Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C53CBC66C011F09D3FA5ABDAE4EC9C.roa
File: E1C53CBC66C011F09D3FA5ABDAE4EC9C.roa (raw, json)
Hash identifier: rp+OfJ5TsqXol1Lmk1+NsNRV6jUym+tUQI2123sL0EU=
Subject key identifier: CD:87:E6:56:21:21:2B:29:CE:F2:64:24:3A:07:13:25:42:27:9D:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C53CBC66C011F09D3FA5ABDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 05:58:26 +0000
ROA not before: Tue 22 Jul 2025 05:58:21 +0000
ROA not after: Tue 26 Aug 2025 05:58:21 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102063 (0x18eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 05:58:21 2025 GMT
Not After : Aug 26 05:58:21 2025 GMT
Subject: CN=687f2882-5c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:71:f2:6c:48:88:ff:f1:71:6b:26:8e:e1:
ec:5c:cd:3e:e0:c9:35:1e:ce:84:96:22:5a:22:b5:
31:f4:b3:3e:1d:16:df:56:02:29:3e:d2:58:87:8a:
4b:51:a5:8e:54:a2:f1:ff:30:da:70:6a:9b:36:79:
5f:5c:1d:c0:df:36:8d:f6:77:9c:22:78:99:c7:6e:
36:c5:10:45:cc:bb:cc:fe:2c:28:89:1d:2d:11:06:
d6:ab:ed:c4:28:00:2c:2b:ed:9a:65:cb:9c:7a:02:
61:01:cd:d1:ab:20:ca:3b:da:93:b5:41:8d:40:f9:
29:bd:56:28:95:16:72:2c:9c:2b:3a:28:62:3d:98:
b6:44:dd:f6:23:3a:71:2d:b6:d7:20:d1:95:aa:dd:
48:93:7f:c1:19:fd:a1:30:f3:64:ba:95:d5:1d:35:
9c:ea:5d:21:2a:38:84:8d:d8:1f:0b:3f:22:c8:a3:
f3:2f:25:f9:99:0e:14:ff:7b:0d:0e:7a:26:ba:0a:
ff:c1:66:12:1d:b3:a0:90:b2:08:d7:dc:c9:f3:62:
ad:a0:b6:b8:33:8f:55:88:f7:59:6c:8f:c9:49:0b:
ea:b9:01:d7:c0:c1:3e:df:99:04:20:f2:42:3c:e9:
49:e4:e6:c0:75:d6:b1:be:6b:bf:5a:a2:a1:0f:23:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:E6:56:21:21:2B:29:CE:F2:64:24:3A:07:13:25:42:27:9D:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C53CBC66C011F09D3FA5ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6c:a6:00:a4:14:8c:e2:67:82:68:e8:85:8f:fc:ba:6f:90:
0c:87:af:eb:8b:a7:15:70:e0:9e:8c:f6:e5:43:61:55:7a:e8:
cb:34:ce:27:32:6c:13:31:c6:22:a6:a6:4a:54:9f:8d:69:a4:
08:b8:5b:5e:b9:88:88:a6:1c:52:1d:9c:d6:15:b5:1d:50:55:
0b:7c:0a:85:2d:b5:73:30:68:dd:fe:9e:d1:40:e0:25:91:0b:
4b:aa:5b:50:86:0c:d3:69:80:c5:11:31:3f:66:cc:84:f4:46:
90:58:61:82:5e:8c:63:ae:b8:af:50:f5:ea:6f:08:2e:26:68:
95:cd:9f:66:f1:6b:87:2b:9b:0a:86:df:e5:3d:ae:d1:eb:90:
d6:a2:cb:28:d8:cb:54:de:4b:18:bc:56:41:c0:41:fc:b4:26:
59:83:b5:80:09:76:1f:2c:11:02:90:c4:6f:3e:53:10:7a:b7:
d4:df:70:92:92:b2:13:e0:de:64:43:a0:69:18:fc:cb:e3:82:
77:e5:3a:d7:d3:3e:fa:ac:0b:a1:64:fe:16:f7:09:62:b1:a1:
ed:ab:26:e6:4c:c3:65:5b:8c:03:78:09:8e:47:63:3e:53:96:
be:88:bc:5f:4d:5e:cb:79:9c:ee:fd:b4:d0:47:86:a0:9e:23:
f3:43:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:31 2025 by rpki-client