba:81:
be:05:66:fd:68:6a:f5:23:7d:a1:fc:a0:0b:2e:fa:
0d:54:0f:ae:a1:32:c4:55:84:81:99:b1:30:dd:ee:
9f:47:5c:89:23:a7:16:79:c0:b2:e9:14:65:8b:2f:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:2B:75:39:96:4E:95:52:CA:66:7C:03:D8:DC:A7:9E:86:67:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26DD18C067B011F0A74E6ABDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.12.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:28:8f:6e:0d:4f:d6:07:ed:6a:08:0e:b5:7b:75:f8:1c:34:
91:b5:d9:20:d9:39:55:e8:00:98:92:e9:df:cf:44:85:79:c9:
81:dd:6c:d5:84:ef:25:b1:41:47:0f:0a:99:a2:76:34:08:25:
0b:87:16:7c:03:d3:6e:2c:06:8e:e4:c7:b0:07:aa:2f:91:18:
1a:6c:e2:cd:5f:5b:3d:ac:8a:61:dc:a1:23:0b:dd:e5:7b:a4:
28:da:29:80:3c:f6:59:ef:67:b5:bc:52:59:7c:88:96:73:4e:
ae:e1:86:a5:f5:88:fa:ff:23:29:ba:e2:01:9d:54:f7:f3:0d:
db:22:53:92:0b:af:0c:6c:63:e5:51:50:14:6b:70:16:c5:fa:
35:67:97:f9:1d:d1:57:2f:d8:c9:ba:60:f2:43:60:9d:be:f4:
13:cd:ed:cd:cc:4b:c7:78:ab:a0:62:01:1a:26:b2:9a:10:2f:
1b:64:d7:6e:4e:47:d7:eb:04:c8:f6:c0:94:bc:92:9d:50:8d:
d4:07:dc:18:39:e0:a7:4f:81:7b:d6:2d:d0:0c:af:1e:67:14:
3b:d4:ab:1d:00:0f:2e:5f:a4:eb:5c:a8:fa:1d:27:5a:7f:0f:
bf:d7:a1:47:00:37:a5:11:7a:b2:e1:f7:4e:42:31:86:8f:39:
3f:81:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:32 2025 by rpki-client