Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7856C49A544511F0A2B539EADAE4EC9C.roa
File: 7856C49A544511F0A2B539EADAE4EC9C.roa (raw, json)
Hash identifier: 3o/vV/J6hpvOrb4Vm3O/ixfctO+AU77Hl5qaOgrOalI=
Subject key identifier: FC:A2:0C:01:B5:86:6F:71:FC:C7:37:8A:31:A5:CA:F5:E7:CA:E6:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018967
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7856C49A544511F0A2B539EADAE4EC9C.roa
Signing time: Sat 28 Jun 2025 17:29:40 +0000
ROA not before: Sat 28 Jun 2025 17:29:35 +0000
ROA not after: Tue 26 Aug 2025 17:29:35 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100711 (0x18967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 17:29:35 2025 GMT
Not After : Aug 26 17:29:35 2025 GMT
Subject: CN=68602684-cdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:e2:bd:d5:19:2a:c6:10:a7:9e:fe:95:d1:
7d:b1:c0:89:f1:c4:27:26:92:3d:28:dd:2f:98:16:
eb:a1:19:21:44:e0:04:9b:9a:c4:4c:e0:8e:cd:98:
5a:f1:d3:ef:95:4b:82:7b:0e:ba:d1:5c:cb:55:70:
d2:c4:a1:7c:94:c4:50:81:92:61:bb:ff:c3:a9:69:
16:df:ef:d3:e6:16:57:17:c7:7d:9c:60:18:43:77:
6e:a6:5c:1f:be:d4:b3:c5:85:dd:92:73:5f:41:5b:
fa:2b:cc:30:80:53:eb:02:4b:6e:67:4b:bf:13:56:
84:12:31:a6:a1:0e:a5:e8:da:ca:67:88:ce:5e:97:
c3:bc:5f:cc:da:f8:e4:ad:11:a3:dc:36:5c:01:42:
6d:0b:f0:70:b9:b8:93:67:b8:48:cc:c6:3a:79:44:
01:73:f8:cd:05:08:0b:59:99:fa:b9:56:a5:0c:b9:
c2:dd:88:2c:8c:a4:06:36:2c:63:b0:ed:50:9d:e9:
09:c3:e9:5f:f8:1b:d2:8f:27:6e:04:4b:f2:40:5e:
35:d8:d7:75:79:ad:1e:b6:ad:da:fc:d4:dc:63:39:
fd:d7:f4:2c:b9:8b:86:54:27:74:8c:e5:44:31:91:
64:83:36:97:ea:72:55:d1:b7:29:5c:26:1f:34:bb:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:0C:01:B5:86:6F:71:FC:C7:37:8A:31:A5:CA:F5:E7:CA:E6:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7856C49A544511F0A2B539EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:90:e7:41:a7:a5:3a:3f:ab:42:fa:17:a6:09:b5:38:4b:f9:
2c:f2:53:6a:28:a7:57:03:d2:f0:12:d0:25:a4:2c:cf:d6:b4:
90:e6:ee:e3:ee:8a:e6:b9:03:39:14:2c:18:e3:68:2f:7d:8b:
74:33:aa:04:dd:0e:54:11:d8:e4:d7:56:9a:ee:91:b6:7f:a6:
8c:ce:56:b7:41:ad:8a:0f:ac:b8:3e:9e:aa:ae:63:38:fd:a3:
82:12:46:b8:f6:27:b3:b4:2e:5e:26:63:f8:71:fc:3e:4a:f4:
80:f8:c0:8c:cf:0c:cb:b6:2f:4f:42:e6:2d:9d:4b:b1:22:ce:
1b:81:73:fc:98:05:70:28:21:b6:73:81:68:92:70:71:a6:15:
ad:f3:74:91:3d:1c:0a:ae:f4:57:e1:4f:4d:30:59:98:c0:bf:
a2:8e:24:70:40:67:0b:8f:e2:1c:88:26:d0:fd:b2:3a:21:af:
61:d7:ab:44:05:38:27:93:5c:e3:d0:52:4f:77:91:fa:fb:6c:
26:a7:b7:3c:d6:68:ba:d0:fc:be:6f:3e:b1:f8:9e:33:d1:11:
6b:34:ac:49:5a:3b:07:48:88:e9:a5:c1:b8:f8:f9:62:74:a6:
4b:c9:25:c0:e8:5e:9f:d2:0a:11:6a:ef:07:96:b3:ce:e9:17:
82:47:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:27:44 2025 by rpki-client