Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28A62D0269111F0AD88937FDAE4EC9C.roa
File: A28A62D0269111F0AD88937FDAE4EC9C.roa (raw, json)
Hash identifier: FygfOT7a42l3aXWbdc6xWqSD25/SHirO/ISr0+vAOVM=
Subject key identifier: 47:B2:BA:8A:D2:23:E3:95:05:32:64:85:67:DE:D8:A1:1B:0E:DB:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28A62D0269111F0AD88937FDAE4EC9C.roa
Signing time: Thu 01 May 2025 13:38:59 +0000
ROA not before: Thu 01 May 2025 13:38:54 +0000
ROA not after: Wed 29 Apr 2026 13:38:54 +0000
asID: 140227
IP address blocks: 154.86.26.0/23 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97806 (0x17e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 13:38:54 2025 GMT
Not After : Apr 29 13:38:54 2026 GMT
Subject: CN=68137973-b798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:23:2a:28:4a:f3:1f:d8:8a:de:ca:30:56:
6e:43:0d:aa:32:62:58:e8:f4:df:6c:75:39:e2:c7:
a3:c2:a8:a3:fd:88:7a:3f:a8:62:4a:8c:43:54:6f:
2e:1e:09:f2:65:84:d7:69:8f:13:7d:0a:e0:74:51:
f9:16:5b:9d:8b:0b:c0:be:8c:97:6c:28:71:03:ac:
53:f2:ad:68:ec:8c:ab:dc:a2:56:09:ee:1d:4e:1b:
5b:dd:eb:dc:97:fb:c9:81:5a:cb:7b:75:7b:a2:83:
41:bc:55:f3:26:a6:c6:57:eb:67:0d:90:9d:87:b1:
ab:97:16:59:3f:76:13:d3:bf:41:b4:15:aa:7b:67:
89:50:d2:29:1e:c2:d2:0f:f3:22:62:9f:bb:26:69:
db:a8:96:c1:62:05:a8:c1:aa:44:fc:92:2e:53:45:
b4:8a:66:29:78:ea:06:20:df:bc:ba:ae:2f:ed:8b:
9c:2d:b2:5a:c8:3d:75:65:d6:25:5f:b7:54:88:27:
eb:fb:53:1d:78:03:51:04:bf:8a:38:d4:e4:c2:0f:
aa:84:21:e4:27:04:cc:c0:13:fb:54:b2:fd:5c:ea:
e4:e4:18:9e:8c:5a:33:f5:7f:0d:e9:16:e9:dd:8a:
0d:1c:47:1a:b4:20:1b:5b:0a:2a:83:e3:57:37:0f:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:BA:8A:D2:23:E3:95:05:32:64:85:67:DE:D8:A1:1B:0E:DB:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28A62D0269111F0AD88937FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.26.0/23
154.86.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:17:8c:94:f6:ba:44:95:47:36:7c:c3:91:9c:03:23:dc:3d:
28:f9:e0:9c:7c:6f:b3:0d:f9:e2:4b:a2:df:18:ef:80:57:f2:
8f:03:19:73:48:6f:4e:e9:6f:d9:7a:46:d9:3b:a3:4e:c5:ae:
f2:d3:66:32:12:6b:b7:00:27:56:00:91:96:d8:3f:8f:8a:1d:
c8:87:bb:5a:43:8d:e7:51:d9:23:8d:c8:a1:b8:2f:4e:1e:ca:
fe:40:cd:27:48:28:5e:bb:f9:32:e8:b8:66:56:0b:ba:07:e1:
9e:0c:e9:50:9b:9d:f6:a2:15:81:63:be:b5:5e:1a:8e:e1:43:
49:23:8b:2f:47:92:6e:71:7b:4f:88:31:7a:31:79:e2:65:89:
44:e6:61:25:f2:ff:98:07:c3:d9:f7:28:60:4c:3e:b0:35:3c:
92:04:ec:72:0d:c2:87:3d:1a:1a:35:84:d6:41:86:2a:d4:dd:
2a:4f:45:bb:93:a5:3d:39:40:2f:8f:53:f1:8f:6d:70:e1:33:
11:4e:d3:cf:57:f9:7f:e6:4d:41:8d:9b:3f:f5:0a:a2:e7:69:
53:a6:7f:22:c0:39:dd:13:cd:7b:2e:b0:f3:35:2f:5d:2b:6c:
fa:18:8d:49:0d:12:56:dd:d9:10:ab:45:4f:15:55:b4:a0:f5:
63:8c:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:36:28 2025 by rpki-client