Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A878BF28525811F0A46492F0DAE4EC9C.roa
File: A878BF28525811F0A46492F0DAE4EC9C.roa (raw, json)
Hash identifier: 5+LhKjtDd1piQf9Fk/rD0MK74uUaJyyoBEFZwi295NQ=
Subject key identifier: 97:6A:62:5D:C4:6E:73:7A:79:10:2F:ED:58:22:3C:35:9D:52:DE:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01890E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A878BF28525811F0A46492F0DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 06:41:59 +0000
ROA not before: Thu 26 Jun 2025 06:41:54 +0000
ROA not after: Tue 07 Jul 2026 06:41:54 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100622 (0x1890e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 06:41:54 2025 GMT
Not After : Jul 7 06:41:54 2026 GMT
Subject: CN=685cebb7-be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:0d:aa:aa:d8:f3:f8:2e:dc:c6:b1:ba:e7:
57:f7:97:12:f8:ee:49:d0:5a:1d:77:9c:d0:24:a2:
b6:60:bb:83:3e:9b:e9:26:ed:16:99:65:de:27:f7:
30:3f:36:26:d6:7c:e4:ec:66:3b:d2:4b:ce:e0:74:
ac:dc:a4:50:1c:59:3a:b9:44:5c:c7:c9:93:aa:6d:
75:a6:31:86:12:c9:ed:98:58:cf:6e:6e:9f:8a:cd:
79:9c:84:d1:24:08:31:7b:15:df:61:1b:1c:7d:04:
b2:3a:ea:58:f5:48:af:33:f4:3e:b6:0d:ca:7b:df:
f5:8f:97:bf:41:9e:e3:10:8e:2d:6d:ee:51:b5:89:
72:01:2e:42:6b:e9:97:10:66:d2:6f:8a:92:74:e6:
a6:66:46:df:44:49:0f:5d:b7:2e:60:48:a5:69:e0:
0f:dc:0c:3d:9f:5c:1f:af:d4:12:37:e1:50:f9:6e:
74:e8:67:22:04:bc:24:98:de:d9:69:e2:eb:c9:78:
c4:91:ae:df:4f:3a:5a:63:01:85:0f:bf:35:78:b2:
08:b4:59:f7:4c:02:57:56:f1:7b:d4:9f:0f:cb:76:
f7:d2:f9:99:08:ce:5d:30:17:9d:bc:6d:1f:65:36:
40:94:76:8f:e6:e5:5e:39:a8:af:1c:e6:92:d7:ca:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:62:5D:C4:6E:73:7A:79:10:2F:ED:58:22:3C:35:9D:52:DE:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A878BF28525811F0A46492F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d5:7d:a3:57:ed:12:c3:e3:dc:fc:60:60:4e:20:8e:ba:e7:
de:f0:df:53:d9:d7:b3:4e:1e:3c:b4:a7:b9:1c:1c:4a:ad:f1:
79:60:3e:f7:78:82:55:5f:89:c1:b6:f8:c9:95:5d:8e:47:5a:
fb:f0:a4:f1:b5:25:34:26:a0:cc:2a:2d:1f:e8:27:16:ab:6a:
8d:50:70:2f:4e:72:3d:df:8b:26:b5:ff:60:38:69:8d:6a:7b:
76:e4:bd:c5:87:84:52:3a:4b:4d:20:d2:40:09:d7:60:09:54:
5f:8a:a9:d9:54:40:a0:49:e1:00:34:46:1f:a9:c4:52:29:23:
9f:ef:00:51:53:b3:a6:77:2b:be:70:cb:a8:32:c8:f7:19:ee:
38:02:20:8f:c2:8d:fc:df:00:b2:cd:2f:7b:17:29:93:2a:d8:
0d:19:71:c6:eb:cc:f2:c2:1a:61:89:f1:2e:da:fb:95:da:bd:
77:87:28:42:df:0f:e5:5d:ea:31:88:82:5b:4f:1c:c6:98:0a:
ee:f8:95:33:8c:14:1f:b6:8f:bc:e9:9e:4b:fd:02:85:53:4b:
6e:65:a1:f8:fe:41:c3:ef:c1:b6:13:3b:6b:87:4e:b0:49:5d:
3c:52:6f:c8:cd:6f:c4:f4:c6:fd:1e:5b:fb:92:b9:72:e2:fd:
ca:b6:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:24:54 2025 by rpki-client