Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F8EBAC501911F0B5BBFAD4DAE4EC9C.roa
File: C7F8EBAC501911F0B5BBFAD4DAE4EC9C.roa (raw, json)
Hash identifier: fo7ocYMNHBhc06DheTJ1Y6zACQ6zY+AkBUcI8iLRGhM=
Subject key identifier: 91:C8:61:B5:C3:43:CB:D8:F0:76:32:B0:EE:2F:AE:2E:17:11:CF:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F8EBAC501911F0B5BBFAD4DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 10:06:51 +0000
ROA not before: Mon 23 Jun 2025 10:06:46 +0000
ROA not after: Tue 07 Jul 2026 10:06:46 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100339 (0x187f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:06:46 2025 GMT
Not After : Jul 7 10:06:46 2026 GMT
Subject: CN=6859273b-bd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:b5:9d:80:c3:34:b6:39:73:99:ed:8a:61:
db:93:b5:71:cd:b3:46:58:db:ee:dd:e1:17:44:cf:
a9:e9:db:a4:19:21:df:74:cc:88:5d:97:f7:ee:25:
a9:a1:4d:21:34:f9:01:ee:bd:ca:8c:c1:65:be:22:
21:94:d0:1c:64:7a:ef:c6:1d:da:ba:2f:88:cf:d7:
83:bc:22:7b:f0:8f:8d:3c:6f:fc:ff:0b:ff:7c:6b:
cf:93:97:f3:c8:27:2e:56:35:0d:c6:78:e6:5b:c6:
8b:2e:94:cb:47:ad:2d:e7:27:64:a8:a1:a9:3a:d5:
22:da:30:d5:0b:97:ee:d2:9c:98:42:cf:5b:c2:19:
b5:69:75:bd:95:a1:ec:7a:c0:1d:17:26:c2:68:88:
a4:b5:69:ab:c4:66:fb:b7:52:70:80:66:eb:79:3b:
78:6b:85:db:e0:97:3b:a8:d6:14:18:91:88:69:4d:
48:7d:ca:94:e7:3a:a7:6e:00:55:12:b3:fe:3d:94:
dc:84:62:e2:fe:56:56:88:26:4b:6f:7b:08:0b:19:
d7:35:a4:3d:01:51:5f:b7:70:38:34:ab:2f:24:f7:
01:8d:48:c1:3e:e8:37:dc:2b:9c:71:5b:34:58:41:
41:72:17:29:e5:97:46:e3:d8:e1:3f:c2:a5:84:1c:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:61:B5:C3:43:CB:D8:F0:76:32:B0:EE:2F:AE:2E:17:11:CF:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F8EBAC501911F0B5BBFAD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:74:7a:b6:e1:9f:1c:b4:ca:e5:ba:11:fc:5f:58:f1:bc:2d:
c2:c3:c0:52:ec:4e:f2:95:a0:4d:64:5a:1c:d2:95:fb:fb:ff:
2e:6a:57:40:02:eb:ed:b8:d8:c8:c9:15:38:c1:6a:33:ec:9f:
c3:4e:57:10:42:0f:c1:a9:39:40:44:23:de:77:30:16:bd:ed:
cc:cf:07:72:bd:4b:f3:80:37:4c:3b:5d:9f:f9:c0:9f:40:09:
fc:06:b8:a0:69:91:b9:45:d7:ce:eb:cb:81:a0:b1:bc:b0:cb:
77:21:ba:18:bd:8b:c7:f3:3d:3c:20:d3:48:6a:64:6f:01:22:
a7:b1:10:8d:c5:cb:36:d3:bb:e9:01:7d:54:9b:73:c9:0a:a7:
9e:4e:6a:da:00:4a:9e:55:d2:b5:bd:c7:10:05:4b:24:ec:98:
3e:47:2e:41:f2:b3:37:12:ef:3c:28:5a:77:25:cb:3c:c6:b1:
0d:70:6f:09:12:6b:13:83:86:8f:1d:a6:a6:2c:a9:62:29:8f:
63:df:e1:b5:06:e6:37:41:71:f4:aa:d0:b0:18:25:94:24:3e:
11:f3:32:24:55:a4:32:63:ac:4f:14:e8:94:85:8d:0e:e3:6f:
86:f0:62:d5:ad:6d:82:4a:68:7c:b1:25:26:a1:27:06:90:63:
55:c9:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:47:56 2025 by rpki-client