Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD64AA2518F11F08689ECD7DAE4EC9C.roa
File: CDD64AA2518F11F08689ECD7DAE4EC9C.roa (raw, json)
Hash identifier: nzz4ckYXYYPbU3IkjKq7CnzNfDo2y0Kgv//MD8oiH9A=
Subject key identifier: 8F:AC:AE:72:EB:1E:F5:76:BD:5A:FA:6A:31:D1:CA:8B:4A:7E:79:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD64AA2518F11F08689ECD7DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 06:44:13 +0000
ROA not before: Wed 25 Jun 2025 06:44:08 +0000
ROA not after: Tue 07 Jul 2026 06:44:08 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100583 (0x188e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:44:08 2025 GMT
Not After : Jul 7 06:44:08 2026 GMT
Subject: CN=685b9abd-7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:86:7d:aa:0b:1a:6a:bc:e4:26:b3:09:0e:
4b:60:0f:58:b2:2e:e1:9b:4b:62:c8:10:5b:d1:e4:
5f:77:41:35:71:3f:b7:f1:72:42:ac:f1:66:dd:1e:
32:8f:a6:35:b7:c9:96:73:00:56:2e:d2:80:51:9e:
e7:2c:17:1c:80:80:ef:05:09:20:7e:30:71:f5:fd:
87:6b:5e:0d:e2:65:ba:45:96:d1:6f:21:03:f1:69:
95:49:61:27:d1:ff:ae:85:da:4b:75:68:55:d1:1c:
58:5d:6b:e6:39:34:37:84:81:75:ac:d0:70:b5:53:
ac:92:3d:10:95:41:66:d5:5d:58:bf:a2:86:e0:64:
b5:38:3c:35:ba:af:8a:87:dd:a4:2c:51:44:01:8d:
35:4e:52:3c:a1:77:f8:8c:24:1f:c2:c6:d2:bd:58:
ec:4e:c1:ca:0c:e2:c4:2b:d5:ba:94:7d:57:82:3d:
ce:d0:b0:77:06:db:d4:20:75:8c:07:17:9b:30:db:
73:96:b8:4b:9b:6f:dd:7d:8d:08:36:dc:b1:30:10:
b6:30:d7:68:38:03:ac:bf:e9:5f:d9:99:3a:13:54:
63:6c:fa:b8:a0:46:09:e3:7b:40:88:7f:12:c8:13:
89:8a:dd:e3:75:09:9d:11:6f:c8:62:b2:d5:e6:dd:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:AE:72:EB:1E:F5:76:BD:5A:FA:6A:31:D1:CA:8B:4A:7E:79:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDD64AA2518F11F08689ECD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:69:4e:29:4b:15:63:a3:8c:f7:70:dc:05:36:a7:f6:da:0b:
32:be:db:1a:35:84:59:e6:cf:7e:5f:16:3d:c2:e9:48:b4:b9:
b6:18:fe:ed:22:bb:f2:7e:aa:dc:df:64:e9:9d:cf:97:46:54:
3b:0c:2b:c4:c2:f7:e4:cc:8b:08:ca:99:9c:32:58:d0:c8:94:
b0:34:33:b4:ef:95:be:2e:e0:15:18:9e:be:93:7a:3a:dc:a6:
d7:5d:1c:07:df:f7:53:e6:8c:f1:5f:bc:b4:61:77:5c:1b:81:
87:0c:11:d9:c3:c4:af:90:96:80:17:c3:6f:86:c5:b6:8d:14:
69:0b:cb:1f:1c:83:09:a0:f1:0c:1f:0d:57:84:79:a1:43:93:
8d:55:86:df:c0:d5:a1:85:e0:3e:89:a6:82:f6:c7:b9:0a:63:
34:85:a4:d2:e7:6d:2f:6c:97:2a:9f:a3:a0:96:55:1b:37:35:
13:8c:6c:e4:25:fa:e6:75:fc:ef:bf:35:86:7e:b8:31:fb:0a:
49:df:0f:aa:b7:dd:81:a2:9a:01:4a:29:b9:3e:5d:ff:ea:e0:
59:75:84:b9:e2:cd:45:1b:40:fa:0e:b1:5d:86:20:17:41:c5:
83:ef:b4:3f:e5:20:98:88:85:d4:0a:7e:92:db:5b:e6:79:91:
33:07:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:36:34 2025 by rpki-client