Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C4E3AC4CF211F0852BA2D0DAE4EC9C.roa
File: 56C4E3AC4CF211F0852BA2D0DAE4EC9C.roa (raw, json)
Hash identifier: nID0YREsUITRS8jw1Ov2oITeczJne4edHUFODtFBPB4=
Subject key identifier: 51:E6:DF:5E:C5:54:E2:2D:5F:D6:6C:F3:15:71:05:A0:18:14:E0:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018768
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C4E3AC4CF211F0852BA2D0DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 09:46:57 +0000
ROA not before: Thu 19 Jun 2025 09:46:52 +0000
ROA not after: Tue 07 Jul 2026 09:46:52 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100200 (0x18768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 09:46:52 2025 GMT
Not After : Jul 7 09:46:52 2026 GMT
Subject: CN=6853dc91-5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:08:46:21:9c:c7:c4:25:4d:3f:16:90:96:
b9:4f:5d:5a:d3:cd:1b:34:75:94:54:38:74:bd:f5:
ac:16:49:13:c5:17:bc:c1:8f:97:6c:36:4e:a7:e0:
9c:6d:58:8e:bc:48:a7:9c:b8:e6:f3:a4:28:bc:6d:
95:75:de:bf:e4:44:6e:19:7f:47:57:f9:3a:a4:93:
d8:bc:b3:97:e3:90:82:88:e0:a4:6c:51:59:d9:85:
80:ed:dc:16:7c:f4:c4:ee:45:2c:21:49:3c:4c:ad:
2e:34:60:25:c5:f0:c2:01:32:f2:f3:65:c3:6f:ed:
50:de:8e:60:d8:73:2c:f0:84:ea:70:c6:6e:42:96:
2c:78:86:af:be:ab:da:f5:3b:5a:47:fc:dd:11:62:
da:9e:e0:57:a1:7a:36:57:74:80:f3:7b:08:c8:36:
e6:77:ce:2d:f0:45:de:05:4d:d5:a3:49:cd:9d:f2:
cd:68:25:3e:ff:f7:ad:d7:3c:ba:4b:a5:dc:b5:9a:
3d:00:08:ff:52:33:ad:ec:5e:f7:f5:3b:5a:76:26:
62:79:f2:6d:a4:e7:04:05:03:75:3f:e4:b7:1a:42:
31:6c:27:d4:79:ff:b5:17:27:72:9d:8e:fa:20:2e:
c0:69:6f:e6:18:cf:92:09:98:fc:69:b0:43:4e:5d:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:DF:5E:C5:54:E2:2D:5F:D6:6C:F3:15:71:05:A0:18:14:E0:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C4E3AC4CF211F0852BA2D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:62:ca:14:79:51:ce:5d:c5:77:46:b2:27:0d:1d:57:b7:6a:
d9:65:06:6a:54:7c:ea:7a:cf:37:32:c8:6c:8e:69:97:8f:d5:
38:60:33:0e:4f:ee:0c:28:94:4d:e5:36:4b:15:e7:c0:18:14:
b9:ba:80:92:1d:8f:73:6a:eb:af:a6:53:32:0c:75:3a:4b:3a:
4e:f6:b4:7e:58:8c:aa:e9:73:8f:d6:d2:5a:91:0a:4a:13:b9:
f0:93:30:6b:29:fe:56:88:fd:44:e2:6b:e7:b4:69:df:e2:cb:
9d:52:92:ba:ca:52:01:2f:46:d0:84:24:cf:6c:1e:7d:0c:9b:
88:67:3d:e4:f8:d2:18:7d:f3:33:d6:94:f8:29:07:f8:78:ab:
9d:7c:a4:d3:0d:0b:fc:96:20:82:1e:1f:16:1b:f2:89:90:d0:
81:da:66:81:96:d3:d8:1b:fb:17:df:5b:17:90:73:36:dd:73:
9b:74:9f:81:39:6d:cb:f2:c2:0c:6f:bf:aa:3d:96:33:4c:e4:
49:8d:92:5b:a0:16:be:08:bb:6b:c9:54:5b:5f:0a:84:50:26:
eb:c4:6b:ee:9d:04:9c:a5:9d:56:66:3b:a4:92:10:59:f4:33:
10:6e:6f:19:86:23:20:6e:a6:61:74:9a:c9:95:88:2d:92:b7:
14:80:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:37:55 2025 by rpki-client