Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064BB82413C11F09DF8D586DAE4EC9C.roa
File: C064BB82413C11F09DF8D586DAE4EC9C.roa (raw, json)
Hash identifier: eNF/56WsuaOY5ER9Ozbh14Tsok6xvPHt1AUAZPdq23I=
Subject key identifier: 5E:5D:50:EA:06:6D:F3:08:83:5F:CA:1E:05:DF:0B:99:77:D0:9D:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064BB82413C11F09DF8D586DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 12:09:23 +0000
ROA not before: Wed 04 Jun 2025 12:09:19 +0000
ROA not after: Fri 11 Jul 2025 12:09:19 +0000
asID: 401615
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99542 (0x184d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 12:09:19 2025 GMT
Not After : Jul 11 12:09:19 2025 GMT
Subject: CN=68403773-fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:ea:14:fe:23:9f:07:30:dc:83:77:b1:90:
ed:36:0e:db:cc:5d:e1:a8:5c:2f:12:44:9e:e2:df:
dc:4c:30:d7:6d:5b:f3:4b:ac:a1:48:30:9d:20:01:
dd:b3:d7:4f:a7:ed:37:fb:bf:13:8a:9b:48:92:05:
d1:31:03:29:b1:56:94:f3:2f:f3:a6:d6:f7:85:54:
fc:47:20:04:41:7c:42:ab:86:84:09:91:d4:4b:d5:
fd:58:9c:48:d8:5f:50:41:23:ce:91:c5:e5:3e:cd:
8a:71:c5:cb:bc:9e:b1:a3:f4:db:d8:54:a8:62:a1:
9b:b6:b1:ac:33:e2:50:9a:9f:08:6a:26:b5:86:f7:
6b:5c:be:9e:a5:f1:dc:86:df:d4:ae:f9:ce:fe:d3:
83:5e:b8:81:71:2b:d0:fa:c2:b2:99:06:b7:28:24:
b6:ee:1f:5c:ca:84:aa:cb:fb:94:6b:94:b5:b3:0a:
35:b6:d9:09:99:b5:e3:db:9f:11:46:c2:0a:a4:63:
0d:29:4d:1f:ef:c2:8b:4e:9e:b5:54:db:d5:26:5e:
69:0e:2a:64:c7:60:d7:06:36:e0:8d:53:26:57:e4:
74:60:c1:95:bd:ac:6c:2c:1c:fe:81:98:51:e4:15:
35:4b:f5:8a:09:7d:06:43:d0:3e:ec:bf:7a:5f:9f:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:50:EA:06:6D:F3:08:83:5F:CA:1E:05:DF:0B:99:77:D0:9D:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064BB82413C11F09DF8D586DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
53:6c:54:a3:c3:fe:88:9b:98:a2:86:96:ef:32:03:b4:85:c1:
80:f4:d2:e2:6f:6e:24:29:2f:8a:18:9d:6c:d1:fe:10:ff:bd:
60:d0:3a:05:18:86:27:4b:68:08:73:56:a3:ab:8d:b6:20:a5:
a1:f3:83:33:8e:c5:a9:7f:8c:a0:26:a6:fa:2a:26:c6:33:89:
74:d8:0d:e8:f7:3d:cb:b4:8f:1c:9d:43:64:76:71:7e:03:36:
da:0a:ca:7c:24:d2:78:a2:8b:77:68:4f:f1:08:24:cd:e1:c9:
c6:3f:ce:8d:2a:cd:f1:30:51:36:d1:cf:2c:5c:7d:ff:af:6d:
4f:6d:22:aa:91:76:4d:69:26:6f:65:ec:31:4b:b2:7c:f8:87:
d8:61:35:57:75:c1:1d:72:20:2d:7d:d0:d7:cf:56:b8:e2:61:
7e:70:d7:7a:f2:43:13:ed:b8:01:6f:16:0c:d3:88:1f:c2:68:
f5:0e:ae:87:02:38:a9:91:d5:45:7a:c6:78:97:1f:75:fa:5c:
ee:76:47:71:2b:a0:be:4f:71:cd:80:18:72:44:c1:fe:7c:60:
eb:e5:63:7b:60:28:b4:02:f6:5a:9a:ee:0b:a5:59:0a:5a:43:
41:0d:2a:33:4e:19:be:9a:99:07:89:b9:bd:ad:7c:03:55:af:
65:5d:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:27:27 2025 by rpki-client