Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5BBA5C8514111F093A454CADAE4EC9C.roa
File: B5BBA5C8514111F093A454CADAE4EC9C.roa (raw, json)
Hash identifier: F3KtPVwKaMLvwnz1is0vUzQ04BrvbroiuV2Ukes7I3c=
Subject key identifier: 42:AC:52:92:C5:9B:82:72:AC:EF:15:D8:B3:82:22:64:1C:AF:9B:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5BBA5C8514111F093A454CADAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:25:12 +0000
ROA not before: Tue 24 Jun 2025 21:25:07 +0000
ROA not after: Wed 03 Sep 2025 21:25:07 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100548 (0x188c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:25:07 2025 GMT
Not After : Sep 3 21:25:07 2025 GMT
Subject: CN=685b17b7-e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:7a:8c:29:97:97:2f:c0:f8:25:6a:51:d9:
b3:74:55:ca:7f:93:0f:f3:76:04:05:45:4b:f8:5f:
6d:bc:b6:10:37:87:c4:cd:03:88:91:22:4a:ec:7e:
d9:c7:12:b1:da:89:9f:d3:47:dc:46:b4:64:7b:f9:
d9:42:6b:af:2e:92:f8:f4:6b:62:ca:7b:73:53:48:
4d:bf:8a:74:41:af:86:45:88:3e:1e:a9:28:39:08:
10:e5:ab:24:28:66:d3:32:99:a8:5a:49:fe:a6:64:
e1:f8:47:ec:c9:39:fd:e0:1d:03:b9:36:0b:c1:82:
df:06:5e:36:9e:9d:9c:8d:10:17:6c:e1:25:2f:15:
7c:5c:e9:58:e7:f7:50:93:1f:7d:d8:cb:34:9a:8a:
b3:7d:ed:ad:23:e0:d1:8c:14:4c:48:f7:47:44:70:
66:3b:56:4f:5b:3a:94:54:b5:e3:d4:23:fa:34:ec:
05:a1:4a:1d:37:3d:42:ec:18:05:fb:af:bf:09:6f:
af:76:b1:ac:5d:0f:85:66:32:15:ad:d3:4b:a7:7c:
a2:f3:23:e0:19:81:9a:1d:9d:d2:4f:ea:34:7f:f2:
c0:61:3c:f5:46:ec:c0:b6:6b:8e:bd:c2:54:61:a0:
4e:e4:0d:dc:93:fd:64:97:fe:09:c6:79:da:98:a9:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:52:92:C5:9B:82:72:AC:EF:15:D8:B3:82:22:64:1C:AF:9B:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5BBA5C8514111F093A454CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b1:06:a0:1d:ed:fa:3c:79:24:a3:d6:83:79:92:38:38:fc:
2b:72:97:db:62:5c:cd:29:0f:1e:ac:2a:02:72:24:a6:69:25:
69:b4:fb:05:06:f6:ef:d7:74:28:70:7d:fd:80:94:d7:af:cd:
cd:1e:22:0b:89:15:55:fb:4c:f1:6d:3d:70:0d:fa:37:ca:10:
04:fe:58:78:60:00:be:64:aa:e2:94:be:cf:50:25:43:a8:17:
31:a8:78:09:7a:8e:de:5e:2f:4a:e3:6e:40:a3:9e:ca:c8:47:
ac:50:13:dd:60:d0:8f:eb:f8:78:01:e6:cf:31:ad:1f:32:cf:
cb:a8:58:01:af:ec:2b:8b:31:f7:72:86:37:f3:a3:4e:19:f9:
29:79:95:d1:aa:81:d6:0b:8d:a4:99:6f:50:5b:40:cb:e0:ee:
67:77:62:94:02:a1:52:cc:28:97:73:dc:27:29:31:02:30:e3:
5f:05:d3:80:13:3f:6c:b7:03:1d:7d:88:95:56:cc:fa:3d:2f:
b4:3f:f7:71:93:07:ba:41:ee:82:8a:9c:33:fb:b6:30:cf:9a:
7b:0d:91:fe:6a:f2:ac:c2:af:80:36:71:db:a7:f6:4d:16:08:
7e:29:29:e0:cf:ee:7e:d3:e1:5c:ec:eb:95:51:5d:f7:4b:8b:
c1:ca:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:32:42 2025 by rpki-client