Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF3609F04DE811F0AD69B08FDAE4EC9C.roa
File: CF3609F04DE811F0AD69B08FDAE4EC9C.roa (raw, json)
Hash identifier: mWdFEs8lP2DUlHvqIi5ee9+RSwfceSJ9kipHN1cLHfo=
Subject key identifier: 39:64:AC:4F:84:41:0C:C8:52:FF:90:34:78:6A:22:9A:C8:48:47:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01879D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF3609F04DE811F0AD69B08FDAE4EC9C.roa
Signing time: Fri 20 Jun 2025 15:11:16 +0000
ROA not before: Fri 20 Jun 2025 15:11:11 +0000
ROA not after: Wed 03 Sep 2025 15:11:11 +0000
asID: 135377
IP address blocks: 154.83.196.0/24 maxlen: 24
154.83.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100253 (0x1879d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 15:11:11 2025 GMT
Not After : Sep 3 15:11:11 2025 GMT
Subject: CN=68557a13-3834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:c7:b2:2c:c3:b9:9b:b5:60:43:7f:22:5c:
e8:1a:b6:87:b4:a4:11:cc:75:86:c1:96:11:4f:a0:
f7:59:74:58:45:e5:f3:c5:5d:b6:71:ac:00:36:cb:
42:01:39:a2:c0:79:c4:58:12:9e:ed:44:ba:89:d7:
fc:33:d6:aa:e7:ac:22:43:c0:19:fb:1e:0b:f7:78:
31:97:6b:91:17:c6:2d:8b:7d:31:a8:83:83:b3:27:
66:78:85:f2:35:33:49:74:71:92:62:ba:08:5c:55:
c7:19:77:a1:c9:64:c7:c4:cb:43:06:b2:26:0e:cf:
16:9e:db:48:aa:89:86:50:ef:91:30:6b:f5:7d:95:
f9:54:da:dd:f3:c3:9b:d7:ad:03:98:1d:fb:ff:2f:
f0:ae:4e:7f:7b:4f:8c:39:80:91:fb:04:50:0a:76:
90:98:ba:2e:52:54:a2:e3:b2:d3:55:8d:86:76:f3:
3e:54:06:40:42:8e:45:b0:19:4c:f3:61:2e:a3:5e:
e1:90:f4:d8:ed:93:6b:76:43:da:89:82:bb:8a:5b:
0b:74:e7:9f:ef:00:fe:b8:54:91:e4:94:c1:5c:71:
c1:df:e8:d0:41:bf:f0:8f:9f:90:ed:99:72:d3:ca:
5f:60:b8:a1:e4:15:9e:f1:9c:c1:91:26:d3:bb:92:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:AC:4F:84:41:0C:C8:52:FF:90:34:78:6A:22:9A:C8:48:47:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF3609F04DE811F0AD69B08FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.196.0/23
Signature Algorithm: sha256WithRSAEncryption
01:28:f7:f6:b0:6d:f1:64:ca:4f:fa:fb:d7:49:0e:46:74:0f:
0d:06:cd:98:e9:36:05:12:e8:45:2b:bc:26:88:f0:33:2f:d1:
53:d0:d1:8c:83:68:5c:10:39:cb:32:9d:98:51:66:9b:34:62:
5c:da:ab:da:56:95:6b:64:c9:cb:98:80:c1:61:8f:7b:19:f4:
81:02:e4:95:11:25:f1:52:76:6f:66:a1:85:0a:b9:0c:53:cc:
4d:67:a7:cc:38:fb:a8:e9:70:34:6f:7d:ed:1c:3c:ac:36:27:
81:db:74:43:0b:85:bc:28:03:ff:87:31:7e:05:77:0d:e2:3c:
80:b4:5e:4b:0c:48:7d:b1:b2:f6:43:ac:4f:91:3f:fc:73:ba:
94:97:8f:3b:f7:0a:2a:c8:4e:0e:47:1f:59:20:a3:a4:8a:4b:
e9:07:1b:35:34:f6:57:0a:48:b0:0f:46:23:38:c8:f0:3c:f5:
9c:5f:37:35:95:c5:b1:a4:ca:f2:b0:54:dc:a5:bd:f3:7f:de:
14:16:30:87:ac:b2:c5:87:70:a6:64:b5:c4:a6:e5:44:94:67:
db:9c:40:37:32:87:ad:82:3d:e6:1e:00:09:0a:5f:12:40:d5:
d7:94:00:25:67:cc:eb:1a:f5:53:5a:20:e2:90:fd:cc:f6:4a:
05:f3:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:39:20 2025 by rpki-client