Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B288A886630911F0B06223F3DAE4EC9C.roa
File: B288A886630911F0B06223F3DAE4EC9C.roa (raw, json)
Hash identifier: AN/vz78fNjYZvv76vUFCrQTKDs26JL9vG5u4sa812AA=
Subject key identifier: 6A:4C:E5:C0:76:63:99:55:98:48:E8:7D:5C:BD:D2:60:D8:5B:15:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B288A886630911F0B06223F3DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:29:35 +0000
ROA not before: Thu 17 Jul 2025 12:29:30 +0000
ROA not after: Thu 28 Aug 2025 12:29:30 +0000
asID: 57043
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 01:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101930 (0x18e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:29:30 2025 GMT
Not After : Aug 28 12:29:30 2025 GMT
Subject: CN=6878ecaf-3889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:eb:96:9a:a6:6e:e0:c4:35:0c:aa:c1:33:
1d:d5:63:c0:36:9c:46:43:4f:19:d2:bd:fd:25:e1:
b8:5f:f4:e6:a1:41:ba:66:3d:9f:e5:a4:f6:7f:f0:
d6:cc:87:f2:5b:37:74:f0:14:9d:66:3d:77:4a:9a:
1d:2d:ea:aa:5e:90:c7:cc:97:85:47:3a:5d:fa:9e:
fc:ed:67:36:79:07:a0:e3:bb:c5:14:04:3a:f1:1d:
a0:4d:b9:8d:ca:74:67:1a:8d:9b:a0:14:47:8c:3b:
03:39:fd:04:a5:49:90:f4:c9:aa:a2:45:91:ea:cd:
c6:38:cf:40:55:9a:44:89:76:e0:58:ea:25:56:b1:
b3:e2:04:2a:5a:75:61:aa:4a:17:6b:2d:b8:f8:88:
25:a2:ee:44:38:d7:3a:b9:51:08:b5:6a:d3:f7:d6:
d6:1c:a1:43:82:5e:0e:6c:9a:b8:75:be:71:66:0e:
6b:e5:98:76:16:7c:4c:de:a0:29:9d:d4:7f:18:18:
ae:a5:55:10:ce:53:b2:d1:79:7f:21:b7:73:09:c7:
2f:08:8e:4b:81:23:a7:e9:6a:54:3b:d5:8d:ec:0f:
28:8c:68:f6:5b:54:14:57:28:8a:f0:26:fd:11:b7:
8e:cb:a9:05:3f:ed:31:63:be:5a:39:3d:cc:f2:dd:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:E5:C0:76:63:99:55:98:48:E8:7D:5C:BD:D2:60:D8:5B:15:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B288A886630911F0B06223F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b0:f9:34:a8:97:5c:96:81:c1:20:c7:79:cd:73:5b:d0:ac:
a5:e3:b7:64:57:80:be:e3:fe:21:a5:25:59:a6:8d:12:0c:ec:
4b:9a:66:9f:da:53:65:76:68:3c:8d:c4:e7:d6:60:9f:5a:59:
70:3f:3d:c2:fc:17:bd:00:2c:e1:74:14:64:11:fa:c0:b0:fd:
a9:9f:46:28:8b:0b:95:b0:e0:84:b5:53:9f:36:a2:f6:28:63:
6f:c6:cb:68:39:81:c9:d4:74:0c:1e:ae:32:82:3e:3e:8d:ea:
ed:bf:fb:60:4c:80:eb:5b:bb:0b:af:7c:73:e4:65:7f:e1:aa:
37:e2:7e:0a:86:86:95:8c:39:37:81:2f:f6:f7:30:36:e7:e7:
33:a3:7b:3e:e9:41:a6:14:4f:ef:88:e2:c2:4c:31:c8:d5:7a:
98:51:ab:d2:2b:4e:03:a4:79:73:64:30:9f:a5:49:a3:71:a2:
8f:6a:5c:e0:2d:34:65:e9:70:b5:21:a1:6e:d0:da:d2:98:2c:
b9:93:41:8e:18:9f:2e:2a:f8:15:8e:38:03:c6:2d:bf:e4:ed:
e9:62:6a:bb:f4:0b:73:7c:b7:d0:0c:38:e2:3a:aa:d6:42:9e:
e9:62:87:2f:3e:2e:aa:29:a4:63:07:19:a8:80:ff:24:6e:9f:
81:db:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:43:53 2025 by rpki-client