Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34F759E4C4511F0A818C5E8DAE4EC9C.roa
File: C34F759E4C4511F0A818C5E8DAE4EC9C.roa (raw, json)
Hash identifier: U1xRlh0TrSAIhRquAnHt9ualruw4K/QNkrcEBJKo+kg=
Subject key identifier: E2:4D:DB:6D:7E:B6:66:82:3C:20:48:35:C2:71:45:72:16:3A:A5:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018739
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34F759E4C4511F0A818C5E8DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 13:11:36 +0000
ROA not before: Wed 18 Jun 2025 13:11:31 +0000
ROA not after: Tue 07 Jul 2026 13:11:31 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100153 (0x18739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 13:11:31 2025 GMT
Not After : Jul 7 13:11:31 2026 GMT
Subject: CN=6852bb08-50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:04:e3:e0:16:f9:4c:82:fc:ef:aa:dd:71:
ac:7d:02:a1:65:ec:98:86:e5:f0:6a:01:87:b5:6e:
b1:bf:9c:5b:c4:91:65:95:09:16:53:e5:af:c0:b1:
28:e8:b8:0b:84:54:2d:bf:5a:e0:5c:52:06:5f:97:
ea:bf:03:bd:a0:92:2d:00:96:6d:8f:67:df:d4:d5:
2c:c0:3a:7b:82:dc:56:4f:81:c7:98:7f:bd:82:95:
4c:e1:ff:0c:7c:39:e5:49:e1:0e:f6:89:ad:bb:92:
6f:95:16:fb:e5:05:55:46:5b:87:53:43:11:f7:c1:
b3:8e:55:62:e3:48:be:f0:66:49:29:f3:32:09:2b:
e0:74:47:cf:b0:e3:61:34:2e:fa:e1:f4:ae:bc:1f:
29:0e:26:0f:1f:a7:ea:6b:5b:09:2f:02:91:c2:57:
fe:48:d1:c3:49:17:35:f9:45:74:91:3f:a8:13:a4:
5b:77:a2:1e:ad:2c:a3:8e:38:04:ac:fb:e1:16:2a:
43:30:ec:c9:5f:11:92:89:9d:e2:3e:f2:c0:aa:24:
f4:30:c0:5d:10:78:0d:5e:f3:e5:6d:05:dd:e7:37:
79:ff:8a:b5:47:1e:80:e7:97:d2:b4:66:9f:75:64:
92:e6:93:0a:87:ab:46:00:be:bd:0e:e4:1c:7f:51:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:DB:6D:7E:B6:66:82:3C:20:48:35:C2:71:45:72:16:3A:A5:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34F759E4C4511F0A818C5E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:f2:f5:ef:8c:5c:fd:15:8c:cb:28:5c:22:e3:f9:e6:4b:78:
35:1f:b4:06:fb:4d:7f:b9:98:5c:ab:b2:b1:0e:74:4f:5e:1a:
00:69:10:b6:2b:1a:66:40:08:b5:a6:9c:fb:4d:f2:89:d6:05:
c9:23:61:a8:4f:9b:37:c9:72:32:5d:ea:31:dc:84:6d:b9:cb:
4d:ad:31:8e:bb:63:5e:40:67:7d:c8:17:0d:56:f8:86:55:d5:
a6:27:a6:80:f3:46:a8:ee:f9:89:6e:29:64:ca:6c:53:f3:23:
ed:bb:49:c1:22:e2:07:56:aa:20:f5:cf:c7:40:e4:e3:0f:68:
35:a2:21:6a:77:e5:22:d8:49:cd:e5:20:94:5b:1f:b1:41:66:
ec:18:c5:aa:ab:5c:df:0f:9b:25:20:f6:0b:22:36:4c:52:6e:
16:69:9c:f2:6a:37:47:84:dc:70:43:8b:ed:ea:20:b3:ba:65:
50:70:fb:98:c5:c7:11:c4:d8:cc:cf:d2:43:d7:41:c5:3a:a3:
3a:70:0e:c1:6a:b6:7e:9b:8a:ee:01:49:8c:3b:7e:d9:ea:1d:
d7:17:b6:c7:0b:75:86:69:ab:35:d3:3c:7a:0e:f1:c1:50:32:
7c:fb:b5:c3:6d:ca:73:98:bb:dc:1c:1a:6f:59:1c:59:d0:63:
ab:ce:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:11:38 2025 by rpki-client