Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7268BA393711F0AC0BD6DDDAE4EC9C.roa
File: 0D7268BA393711F0AC0BD6DDDAE4EC9C.roa (raw, json)
Hash identifier: pVJE9ENVv9fgvN4T1KWyq7TTzvEBrSu36fzeNmR+Xkg=
Subject key identifier: 01:68:E3:A6:90:33:4C:E0:60:AB:8D:76:BF:8D:8D:20:7D:3C:A2:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7268BA393711F0AC0BD6DDDAE4EC9C.roa
Signing time: Sun 25 May 2025 07:08:26 +0000
ROA not before: Sun 25 May 2025 07:08:21 +0000
ROA not after: Tue 01 Jul 2025 07:08:21 +0000
asID: 398704
IP address blocks: 154.200.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98978 (0x182a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 07:08:21 2025 GMT
Not After : Jul 1 07:08:21 2025 GMT
Subject: CN=6832c1ea-1b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:73:5e:28:24:9d:58:c5:cc:b5:34:3a:c5:
b7:5f:43:d3:06:fd:d8:c4:5a:38:93:89:01:11:97:
69:b7:9d:e1:82:12:55:13:9c:43:ff:4f:12:aa:ee:
bd:b5:6f:44:af:e5:8b:c5:10:c7:1e:c6:d1:ff:66:
97:2a:39:5e:86:db:68:b3:27:da:67:99:68:9a:a5:
fd:2d:68:e3:bd:46:74:16:09:5e:b4:98:c7:4d:7e:
12:da:fc:cd:aa:cb:d7:32:ef:73:83:a0:4e:54:ec:
4a:31:35:84:28:cd:2f:cf:4d:87:6c:4c:6d:77:33:
27:ea:bc:93:cd:0c:15:2c:23:b3:b9:e3:90:93:e9:
5c:7f:c3:fd:aa:d7:d7:ab:a7:b5:f6:2f:ad:54:e6:
5a:1f:30:f0:e6:d7:d2:13:1f:9a:63:ad:5e:3a:3e:
c4:c4:ba:be:15:c8:00:8e:6e:c6:55:b6:41:f7:74:
50:63:24:08:61:cb:aa:22:69:bf:46:95:dd:aa:45:
34:0a:82:e9:ab:14:fc:ac:cf:ba:21:e9:90:6e:f1:
6f:29:75:63:e7:a0:5b:af:34:5e:eb:80:dd:34:5d:
bb:11:e1:2d:b3:b5:6e:03:14:50:46:bf:cf:7a:c5:
06:06:ba:ca:7e:d6:57:07:9f:fd:f4:98:f1:52:28:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:E3:A6:90:33:4C:E0:60:AB:8D:76:BF:8D:8D:20:7D:3C:A2:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7268BA393711F0AC0BD6DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6c:76:ee:6e:b5:cf:f5:ee:cb:ef:9d:b1:11:04:ec:0f:a7:
3f:22:59:e7:d6:58:07:28:c4:6b:14:85:67:e4:15:4b:9e:4f:
d5:01:b7:9b:bc:1e:9f:d0:d0:d2:a4:09:d4:82:f7:b5:6c:dd:
7f:6a:c6:d6:d1:6b:83:ab:11:2b:30:45:81:31:e1:16:32:ee:
4d:a5:d0:aa:53:e9:7a:c3:85:c2:55:b4:a4:62:d7:b6:fe:00:
2f:d8:bb:1c:0b:17:e3:86:67:4a:0b:3f:2b:08:17:7f:f5:a9:
eb:35:52:06:c0:b2:70:23:61:08:6c:e4:88:f5:68:ad:52:fc:
f1:1b:d1:13:20:12:5a:de:dc:1f:ec:ad:6f:de:9e:5a:1a:e0:
87:e6:90:bb:8c:9a:49:d2:03:82:81:ad:b7:79:bc:86:d6:02:
65:5a:87:53:fb:4d:c2:0d:a0:32:05:dd:25:a7:ed:a6:a0:35:
0c:c3:63:5f:26:bc:e9:35:b1:48:80:b1:81:99:9c:cd:bb:a2:
4f:b5:27:ca:82:ab:c8:31:50:a3:fd:8c:64:b4:f2:b5:01:11:
a5:e8:fa:5a:ea:b3:b4:05:c1:c4:c4:db:4a:8f:6a:84:b1:00:
a8:a0:e2:f2:dc:83:7b:39:2f:78:e5:6a:06:bb:40:a5:d5:f0:
b1:2c:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:46:35 2025 by rpki-client