Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520C1E00502D11F09DCD89CBDAE4EC9C.roa
File: 520C1E00502D11F09DCD89CBDAE4EC9C.roa (raw, json)
Hash identifier: OwgHXWlCuEMJgFSdVbL0laQY+WA4Qw8wTQXPckWxioI=
Subject key identifier: 93:18:0B:06:14:32:87:33:31:72:4A:04:D9:CD:54:93:EE:BB:C7:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018803
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520C1E00502D11F09DCD89CBDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 12:26:43 +0000
ROA not before: Mon 23 Jun 2025 12:26:39 +0000
ROA not after: Tue 29 Jul 2025 12:26:39 +0000
asID: 395839
IP address blocks: 154.194.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 13:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100355 (0x18803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 12:26:39 2025 GMT
Not After : Jul 29 12:26:39 2025 GMT
Subject: CN=68594803-03a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:c2:c2:ac:91:df:51:b1:ed:e0:64:6c:f4:
61:86:7a:10:de:35:00:2f:54:67:41:f4:13:41:49:
c0:82:5d:87:9f:a6:b3:bc:4b:0a:82:13:3d:0b:d9:
61:eb:dd:a8:52:61:b0:9f:ef:56:15:79:cc:55:8a:
4d:3d:95:71:e6:4e:dd:6f:c9:ed:d8:1c:b8:b0:cc:
3f:5f:b1:71:0c:00:cb:ac:dc:03:00:ce:9a:12:4e:
8a:3d:0d:a7:52:ca:93:96:1d:fd:04:79:4c:5b:6f:
16:f0:d1:ce:aa:cb:25:80:ca:a2:cc:35:a0:ef:5a:
e3:6a:8b:ef:33:d6:f0:e6:8e:72:64:1c:9b:b4:24:
31:3d:ae:56:bd:e9:9c:94:0c:b1:40:dd:b8:cb:f1:
f0:9c:e3:51:bb:98:d9:a9:ba:99:dc:0a:ad:f0:51:
3d:6d:8b:c5:14:86:1c:2f:f9:33:8d:34:74:4e:e9:
a0:40:be:fc:d5:fe:c5:e3:22:47:84:06:d6:b9:43:
98:a9:da:ef:6b:0b:57:96:20:8c:8a:55:a1:ec:07:
c4:80:75:7e:38:c8:6a:e9:ba:5f:b9:01:a7:03:49:
a4:de:c6:86:86:d8:0e:86:06:9e:74:35:2b:d0:de:
5e:30:23:2f:2d:53:3f:a7:08:7b:e5:c6:74:56:5b:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:0B:06:14:32:87:33:31:72:4A:04:D9:CD:54:93:EE:BB:C7:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520C1E00502D11F09DCD89CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.60.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:3a:52:b1:a4:51:3d:20:13:0a:b5:43:f0:8b:aa:6e:89:3e:
b5:d7:e0:20:98:67:5d:14:79:13:ce:3d:12:c5:a0:07:0a:fa:
46:fa:79:e9:33:0c:0e:bf:55:4c:f5:6d:68:9b:d1:1d:f1:82:
1a:1d:83:37:3d:09:cb:34:ba:76:84:4e:68:12:b9:c4:8d:df:
81:1a:08:29:40:16:87:4c:e8:5d:54:ea:13:e5:fb:ec:18:28:
2b:10:bc:f3:2f:02:ab:7f:55:5f:28:a3:27:78:7e:1f:aa:7b:
b4:ce:40:c3:0c:ad:4f:69:11:ce:ee:70:ce:3e:5a:ec:04:b3:
85:b5:cd:82:a6:6a:27:f0:56:30:91:ba:9d:90:1b:d7:44:42:
ad:8c:62:ca:dc:b6:8e:f5:34:c6:15:91:a5:9f:2d:1a:75:7d:
4a:0e:4d:8b:94:ba:cb:bc:67:87:14:16:4f:a0:40:b1:58:04:
ff:2b:c6:92:4a:c5:be:a3:ef:b2:51:4a:8d:bc:f4:f5:d1:06:
d2:03:50:df:b8:f2:fa:47:f9:bc:0a:b6:80:83:2b:45:82:c0:
1a:4c:3f:64:b9:fb:78:96:29:d5:c6:44:10:6e:e7:96:8c:37:
b8:c5:de:a8:0d:bb:fa:45:f9:65:d1:64:5e:3b:f3:9e:7b:69:
cd:a6:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:16:35 2025 by rpki-client