Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FB65E9C381811F0BF1E5387DAE4EC9C.roa
File: 7FB65E9C381811F0BF1E5387DAE4EC9C.roa (raw, json)
Hash identifier: reg7e6TYZtCI15cUksuEty8XWHLme9eArOU1y9wJDCo=
Subject key identifier: 7F:F1:F1:84:91:26:39:5B:AD:37:8A:1F:89:B7:5F:45:98:75:C8:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01825F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FB65E9C381811F0BF1E5387DAE4EC9C.roa
Signing time: Fri 23 May 2025 20:57:13 +0000
ROA not before: Fri 23 May 2025 20:57:07 +0000
ROA not after: Wed 17 Jun 2026 20:57:07 +0000
asID: 8796
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98911 (0x1825f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 20:57:07 2025 GMT
Not After : Jun 17 20:57:07 2026 GMT
Subject: CN=6830e128-705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:9e:9e:d2:75:98:e2:24:ac:40:74:18:59:
49:57:8c:d1:c1:32:d4:c1:ad:6f:f9:4f:67:b9:a1:
a6:d2:19:05:11:87:f0:39:5c:2b:4e:10:c1:80:6d:
6f:9a:0b:8a:8b:fd:9c:1e:ca:ce:ac:f0:ad:4d:08:
49:93:03:e2:52:21:1e:e1:52:9d:78:e0:74:e0:3d:
9c:51:d8:38:eb:b5:57:12:eb:ce:6a:c4:45:67:23:
0b:1f:e0:e2:bb:ef:c4:94:54:1c:96:9c:b0:80:ff:
d1:24:30:a3:fe:30:d5:dd:07:e3:e2:f3:7f:61:03:
62:88:5b:74:fa:e9:03:aa:87:fe:a6:fb:f0:88:8c:
5d:f3:24:cd:8d:35:17:43:09:e4:f1:fc:3c:06:bd:
c3:14:d5:0b:24:a3:e7:ef:19:ff:b7:8b:21:68:77:
3f:b5:9d:83:7f:5c:ff:f3:c2:19:a9:3a:ba:c5:4c:
93:6e:be:ca:27:ea:3e:d0:ba:80:3e:cd:e0:d1:d5:
e0:79:ac:82:aa:54:cc:86:16:a6:7c:de:73:e4:0d:
b0:c3:e2:f2:9c:7d:d7:11:4a:b6:6e:e5:4a:f7:7d:
3a:a1:c0:39:c4:4a:50:8d:fe:cb:6b:54:46:8a:10:
ec:fc:b6:25:00:f6:29:c4:13:14:e3:1e:d0:43:c7:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:F1:84:91:26:39:5B:AD:37:8A:1F:89:B7:5F:45:98:75:C8:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FB65E9C381811F0BF1E5387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
98:21:23:13:b3:8d:2d:90:39:05:5d:31:44:bc:9c:bc:09:66:
d6:25:d7:38:7e:64:8c:2f:fd:30:f3:8c:b2:cb:df:f1:51:33:
48:ab:ae:1d:82:c5:d6:c1:d8:ca:54:bd:26:53:f9:af:dd:ce:
23:8b:90:a5:df:00:b9:e8:29:94:f6:fb:fc:ae:06:97:5d:87:
8e:31:49:57:86:1d:3b:bc:ac:e8:79:c6:87:7d:be:22:31:b1:
61:92:2b:d2:f3:5e:b1:f3:7a:7c:07:e7:ed:4b:91:87:a8:4c:
b6:21:89:de:62:6d:8b:05:e6:68:f7:20:30:46:50:cc:ce:58:
49:52:08:ce:0d:a2:d7:42:fc:d0:de:88:17:c8:2c:be:70:96:
08:e9:c4:24:8b:ab:63:dd:f6:22:43:b4:9e:c2:70:bb:d1:f6:
be:ca:a5:33:e3:6b:06:8f:e0:4b:c5:25:75:62:2f:45:8d:83:
8e:1b:39:c8:dc:35:68:9b:bc:79:a7:f9:31:8a:6c:10:b4:26:
4e:9e:64:d5:14:fd:c8:34:05:83:4f:b0:f4:04:80:cd:58:2d:
f9:b6:8e:f8:e7:cf:ad:a4:e4:df:bf:45:1b:00:e1:4d:22:cc:
c1:d3:42:8b:eb:ce:8f:61:a0:e3:97:67:11:3d:5a:fe:d9:f2:
76:9a:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:55:31 2025 by rpki-client