Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ABC06D83C7C11F0BAE99AA3DAE4EC9C.roa
File: 0ABC06D83C7C11F0BAE99AA3DAE4EC9C.roa (raw, json)
Hash identifier: 1EZ7XZREkEUd15lEcRQX4332vdaGAxnwKw15EJHDYkk=
Subject key identifier: 98:B3:B6:56:B0:AF:DB:4F:28:5B:17:D1:D4:52:8B:7B:6D:E5:7B:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ABC06D83C7C11F0BAE99AA3DAE4EC9C.roa
Signing time: Thu 29 May 2025 10:59:51 +0000
ROA not before: Thu 29 May 2025 10:59:46 +0000
ROA not after: Sat 05 Jul 2025 10:59:46 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99256 (0x183b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 10:59:46 2025 GMT
Not After : Jul 5 10:59:46 2025 GMT
Subject: CN=68383e26-8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:71:c2:e5:c6:d4:ad:d0:ec:5a:3b:54:bb:
77:f5:d6:3e:f0:98:0c:c9:4e:e8:51:c6:14:1f:82:
10:88:dd:76:e0:a1:07:25:26:6f:14:94:97:0e:45:
bf:65:20:09:ae:7a:38:9c:a5:b9:1a:7a:b7:24:36:
81:32:15:31:8a:47:94:50:f7:d8:7b:0d:7e:e3:94:
95:d6:19:c6:20:c5:55:f2:d8:f4:60:8e:07:32:b1:
c5:8a:5e:1a:24:df:e5:9b:cf:00:6d:6a:b4:c8:e2:
da:70:3a:9a:68:b8:7e:62:25:57:8a:c9:14:01:2e:
c1:97:71:84:8a:d0:f0:a3:46:7b:41:8b:27:20:1e:
84:a2:51:01:c0:8b:bf:f8:17:ee:9a:12:ba:93:c7:
40:6b:b2:ef:0d:69:89:97:20:ea:ac:16:57:b3:2f:
28:a1:96:83:4b:41:15:f2:88:47:3c:82:79:4d:87:
05:22:ee:61:d1:a8:ab:cf:a1:44:1f:83:d6:94:15:
f1:d9:a6:2e:e7:41:fd:24:21:77:64:cd:39:d8:3f:
18:5a:7f:5d:cb:56:57:b2:ce:12:cb:d9:e7:96:01:
60:dc:a8:0c:8f:74:51:ab:a7:de:1f:8d:7d:c0:bb:
61:72:65:12:d1:41:c9:58:b8:1b:32:0d:10:5a:3c:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B3:B6:56:B0:AF:DB:4F:28:5B:17:D1:D4:52:8B:7B:6D:E5:7B:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ABC06D83C7C11F0BAE99AA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
43:80:ba:19:06:fe:d9:68:e6:af:6f:73:12:6d:a3:4c:e0:c1:
33:93:69:de:00:f9:08:91:c9:23:7f:69:22:42:3c:a6:3e:eb:
99:e6:7b:0d:84:d5:4b:6c:92:29:df:ef:04:3b:84:7e:e8:7e:
ea:a5:0c:14:4c:c9:b4:4e:70:28:a8:06:c6:c0:bc:48:fe:b7:
ac:6f:39:83:8f:1c:e6:56:a9:08:4d:6e:e5:65:43:8c:3b:c8:
22:79:8b:13:14:3d:9f:c5:bf:f1:45:30:8a:dc:8c:08:46:ac:
0c:e9:09:95:2f:d0:69:d3:0d:a8:06:ff:65:d2:6f:e1:0e:40:
34:47:e0:ad:69:79:be:47:c0:b3:fb:38:30:33:56:71:e6:27:
24:1f:17:23:ce:f9:ef:13:58:75:e9:ac:50:0d:d6:85:2c:13:
64:6b:ea:71:0f:20:c1:d1:bf:c9:d0:a0:7f:f4:ca:f7:a2:19:
c0:62:ef:f1:44:80:1a:7f:38:ad:14:b1:28:09:c8:83:52:94:
36:fb:43:a3:14:9d:24:01:49:10:13:1b:b4:4e:7a:4c:69:5b:
3a:f6:51:32:a7:6f:6f:ed:71:09:cd:37:c8:4b:86:48:29:07:
c4:ee:08:32:ef:d3:9f:03:17:ea:43:2c:62:0e:2f:9e:12:3d:
23:96:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:15:37 2025 by rpki-client