Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A126394632311F0AE97BA95DAE4EC9C.roa
File: 5A126394632311F0AE97BA95DAE4EC9C.roa (raw, json)
Hash identifier: /JkByRtAVAj2XSHsBwE+Ez//CbTlXLqqvBZS8crIjEk=
Subject key identifier: 4B:38:81:64:FF:28:A8:39:20:62:6A:49:CF:C9:9F:D0:6E:D2:66:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A126394632311F0AE97BA95DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 15:33:14 +0000
ROA not before: Thu 17 Jul 2025 15:33:09 +0000
ROA not after: Sun 31 Aug 2025 15:33:09 +0000
asID: 214238
IP address blocks: 154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101962 (0x18e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 15:33:09 2025 GMT
Not After : Aug 31 15:33:09 2025 GMT
Subject: CN=687917ba-9016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:f9:92:f0:19:58:b2:7b:5a:db:fe:90:6f:
5d:20:11:87:7c:2b:88:09:33:30:09:bc:c7:71:fd:
a6:bc:1f:97:9b:0d:cc:32:87:66:d6:66:f5:88:5b:
ca:c1:d3:a1:48:ba:41:1a:93:0a:82:87:f7:a6:95:
08:8b:d0:95:9c:22:74:3a:7b:4c:d3:3c:5c:9f:bd:
e0:89:e3:99:d5:99:21:f4:16:95:36:ad:46:91:f8:
74:d0:87:ff:a7:88:80:90:13:47:7a:12:fb:25:07:
68:68:d2:26:83:3a:7f:1e:43:13:e2:d2:4d:c6:ea:
b4:80:5c:b1:71:4d:3a:98:75:e8:dd:0b:ad:a8:4a:
ad:cb:a7:d0:a5:39:77:f3:7b:ff:4e:76:d3:72:f6:
30:56:c8:c7:2c:6e:d3:77:06:68:21:d3:7d:d3:95:
2f:a0:59:cf:d0:a9:bb:df:75:38:b9:d7:81:35:c9:
ed:81:28:86:09:f1:a2:ce:0a:c0:88:6f:eb:66:90:
c9:c8:35:1f:e0:75:83:24:b2:6a:76:3f:63:42:71:
0e:5c:fd:0d:3d:57:64:ff:15:e1:f0:68:3a:bb:e3:
06:96:33:53:5f:3b:f0:be:fe:ee:4f:fb:cc:e6:30:
95:db:f2:6a:f7:31:eb:4d:5b:d7:62:56:e8:68:10:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:81:64:FF:28:A8:39:20:62:6A:49:CF:C9:9F:D0:6E:D2:66:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A126394632311F0AE97BA95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a3:12:7b:81:a0:ec:80:52:75:d3:4d:51:51:7b:de:51:97:
8d:6a:f4:d0:c8:91:9a:0b:55:1b:fe:a0:30:a3:88:52:36:6f:
76:d4:cd:0a:88:03:3b:c2:26:ad:f3:9e:b0:33:93:9e:17:1b:
fc:ef:12:d0:5b:db:24:ac:30:f8:cb:87:68:25:86:29:77:df:
f8:70:00:3b:2d:ed:c3:e9:51:6b:a7:b6:18:15:a3:d5:db:57:
b6:ab:c1:64:dc:4c:af:fe:77:7b:83:6e:43:d9:df:fb:be:50:
4d:93:a4:f5:7a:e9:5f:e3:43:cd:ec:9e:39:4a:7a:0f:90:d4:
2a:d2:2d:70:c2:a3:3d:3e:5d:7b:cc:47:4b:d2:b4:79:8a:99:
09:a6:8f:9f:30:f0:ad:25:64:70:56:a7:fa:ed:bf:74:0b:94:
44:f1:c0:ec:ac:be:6d:71:07:3d:e3:be:78:12:c5:39:9b:70:
a2:7f:a7:55:95:71:b6:a3:01:0f:e1:6e:72:1e:d7:f6:c4:75:
bf:1c:9a:ab:ee:2f:ae:08:8c:fa:34:61:b8:d4:d5:7f:61:a6:
8a:dd:d4:7c:9e:7b:af:3c:71:c1:1d:db:cb:4d:e0:45:0a:df:
32:35:55:1f:6a:86:eb:b3:be:96:88:91:d3:73:28:15:39:2a:
22:ba:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:07 2025 by rpki-client