Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86335E70328F11F0855B9FB3DAE4EC9C.roa
File: 86335E70328F11F0855B9FB3DAE4EC9C.roa (raw, json)
Hash identifier: jrRn8mmh7lQmxPvCr6mAae5Y/Ld+Qs9z8WEaqCiSyeo=
Subject key identifier: 99:7E:6F:46:9E:FB:78:A4:2D:7C:F8:B4:B4:CF:5F:BC:DB:73:74:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01810C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86335E70328F11F0855B9FB3DAE4EC9C.roa
Signing time: Fri 16 May 2025 19:54:07 +0000
ROA not before: Fri 16 May 2025 19:54:02 +0000
ROA not after: Mon 15 Jun 2026 19:54:02 +0000
asID: 984
IP address blocks: 154.82.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98572 (0x1810c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 19:54:02 2025 GMT
Not After : Jun 15 19:54:02 2026 GMT
Subject: CN=682797df-ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:49:2c:8a:c6:fa:05:01:b3:c3:2a:53:36:
a1:e4:ed:e8:07:5f:4c:89:6f:78:ce:8e:9e:13:ff:
85:d0:d2:4b:59:26:7e:1d:18:ac:78:fe:39:b6:49:
54:d0:47:08:15:70:d2:f7:2c:ae:4e:16:17:d1:aa:
f4:57:2b:2b:9b:01:87:69:9c:26:75:9f:9d:07:b0:
de:f8:a9:95:c5:62:91:ee:bc:3a:0c:bb:0c:a7:52:
fa:45:98:c5:fb:54:e0:19:15:58:77:3d:85:b8:b7:
cb:d0:57:ad:9d:b2:ea:b9:c4:66:38:2a:17:3e:3d:
82:5d:89:a3:a8:e8:55:57:8a:d4:b9:4b:ad:56:a6:
ce:e1:b9:92:65:5b:3f:9b:67:38:5f:0b:91:ee:c5:
a8:d3:3e:a7:85:ba:d3:60:3c:96:e0:37:01:98:8d:
c3:95:8c:bf:78:79:02:e6:5b:d4:0b:cf:11:b4:f5:
a1:fa:e5:6b:e2:34:48:46:63:4f:f9:c4:7d:27:da:
9e:27:74:c8:2f:00:19:ff:34:9a:c0:1b:87:37:52:
33:ac:29:d7:5e:7f:1f:fb:06:62:e1:81:8f:68:53:
96:c4:e1:c2:8e:09:3f:d3:3c:50:f4:f3:15:89:7f:
64:fd:32:5f:9d:cf:e2:75:08:2f:e6:dc:55:e2:42:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:6F:46:9E:FB:78:A4:2D:7C:F8:B4:B4:CF:5F:BC:DB:73:74:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86335E70328F11F0855B9FB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:18:34:e8:1d:38:9f:f7:a3:57:6a:7f:4a:93:af:13:80:66:
30:9a:77:c0:f2:b7:a5:38:3d:08:c5:15:44:01:fd:62:eb:c8:
c0:bc:d8:65:40:98:17:4a:62:a5:1d:f4:33:1e:93:ae:3a:49:
77:4a:3d:0f:aa:76:47:f7:26:7a:1a:49:34:1b:dd:19:6d:d7:
5e:78:a9:00:74:3f:97:f5:c6:1f:6e:2c:ce:a5:5a:80:56:97:
c4:9a:15:01:90:89:cf:eb:b5:46:39:cb:fc:2f:08:5e:77:9f:
8c:88:99:da:3d:73:c3:9d:ff:23:97:c7:7a:e9:f3:eb:3f:73:
8b:c7:b8:2f:22:e6:d1:ad:4e:7a:83:24:2c:fc:8a:2d:87:34:
14:fa:07:a4:fd:82:ee:20:7a:bf:d8:b3:8c:a6:83:c5:13:09:
ae:fe:62:a0:26:c4:0e:14:49:77:34:61:8c:c5:9a:55:c1:c1:
35:16:93:78:ee:0f:b3:db:a9:91:21:dd:fd:8c:56:d7:76:72:
be:b0:9e:cd:be:cf:f9:c5:2e:0e:a1:67:24:9a:af:ce:6a:5c:
f5:a5:05:c9:d5:46:41:82:83:4e:cb:ae:f8:55:19:80:c2:c1:
fb:df:68:f0:4d:91:5c:be:07:63:5f:4b:a0:22:0e:4d:67:5a:
c2:98:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:50:32 2025 by rpki-client