Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D89ABF8580211F08C021EBDDAE4EC9C.roa
File: 5D89ABF8580211F08C021EBDDAE4EC9C.roa (raw, json)
Hash identifier: 7cc7ryL3LLn4XViPbzSqVV41PSKlz8Q4/znlf0FE/ns=
Subject key identifier: B5:D0:F5:16:0F:8C:AC:CC:50:A9:B0:57:A1:2F:A9:9C:CD:0D:5B:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D89ABF8580211F08C021EBDDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 11:39:23 +0000
ROA not before: Thu 03 Jul 2025 11:39:19 +0000
ROA not after: Thu 07 Aug 2025 11:39:19 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100875 (0x18a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 11:39:19 2025 GMT
Not After : Aug 7 11:39:19 2025 GMT
Subject: CN=68666beb-8fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:29:00:31:06:fe:07:1e:ff:5c:a2:e8:c2:
45:2b:2f:ac:47:e9:d2:db:3a:38:78:d4:04:a6:b7:
3a:48:2e:a3:c4:af:6a:69:5c:1e:eb:80:34:75:ee:
ce:e1:b4:55:cd:c0:01:8c:87:35:a8:d7:b9:88:5b:
97:7d:99:6c:93:b5:dd:c9:b8:55:ba:2e:b0:11:58:
52:75:3f:e8:3c:4d:59:30:c1:8f:0e:60:97:e8:7d:
f4:f0:de:37:1f:42:cf:6a:03:bf:fd:2a:d5:17:cc:
4c:df:58:8d:a4:73:21:77:9b:ba:13:62:95:58:00:
2e:d6:f1:d2:a2:3b:80:41:97:85:1a:59:d5:51:a6:
bf:1e:2c:0b:f0:8d:49:28:16:ed:ce:42:04:aa:27:
6a:0d:27:f4:54:a6:4f:31:3f:80:45:c9:b6:a3:3c:
0b:6e:96:f8:51:45:af:36:e8:21:c8:0b:b8:72:2c:
80:27:45:d1:7a:bd:28:e1:c5:f8:3c:e6:42:36:79:
4c:64:3a:8b:6b:ab:de:f2:ac:48:5f:0b:da:63:7e:
51:bb:57:58:4a:2c:74:29:d3:b2:9a:8a:c5:11:5d:
54:de:4f:1c:61:fc:97:f3:1c:14:63:d3:38:ce:7d:
9d:67:2a:fa:48:68:d8:4f:dd:2b:8f:d6:3a:eb:c4:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:F5:16:0F:8C:AC:CC:50:A9:B0:57:A1:2F:A9:9C:CD:0D:5B:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D89ABF8580211F08C021EBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6d:61:6e:c4:26:a7:1d:76:d8:c0:7a:20:ae:07:65:13:80:
2b:50:09:6f:69:b4:5e:8c:bb:0a:2f:a1:76:72:44:69:b5:31:
87:2d:30:20:62:72:a7:04:d4:d2:a2:ee:b2:55:72:49:b1:3d:
96:2d:5d:cd:e4:36:78:fd:45:be:a3:4e:99:a9:85:25:00:09:
b5:60:0e:9f:86:d2:77:5c:79:4e:d6:99:8d:6e:fe:ee:87:71:
4a:c0:fe:ad:43:12:4b:ca:16:b3:f4:fc:8d:12:66:a0:39:56:
36:4f:4e:7d:68:10:92:b1:a8:f0:f2:fd:f6:de:f6:04:86:96:
ab:5c:4e:87:4e:0c:91:cf:5f:cc:26:1d:37:71:44:69:a4:46:
3a:2e:52:d0:0c:9f:64:76:35:6a:b8:4e:31:8e:70:86:c7:16:
f4:f3:19:b7:7d:b2:71:09:f5:24:7d:85:f7:7b:9f:d5:a5:e4:
1a:f1:ab:3e:db:19:7b:25:6f:fb:67:73:1d:55:3c:cb:38:f3:
da:94:93:3d:00:ca:90:a2:25:39:a9:1a:a0:ea:a9:e3:88:1d:
2c:0e:39:e1:b9:20:9d:73:d4:a8:a3:86:be:3e:b5:14:b3:54:
c6:e0:91:49:b0:e8:3a:e6:d5:e0:8c:b7:d1:55:72:8a:0c:b9:
7f:4c:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:04:49 2025 by rpki-client