Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81D319C2490211F0A91C36A4DAE4EC9C.roa
File: 81D319C2490211F0A91C36A4DAE4EC9C.roa (raw, json)
Hash identifier: tMSOxwdz54pQ8Tn7E1SCpT1E+q+Dh77phMkfAZn9FMw=
Subject key identifier: DA:8F:BD:66:28:21:7B:8E:BB:8A:49:E4:66:2D:2A:6C:4C:B7:E7:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01867E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81D319C2490211F0A91C36A4DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:32:37 +0000
ROA not before: Sat 14 Jun 2025 09:32:31 +0000
ROA not after: Fri 18 Jul 2025 09:32:31 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99966 (0x1867e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:32:31 2025 GMT
Not After : Jul 18 09:32:31 2025 GMT
Subject: CN=684d41b5-20eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:3a:7f:36:58:8c:3e:f5:36:a9:ab:84:48:
e8:6d:fe:6f:e3:5e:7f:19:ac:ed:a0:34:c6:93:14:
f6:d6:19:c2:74:a3:95:f1:67:52:e9:18:f7:ca:bc:
b3:f7:ce:b1:08:33:1f:a2:86:7a:bf:90:70:b8:64:
9d:80:f6:1a:26:a0:36:44:04:31:97:8f:cf:28:29:
01:68:cc:e3:1a:41:7a:2a:b0:db:ed:c8:45:8f:28:
10:5a:10:39:9f:5c:d7:fd:6f:2a:f8:73:d0:c7:a1:
ba:a2:f2:ad:b1:63:24:ca:32:a3:76:2d:f8:f5:3e:
cc:ef:35:a6:56:38:89:07:db:5f:f3:cf:a4:64:87:
f9:6b:75:4a:28:07:11:1f:44:de:94:d1:1f:c9:55:
5a:e0:84:55:7c:a9:32:63:7d:0a:0c:76:e1:7e:b2:
b3:6c:ed:a1:af:e8:53:6e:87:5f:45:83:46:f1:2f:
bc:13:48:9b:70:bf:03:c5:a6:a6:fc:23:bd:c6:43:
c7:10:fe:9e:fa:73:ea:72:eb:85:ad:2f:8f:0d:8f:
f3:f2:d9:91:8a:46:53:81:3f:5c:93:b0:20:38:52:
b1:ae:fb:24:aa:91:6c:e5:ee:c6:a2:7d:05:a9:8b:
65:40:4c:db:20:f2:e2:57:69:ae:6f:3d:d5:c2:6a:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:BD:66:28:21:7B:8E:BB:8A:49:E4:66:2D:2A:6C:4C:B7:E7:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81D319C2490211F0A91C36A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:77:60:30:63:67:9d:a1:11:e0:b3:ec:b6:04:5b:e3:17:1a:
1f:55:e7:3b:2a:1b:d4:b7:65:61:7c:61:c0:02:d2:a7:e9:ae:
d2:03:c0:ac:bd:be:fd:e4:63:86:ae:27:8f:4b:33:88:60:92:
2c:35:f9:57:71:5f:38:7f:0c:a4:7f:c8:54:ce:0d:e5:58:88:
4b:46:96:24:46:31:8f:cb:c6:eb:8d:7f:b8:15:90:88:17:25:
86:0f:25:1b:72:a3:8f:aa:bb:7a:35:ae:8b:66:0d:8d:78:3d:
2a:69:1f:9a:8f:e7:f5:5e:56:84:e5:0b:24:50:46:93:87:98:
61:8a:50:7f:ef:65:f4:a5:8f:bf:a3:da:b9:75:ab:74:88:bb:
22:ff:6d:04:d2:f1:fd:f9:fa:ef:0a:5c:b9:53:fe:f3:32:b8:
0a:02:5f:ed:e1:3a:3c:40:d6:ff:73:19:d1:e1:44:4f:60:27:
54:e7:22:65:e9:b2:c6:6e:ba:45:27:ba:f7:62:53:38:5e:b8:
17:5c:2c:ac:c4:96:7c:71:f5:ee:57:f6:8a:1f:65:ac:ac:00:
f7:71:90:b6:4d:0e:53:61:2b:bf:ac:5d:a5:8d:61:27:7d:ce:
50:b4:f4:49:3f:b3:5a:92:ff:42:89:ae:66:2e:eb:76:04:74:
3a:97:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:59:38 2025 by rpki-client