Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A25E58A4B5A11F0A93CDBDEDAE4EC9C.roa
File: 5A25E58A4B5A11F0A93CDBDEDAE4EC9C.roa (raw, json)
Hash identifier: 8vCVnPfzrsHzbtg3llm+vTJlCkoZ0zJbyWILKq9qDv4=
Subject key identifier: DB:3F:9C:DB:45:6A:E2:CF:9B:E9:E9:DB:72:91:A1:6D:A7:96:B3:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A25E58A4B5A11F0A93CDBDEDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:06:28 +0000
ROA not before: Tue 17 Jun 2025 09:06:20 +0000
ROA not after: Tue 07 Jul 2026 09:06:20 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100076 (0x186ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 09:06:20 2025 GMT
Not After : Jul 7 09:06:20 2026 GMT
Subject: CN=68513014-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:d1:c3:3c:7a:0d:29:44:ba:b8:37:8d:56:
7f:9a:67:81:93:41:f5:d9:ea:c2:11:19:ad:f2:56:
52:f2:a1:b2:07:d6:78:f2:50:ad:5a:ac:3c:5c:0f:
3f:09:27:13:02:20:1a:88:5c:68:46:be:a1:c1:21:
3c:ad:b0:27:75:15:4e:50:27:12:ea:28:84:4b:3f:
f8:77:2c:bd:08:90:26:10:33:f8:6f:1e:13:5e:99:
64:41:d7:59:c8:e4:dc:b6:e2:99:a4:23:45:b5:7d:
62:38:af:4c:02:70:df:62:64:b2:aa:87:d3:ab:ae:
c9:2e:cc:07:e2:4e:72:d9:b7:00:96:b9:54:d6:ce:
c6:f5:7e:06:e8:1a:16:b7:9e:7f:b0:86:1e:e4:3b:
20:d8:fc:76:2d:1b:79:eb:30:91:11:78:5b:1e:80:
dd:0d:c2:5c:a1:c4:84:6e:b0:49:5a:1a:94:91:c3:
15:76:f3:2b:49:01:a6:56:43:8a:7a:15:b0:a6:29:
5b:70:f9:58:05:5a:a4:2d:75:9c:95:ca:95:c0:39:
ea:8c:18:f8:8d:bf:49:04:ba:18:a2:fa:cf:62:3a:
00:d0:5e:7f:ae:c2:da:90:dd:6d:75:ac:d8:13:f0:
9f:6e:04:8d:b2:57:c9:29:ba:ff:5c:e9:89:13:97:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:9C:DB:45:6A:E2:CF:9B:E9:E9:DB:72:91:A1:6D:A7:96:B3:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A25E58A4B5A11F0A93CDBDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:21:c0:3d:f6:93:4c:95:07:69:ff:65:76:07:78:df:0b:44:
2f:ae:97:65:1b:ed:ee:80:1e:19:81:25:a6:dd:a3:60:ce:76:
fc:7b:5b:41:20:c7:05:52:a3:29:da:56:6a:33:37:55:1a:17:
d8:af:df:11:97:0f:4c:1b:04:76:43:da:ac:c2:c6:36:2c:25:
81:35:c0:72:ee:16:79:00:17:10:69:f6:fc:bb:87:a4:ac:b6:
92:c2:84:7d:bc:60:34:00:09:da:b3:fd:c4:02:87:01:1e:74:
ea:19:d7:25:1a:ae:af:1c:f8:d9:49:c0:51:e6:6c:35:7b:9e:
ae:9d:0b:0d:6c:df:f3:c5:69:e3:51:2a:8a:1c:14:45:6d:7a:
df:0b:40:bf:00:20:6f:e3:d4:d1:63:63:7e:95:c1:cd:bb:66:
b8:b1:b3:8f:d5:24:f4:6f:ea:4e:29:08:b9:c1:0f:54:d6:55:
33:d3:16:37:25:48:0e:25:9e:b9:ac:76:8e:5a:08:23:f7:da:
58:4b:5b:d6:3f:af:4a:9c:bd:9a:3a:c6:70:ee:11:a3:07:52:
3c:39:81:76:2c:7b:69:6d:41:6f:b1:0f:30:9a:49:d4:90:80:
6d:1a:16:37:70:4b:29:b5:84:66:e6:35:e3:7f:41:c1:18:55:
b0:2c:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:22:33 2025 by rpki-client