Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7939A544567F11F0A7F84FE7DAE4EC9C.roa
File: 7939A544567F11F0A7F84FE7DAE4EC9C.roa (raw, json)
Hash identifier: xP1ta+mrOlBNIzq8pvWec5KDUWDm4jdlOFe5mGjY/y8=
Subject key identifier: 29:90:CB:0E:72:61:C8:EC:DB:A2:CC:89:A7:19:70:98:61:32:7B:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7939A544567F11F0A7F84FE7DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 13:29:55 +0000
ROA not before: Tue 01 Jul 2025 13:29:50 +0000
ROA not after: Sun 24 Aug 2025 13:29:50 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100772 (0x189a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 13:29:50 2025 GMT
Not After : Aug 24 13:29:50 2025 GMT
Subject: CN=6863e2d3-1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:dd:33:5e:36:51:1f:71:18:1d:b8:6e:61:
6c:c4:20:a8:58:f2:0a:39:8e:b0:3c:cb:f3:0a:ab:
5a:59:8c:f3:32:8b:46:bd:d2:31:f6:3d:af:d1:e7:
8c:65:a9:5e:b3:bd:1c:c4:3d:1c:bc:66:f9:5f:73:
30:95:22:e4:6c:65:e4:c2:a0:e3:3b:a0:66:82:4a:
cd:2f:be:9b:58:ac:3c:9a:0d:b6:2e:78:a3:d4:19:
e7:7e:cf:ef:01:b0:d4:1f:f4:db:a3:5c:07:2a:9f:
6f:60:84:c2:81:83:e1:dc:b5:9e:f9:99:9b:7c:1a:
48:29:3b:93:28:a1:e8:06:ed:2e:5f:c4:b1:9c:a4:
02:1f:f6:2b:da:29:cf:2b:86:c3:f7:21:17:7e:ac:
82:84:ae:3e:18:ac:b1:10:17:03:d3:8e:3a:06:26:
2f:48:89:f3:78:3a:3c:2e:1b:75:ed:f1:b5:ae:af:
12:e5:f7:40:30:c5:ee:a4:aa:8c:46:01:57:dc:17:
2a:6d:09:f3:02:d8:a2:b0:04:5d:ae:57:7e:d6:b5:
e9:87:a1:d3:7f:df:44:fc:4d:51:10:19:dc:88:f5:
b7:50:3e:0e:d6:dd:34:fc:76:87:40:6d:b2:42:4e:
3d:a5:9f:e4:bd:2e:b2:79:a5:5c:b4:0a:4f:9c:eb:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:CB:0E:72:61:C8:EC:DB:A2:CC:89:A7:19:70:98:61:32:7B:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7939A544567F11F0A7F84FE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:be:3d:6d:af:0a:89:20:66:7e:d3:f0:d3:7a:c7:71:15:f4:
10:98:e2:b1:f5:51:8a:10:70:be:c7:86:4b:1e:3d:6d:01:f5:
02:a0:3f:d0:53:dc:34:da:09:e1:ba:b6:a6:8c:e2:33:25:65:
7a:16:1a:4b:9c:e3:aa:9d:98:82:3d:a1:d9:e2:3a:b9:d4:40:
bc:1c:12:56:19:9a:b6:7d:b3:df:b3:6a:60:ec:0f:2a:51:f7:
52:4f:45:60:44:2f:a2:8d:9e:95:47:4b:9d:92:e8:b3:d6:97:
bb:d6:59:da:b6:d8:1e:44:fb:0c:40:08:ee:90:ad:de:cf:86:
f3:63:f7:ca:f0:9c:75:ac:4b:1b:1f:3d:75:b8:02:31:15:d1:
92:8f:d3:c4:fe:f8:68:7a:df:68:e1:58:89:74:b9:f3:52:cf:
e5:b9:1e:0f:7a:8c:55:d2:24:96:0a:6c:41:cb:e0:6e:a8:85:
64:2c:b6:0e:79:3e:5b:88:cf:a3:a7:4f:25:81:5c:a7:47:f3:
96:78:b4:4c:c2:fb:b0:ea:54:25:52:14:c2:64:a5:40:b5:5e:
35:0c:99:80:82:99:71:e5:30:2f:49:9b:3c:3d:47:4a:2b:f9:
c3:ab:05:74:84:67:f1:b4:81:d3:58:09:0b:5f:6d:e7:88:a6:
e7:e7:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:52 2025 by rpki-client