Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08A86906F9211F0A0BBAD97DAE4EC9C.roa
File: B08A86906F9211F0A0BBAD97DAE4EC9C.roa (raw, json)
Hash identifier: N8fQNBO6SsXEToiY+mDe7NrOJjYcm9Jm/u7t/cD0aDM=
Subject key identifier: 96:AD:0E:91:E8:77:94:23:66:2E:DB:39:D6:31:D9:55:9F:36:0C:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019028
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08A86906F9211F0A0BBAD97DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:20:27 +0000
ROA not before: Sat 02 Aug 2025 11:20:22 +0000
ROA not after: Mon 08 Sep 2025 11:20:22 +0000
asID: 20326
IP address blocks: 154.82.195.0/24 maxlen: 24
154.84.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102440 (0x19028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:20:22 2025 GMT
Not After : Sep 8 11:20:22 2025 GMT
Subject: CN=688df47b-d787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f0:91:55:6b:c3:e5:63:f1:83:dd:81:44:e6:
96:fe:f3:69:f5:d0:3c:7a:13:29:4e:46:35:12:e7:
75:6b:0b:76:59:5b:f4:8f:93:d5:4d:6a:9f:6f:db:
70:72:15:97:ef:a6:e2:60:20:ef:b4:f2:55:26:ca:
53:24:4c:c0:29:8d:7b:03:57:76:c8:68:1d:56:41:
18:02:95:9d:87:29:ab:be:1f:6a:2c:8f:a3:e8:6e:
c0:77:17:d9:ce:b4:d3:33:3a:91:41:67:2d:06:31:
3e:35:df:56:3f:cd:23:bc:ad:09:af:f6:2d:99:f2:
85:3f:f7:30:a6:04:a8:a3:b8:dc:c5:03:7a:02:79:
76:71:e8:fb:58:bf:57:67:b2:12:da:80:ed:1b:8e:
78:d4:0c:26:67:98:e9:11:b7:a7:00:e9:81:ae:ee:
c9:c7:b7:25:a5:64:5f:d3:a5:60:79:a5:38:2c:fc:
d3:e4:82:be:96:8d:35:bf:17:8c:f1:8f:86:88:96:
38:55:ae:37:38:c7:fc:bb:9f:34:3a:30:03:5b:7d:
76:f3:e3:9f:35:7b:55:7a:11:31:29:8f:58:f8:d0:
51:d1:26:8f:23:69:7b:90:08:0a:70:2b:83:6e:9c:
1a:cc:9f:9a:74:64:3c:a1:13:d7:c7:1a:9a:77:09:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AD:0E:91:E8:77:94:23:66:2E:DB:39:D6:31:D9:55:9F:36:0C:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08A86906F9211F0A0BBAD97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.195.0/24
154.84.174.0/23
Signature Algorithm: sha256WithRSAEncryption
35:41:b2:a3:f6:8f:02:f8:c4:db:63:10:e6:21:d6:3a:0c:2a:
da:c3:37:13:96:11:37:33:c4:b1:02:1a:57:69:b2:ac:8e:ba:
a9:c7:c4:5f:da:ea:19:eb:a4:74:31:25:ee:45:6a:be:32:23:
52:81:9e:9f:f2:c5:d4:f8:a4:c8:8d:0f:a0:ae:d0:c9:bd:01:
b5:ef:7d:e4:d5:5b:6b:85:42:08:21:68:65:54:1c:06:25:81:
b4:52:be:69:9b:70:38:66:3c:d3:c2:7c:43:0a:ac:30:9e:1f:
16:22:fe:bc:12:84:67:79:40:e2:c8:79:f4:1f:a7:33:fc:b3:
98:93:4c:df:43:b0:25:43:ba:5b:60:e7:b8:90:59:33:d4:27:
d5:49:eb:fa:2a:87:af:ba:5f:0f:21:92:5c:d2:93:c9:88:d5:
c8:17:2f:93:93:89:58:09:52:f4:94:a0:fd:91:f7:26:87:35:
74:58:20:6e:a7:9c:9a:37:c4:30:b2:36:d0:36:bb:97:40:07:
c6:26:cf:56:46:4e:00:0f:d5:6a:77:68:65:1d:67:9a:16:b8:
1f:c9:e8:f4:07:c8:ed:a1:45:f3:fd:b6:6e:ae:89:e8:68:45:
5c:8d:d5:f8:55:8d:34:b5:24:67:38:5a:71:59:52:43:aa:56:
2a:10:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:40 2025 by rpki-client