Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDA78F254C911F0AA7242CEDAE4EC9C.roa
File: CCDA78F254C911F0AA7242CEDAE4EC9C.roa (raw, json)
Hash identifier: sNtgd4DSV8VyeL5PwHzzdXgIVH1RNMS2nGCmQRKiMmU=
Subject key identifier: 59:64:D9:5A:27:49:C4:54:1B:74:04:35:8F:EA:A1:FB:2D:90:91:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01896C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDA78F254C911F0AA7242CEDAE4EC9C.roa
Signing time: Sun 29 Jun 2025 09:16:55 +0000
ROA not before: Sun 29 Jun 2025 09:16:51 +0000
ROA not after: Tue 07 Jul 2026 09:16:51 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100716 (0x1896c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 09:16:51 2025 GMT
Not After : Jul 7 09:16:51 2026 GMT
Subject: CN=68610487-0df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:d7:6f:1b:28:88:7d:16:e8:e4:e5:2c:34:
27:1d:14:55:87:29:1d:69:a5:b7:82:c2:3c:31:db:
72:0b:7e:50:a5:de:89:9b:e1:62:60:bc:b0:5f:ea:
9c:05:5c:45:5e:a9:a4:f2:59:c9:b4:36:21:b5:57:
fc:d7:f1:8a:3b:7b:13:33:1b:6f:1b:ed:c7:f8:1d:
a8:1b:40:d0:df:3b:01:34:d4:ca:20:ac:d0:59:ad:
de:39:ba:26:5a:a9:1e:d5:33:4d:f4:2f:83:be:59:
9f:53:a6:9d:5d:1b:00:8e:e3:51:42:12:32:bb:11:
68:d3:c8:31:6f:40:8f:ee:6f:4c:f5:8a:f0:16:87:
63:93:b9:3b:94:c6:bb:8e:51:3b:f2:52:9a:eb:0f:
68:cf:b8:8c:bd:61:f0:f5:5e:fc:c8:e6:9c:e2:b4:
81:6a:30:0b:15:78:4d:b1:2f:00:09:c3:db:e6:01:
be:dd:54:e1:c2:bf:ed:19:fc:75:b2:e5:c7:88:ce:
cd:b8:72:0e:64:b7:f5:e4:ca:55:59:fc:56:32:02:
2d:27:0c:9b:a8:c6:07:08:11:19:77:60:b5:2d:d6:
35:e0:b5:52:8c:db:40:ab:4e:e7:3c:62:94:93:a1:
5a:3e:a2:d0:52:15:d8:78:af:3c:67:14:a7:5f:bc:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:D9:5A:27:49:C4:54:1B:74:04:35:8F:EA:A1:FB:2D:90:91:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCDA78F254C911F0AA7242CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:91:72:9b:74:09:d3:b5:df:b2:e3:43:43:f0:f1:44:51:be:
db:56:bc:1b:31:d5:66:4e:08:b2:73:cc:b3:50:55:14:65:95:
c0:c1:37:7d:81:3b:77:b5:19:03:b1:aa:c6:b5:3e:96:08:7d:
8e:64:72:ad:03:e8:ca:b4:32:80:b6:81:ee:e0:76:dd:c8:51:
47:4f:fc:d4:a4:0e:13:3a:50:da:36:ab:95:12:d4:bf:bc:c2:
e4:c9:98:ef:bb:a4:c4:fb:6c:f0:3b:52:6b:97:15:ab:fd:9b:
d8:dc:45:7a:ff:41:d9:d8:98:8b:e0:cc:2a:41:fc:f2:40:2a:
4b:8a:74:e1:e8:eb:41:e6:5d:42:66:b8:9b:4b:d0:bc:b8:5e:
d0:fa:52:94:8e:e2:2d:b4:25:ba:c9:f1:97:8d:3e:33:6f:79:
46:5f:4d:e3:d5:f2:9d:d1:82:d2:31:18:db:68:ed:f3:c9:9b:
d4:b2:b1:d2:0d:1e:ce:20:d6:8d:b0:05:f3:49:65:92:e7:e9:
2c:6a:0b:07:21:ba:b1:59:9f:96:63:c2:62:90:f4:88:69:95:
7e:f7:66:86:b7:bf:42:1a:85:9c:d0:43:5d:45:e7:02:32:fd:
6e:70:3a:63:7d:a9:79:b5:be:a1:2b:b2:db:7b:67:09:43:6e:
2c:87:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:12 2025 by rpki-client