Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784CD6904C4F11F0A4B8D1A7DAE4EC9C.roa
File: 784CD6904C4F11F0A4B8D1A7DAE4EC9C.roa (raw, json)
Hash identifier: LU38wTh7sYB7jLhiZo8dZWks1N7qKMJZhH7jIApOQGA=
Subject key identifier: F6:1F:FD:E2:01:B1:4C:CE:74:04:04:62:C0:A5:D6:61:D3:29:BF:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018751
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784CD6904C4F11F0A4B8D1A7DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:21:06 +0000
ROA not before: Wed 18 Jun 2025 14:21:00 +0000
ROA not after: Fri 25 Jul 2025 14:21:00 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100177 (0x18751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 14:21:00 2025 GMT
Not After : Jul 25 14:21:00 2025 GMT
Subject: CN=6852cb52-b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:52:2b:69:db:05:77:06:b5:e7:1f:d9:0c:
a1:f2:99:63:07:d8:ae:fd:73:b0:9e:72:11:58:bf:
68:d2:68:74:92:a3:60:68:48:ed:46:bb:20:a9:f1:
d5:4a:2d:1f:2a:98:19:99:91:34:f5:a8:98:d8:6b:
f0:ad:07:b7:c1:25:d4:c4:c6:00:fd:e4:94:4e:27:
8d:60:02:c6:d6:d9:a5:0a:45:bd:53:9c:09:c2:9a:
7d:ca:f7:d3:38:59:e1:15:44:28:cb:fb:06:63:9e:
b6:9c:b9:41:5a:6c:47:7a:50:8c:72:99:f9:ed:78:
8f:2b:d2:47:78:3c:05:46:a4:bf:81:d0:b5:59:94:
e9:ea:6c:2d:73:69:37:96:1f:b4:7e:d0:74:09:c6:
8c:01:1e:b4:3a:d3:36:e3:26:eb:85:0b:d5:3e:fc:
41:69:c2:f8:36:4d:aa:8e:c5:9c:b7:6c:4d:f6:24:
8e:3c:3c:81:91:e2:37:7b:a1:20:5d:d1:66:07:9b:
78:ca:12:f3:3d:40:be:a2:e7:d9:68:12:c9:db:ac:
66:63:6f:05:ff:cd:c5:55:f8:d6:2e:d5:26:93:06:
15:d1:e9:65:ad:e6:b0:9a:d0:12:21:6d:a0:41:6c:
d6:e8:88:7f:bf:b7:e4:be:34:de:d5:a5:1b:89:48:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:FD:E2:01:B1:4C:CE:74:04:04:62:C0:A5:D6:61:D3:29:BF:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784CD6904C4F11F0A4B8D1A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:50:51:29:77:8f:3f:57:df:ab:50:22:19:da:a3:6f:54:da:
49:f4:be:e6:60:a4:1a:6f:aa:66:a3:83:0f:6b:b8:85:92:5b:
1d:18:c1:a0:e1:47:76:ea:48:25:fb:4a:1b:6c:3f:ec:c2:22:
43:95:86:0a:18:b3:f4:c2:80:bb:81:f3:31:65:1e:46:a5:f7:
90:1d:6f:d5:d7:71:20:60:7b:bc:c5:81:12:4a:42:37:3a:2c:
0c:4f:a1:69:c4:c1:2d:e5:92:5a:3c:a8:25:2f:61:18:a2:53:
1f:da:06:4d:0d:aa:97:a0:0a:4d:65:59:9c:9b:40:99:58:8f:
59:e4:f7:5a:4d:6f:1e:f9:9e:f9:2a:53:5e:62:06:80:fa:7b:
6e:8f:82:ed:5a:32:9e:ee:b1:23:8c:ec:c7:71:d4:3c:65:02:
a3:b4:52:13:ba:18:7b:39:74:64:89:f0:c4:64:05:3e:7f:31:
15:09:43:4b:04:a9:f9:aa:ac:c7:04:d8:3d:7e:0a:68:f9:93:
52:26:00:6c:d2:28:f0:d6:f8:e1:64:bb:0d:f4:02:17:ec:b6:
64:d0:d2:01:bc:06:30:a9:cf:8a:0a:c6:55:f0:c3:ea:e5:2b:
46:da:9b:cf:09:82:78:19:c2:0d:d9:38:a2:9e:af:90:c6:66:
52:11:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:43:25 2025 by rpki-client