Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8D3B84E6FA111F08D6C16F5DAE4EC9C.roa
File: B8D3B84E6FA111F08D6C16F5DAE4EC9C.roa (raw, json)
Hash identifier: uzszHbderYZ5+Y+DtaJZjAuAB611O8L5KzDtjFecfIk=
Subject key identifier: AA:EB:70:03:A2:61:00:EB:51:E4:41:B0:CB:9A:49:2B:66:AA:CA:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01903A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8D3B84E6FA111F08D6C16F5DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 13:08:03 +0000
ROA not before: Sat 02 Aug 2025 13:07:58 +0000
ROA not after: Sun 07 Sep 2025 13:07:58 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102458 (0x1903a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 13:07:58 2025 GMT
Not After : Sep 7 13:07:58 2025 GMT
Subject: CN=688e0db3-b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:75:20:37:cd:05:8d:95:5d:fe:e1:a3:d9:
df:55:5a:17:61:0a:89:03:21:3d:d6:d3:fd:8b:4c:
33:06:07:d0:1a:27:a9:05:a3:cc:c8:66:2d:90:94:
02:52:4b:b5:d5:76:15:3e:ea:59:f6:dd:00:c1:51:
79:d1:65:bf:6f:14:1f:3e:5e:ca:63:e1:cd:64:8c:
5d:7c:db:43:39:62:72:b3:7e:ac:a7:1a:2d:48:02:
3d:f6:6c:5b:94:01:d1:e2:e3:df:38:03:b9:77:48:
50:d4:cd:80:61:8a:94:dd:ad:0f:03:c6:b0:09:2f:
d3:9b:60:76:ad:fa:92:08:da:b8:a6:6f:45:32:b0:
d9:08:93:98:e6:7e:4f:99:ed:d4:b0:c9:25:f5:92:
d2:a9:12:70:89:cc:d3:2f:7f:18:80:cc:45:59:ca:
70:1b:84:ff:d3:81:cc:8d:45:da:13:2c:68:e6:89:
f8:ce:ed:fe:0a:36:fb:b6:d3:46:6b:21:b6:5f:fe:
ad:f0:82:f0:55:5b:9a:64:3f:ce:34:dd:15:f1:13:
6f:58:85:d0:ad:4d:b4:f0:53:e3:f9:97:16:fb:ba:
81:bf:7c:a7:a3:72:16:15:c3:5b:f2:6f:22:44:f0:
03:ab:d8:87:42:86:8f:a3:dc:6f:b2:9b:ee:b9:09:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:70:03:A2:61:00:EB:51:E4:41:B0:CB:9A:49:2B:66:AA:CA:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8D3B84E6FA111F08D6C16F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d9:95:c9:4c:8a:d5:71:8c:c2:14:b0:b9:c8:20:06:b8:e8:
4a:ef:18:e5:3d:2b:6b:a5:de:20:ca:6f:1c:46:da:c3:04:7b:
46:2c:16:8e:3d:9d:79:0a:cc:22:88:ea:09:5a:0c:da:76:06:
5e:e6:66:f7:85:05:37:44:4d:fc:21:2d:0c:38:b2:a5:04:e2:
bd:29:d6:80:7d:72:6b:08:0e:45:8f:96:3e:d1:e0:3f:7d:4a:
01:ed:4b:18:48:24:25:bd:16:b4:04:16:69:a8:a7:8f:13:4a:
e4:5a:8d:8d:38:1f:24:26:cc:48:bd:8b:02:11:3d:5b:7e:05:
33:4b:8e:b8:7f:50:ee:6f:92:3f:26:a1:f1:38:78:d0:f5:ef:
a2:2e:be:f8:2f:1a:dc:43:35:ae:6f:f1:dc:1d:7e:6e:a7:f9:
1b:de:ae:33:f0:d7:04:8f:e8:fb:68:45:b5:7b:fe:99:ee:6b:
2e:5b:43:ca:c9:6b:c8:56:71:b7:14:dc:83:dd:9c:87:f7:cb:
df:f0:c8:87:87:32:d7:6c:f3:6b:bb:e5:37:32:e7:df:8b:cd:
e9:3a:41:12:4e:4a:f0:c2:4b:77:01:41:67:de:fe:86:b0:ce:
5b:97:f0:c9:29:d1:2c:9b:f9:fd:2f:58:f7:2a:6e:01:a7:a9:
66:bf:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:48 2025 by rpki-client