Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BB2CA83EDE11F083DACA9FDAE4EC9C.roa
File: 06BB2CA83EDE11F083DACA9FDAE4EC9C.roa (raw, json)
Hash identifier: oZFVqvXfnsgthjYvPz2KJYQQeWEfTqrj7jXgJZdv7MU=
Subject key identifier: B6:CE:84:6F:9D:52:87:B6:5E:56:B0:BD:18:80:71:10:57:61:50:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018439
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BB2CA83EDE11F083DACA9FDAE4EC9C.roa
Signing time: Sun 01 Jun 2025 11:46:17 +0000
ROA not before: Sun 01 Jun 2025 11:46:11 +0000
ROA not after: Tue 08 Jul 2025 11:46:11 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99385 (0x18439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 11:46:11 2025 GMT
Not After : Jul 8 11:46:11 2025 GMT
Subject: CN=683c3d89-527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:25:f9:e5:b8:74:aa:0d:cc:df:df:91:68:
69:37:b0:ad:e9:2d:36:a1:fd:93:5c:0f:3c:9d:85:
47:ee:d8:1c:db:d6:36:c1:ee:1f:ad:75:1d:03:72:
a5:11:36:32:b7:11:bc:b0:48:63:2c:cb:e1:60:d5:
1a:e5:e3:a3:3f:5b:4a:97:30:ff:79:1f:fd:8f:bf:
a5:b6:92:52:3a:c4:1d:40:f2:b1:5b:6f:ce:4b:33:
6b:b9:e4:13:bc:53:5e:a4:99:e3:25:b1:37:4d:0b:
08:29:c7:f0:1e:de:94:5a:87:47:2f:ee:98:e9:0b:
60:2f:68:50:5c:71:b4:67:f3:d0:f4:bc:ef:97:92:
70:76:6d:cf:09:22:4e:6a:96:38:fc:4c:0f:91:48:
9d:d5:ab:36:1c:d2:8f:5b:f3:f9:9b:77:24:2b:da:
c0:ef:21:ee:58:31:30:64:ef:c7:fb:b2:f7:18:e1:
df:d9:04:11:cb:86:ca:97:f1:5c:a9:1e:c6:52:0c:
67:56:5d:ca:74:53:7e:8d:61:38:ea:bb:bb:b2:dc:
bd:b4:79:7c:aa:71:49:dd:66:40:af:b3:1c:9c:02:
09:33:ed:0d:4f:c9:98:06:f3:b8:df:ce:b8:8c:d2:
68:70:a5:11:b5:c2:89:4d:f8:ed:c7:66:17:bd:ae:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:84:6F:9D:52:87:B6:5E:56:B0:BD:18:80:71:10:57:61:50:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BB2CA83EDE11F083DACA9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:aa:c1:2f:c0:c3:cb:62:a1:65:79:37:40:fc:5d:23:b0:39:
43:8e:be:b4:dc:85:d9:cc:d1:7b:b9:9f:4c:07:58:51:d7:5d:
e1:99:43:12:10:d1:11:49:c7:c8:cf:c2:9b:22:98:8b:e4:9a:
72:1f:59:ea:05:18:0c:e2:75:58:9d:fc:8a:fb:59:88:22:96:
ca:a1:37:6d:a1:98:70:dc:b3:0d:08:93:50:48:b3:17:bd:82:
0c:33:3f:0a:28:a6:d4:a6:47:cd:eb:b6:c4:1b:56:2d:a0:e8:
18:cd:fd:4f:0d:45:e2:e2:c4:94:ab:c2:d2:4b:64:33:59:f3:
fb:42:ed:11:c2:96:38:6d:ce:23:38:77:5b:42:9b:2b:09:03:
01:41:5a:48:da:1d:d6:7c:29:5d:5a:81:26:eb:16:0b:dc:6f:
52:4a:c2:f7:f3:4c:71:25:fc:f3:d5:2d:15:9e:a8:c9:42:80:
2b:2e:7d:98:42:3f:d2:3c:ff:8e:94:75:7e:e7:fc:cf:fb:cd:
d4:4e:9f:2a:a3:a4:b8:72:54:44:af:13:82:09:9b:a5:8f:e1:
83:0f:5b:2a:36:1a:05:ff:58:1f:a2:a8:43:41:20:69:bc:f5:
82:3d:ea:97:3d:fd:d3:c8:b6:da:51:9e:e2:2b:1d:a8:fa:9e:
ab:8c:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:56:59 2025 by rpki-client