Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E184E4642D511F0B100BFE5DAE4EC9C.roa
File: 9E184E4642D511F0B100BFE5DAE4EC9C.roa (raw, json)
Hash identifier: QlS89p8XsZxw2C3pyT/Y/cbM8+MeGLn1SJavnvxXxBk=
Subject key identifier: C7:A5:E6:BB:62:7C:D6:3A:89:F9:55:75:79:2D:F7:43:88:E9:52:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E184E4642D511F0B100BFE5DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:56:10 +0000
ROA not before: Fri 06 Jun 2025 12:56:05 +0000
ROA not after: Sun 31 Aug 2025 12:56:05 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99624 (0x18528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:56:05 2025 GMT
Not After : Aug 31 12:56:05 2025 GMT
Subject: CN=6842e56a-f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:56:65:93:22:65:d5:88:32:ca:77:ab:4e:
d1:f5:c5:f4:c3:d2:cf:23:79:3f:80:b9:d8:00:0f:
a2:dd:a0:13:e0:ab:c7:7f:82:fe:06:20:da:35:44:
dc:d4:60:93:c4:4e:3c:be:20:f8:5e:02:c9:5f:19:
41:d2:a6:d3:50:ed:7e:8c:9b:63:ae:2b:b8:99:88:
ce:91:45:3a:21:93:fa:cd:1b:e3:50:b6:3d:37:84:
05:43:86:6c:73:6f:3f:f5:02:73:60:3f:0b:0e:e8:
93:55:00:0a:e0:49:ab:ac:ce:b9:c6:97:de:ce:e9:
3c:2d:a1:7c:8f:ad:4d:0d:49:3f:e6:b1:e1:3c:33:
d4:e3:1b:d9:84:6d:b8:eb:8c:54:9d:fd:21:1a:fe:
27:78:11:0b:7b:13:53:79:90:ff:57:c8:64:58:66:
a4:50:b9:70:1f:95:83:ca:2b:37:b9:9a:a1:4b:33:
25:cc:aa:ae:ad:82:e1:3c:d1:d5:4f:6a:20:16:a1:
7b:bf:c3:cb:4b:67:e2:2f:c6:8e:f6:70:81:2a:1e:
b4:b7:b1:13:d2:ac:7a:f0:d9:9c:c9:ff:ef:0e:10:
1a:30:82:5b:19:9f:41:3e:5f:af:97:91:d0:6a:95:
3f:ba:af:a3:6b:16:2c:b4:86:eb:76:38:77:2c:50:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:E6:BB:62:7C:D6:3A:89:F9:55:75:79:2D:F7:43:88:E9:52:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E184E4642D511F0B100BFE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:a6:c1:80:6f:70:06:15:4a:54:f5:78:a6:5c:ec:7d:b3:59:
8a:26:aa:f0:0e:2d:35:18:95:f2:b0:84:4d:3c:36:f0:b5:2a:
af:24:e6:07:47:0e:6c:34:94:99:cc:82:f5:a2:ac:60:fe:3b:
40:c9:96:d5:a4:6a:6c:4a:bd:14:05:05:a5:a4:64:57:a7:e9:
21:e3:53:ad:ef:d0:75:29:77:e0:f7:57:00:c9:92:a2:e8:6d:
a0:90:67:6d:5e:da:a2:3f:58:a7:30:d1:73:8e:80:5a:e4:3f:
7c:bf:fc:9a:ee:f4:dd:0a:a2:d6:22:e1:ea:64:da:1e:65:8b:
ca:00:a9:a2:77:1e:91:12:5c:1b:eb:7f:6e:9a:0c:c3:1e:8a:
93:40:b4:e1:a0:dd:02:5c:02:cb:0e:35:72:1b:a5:7e:81:f7:
d4:8a:f6:69:fe:48:6e:a6:2c:ac:f3:b3:a7:0b:af:72:13:a1:
aa:42:e5:bd:da:e3:7e:87:93:81:2a:5a:17:68:e3:46:e7:60:
2f:a6:e4:17:16:c6:53:61:35:9a:c5:7f:52:6f:cc:3d:40:32:
c6:96:c8:99:54:5c:30:dd:03:28:43:31:e8:88:0b:50:a3:09:
a0:ac:06:b5:8d:34:bc:02:11:1c:b5:20:f6:c6:4e:b8:c3:c5:
62:9e:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:12:56 2025 by rpki-client