Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C595DA22381E11F094ABA5AEDAE4EC9C.roa
File: C595DA22381E11F094ABA5AEDAE4EC9C.roa (raw, json)
Hash identifier: kFJo7ZLA93qT7b2r77h3aU/hqVKEwXRofN/xlccOfew=
Subject key identifier: BB:F8:95:02:AF:5B:D6:93:D1:7F:B1:76:29:EB:2C:97:60:07:03:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01826D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C595DA22381E11F094ABA5AEDAE4EC9C.roa
Signing time: Fri 23 May 2025 21:42:07 +0000
ROA not before: Fri 23 May 2025 21:42:02 +0000
ROA not after: Wed 17 Jun 2026 21:42:02 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98925 (0x1826d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 21:42:02 2025 GMT
Not After : Jun 17 21:42:02 2026 GMT
Subject: CN=6830ebaf-a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:20:45:6e:4b:fa:a7:f0:75:b2:be:9c:7c:
d5:ce:e5:d5:4a:62:ee:fa:e3:d8:0a:66:d1:e9:b0:
f6:20:f2:cd:7c:71:51:88:e8:ea:66:10:ab:9f:04:
c3:ab:34:77:ca:e5:84:01:c3:8b:dc:1f:25:73:82:
45:9d:0e:37:dc:ef:67:96:8e:15:a3:90:cd:58:58:
c6:44:02:d5:70:ad:4b:7f:91:e8:67:cc:bd:78:71:
e1:d9:4e:c5:d6:56:b7:62:3f:fe:41:1b:2c:8a:ee:
78:8c:d4:6c:61:dc:55:81:94:30:49:84:44:f8:e5:
c0:df:68:f3:2c:a0:2b:61:35:68:68:06:f5:3b:2f:
ae:4e:88:1d:fb:cf:98:3e:bd:02:f1:9e:0a:cd:be:
0f:20:ce:6b:58:ad:77:f4:95:b3:15:9a:d3:44:a1:
b5:7f:e6:65:e2:19:48:0b:48:a3:c6:d9:84:2f:f9:
70:73:e9:e2:33:21:70:ee:ed:bb:45:49:e8:7b:56:
90:b7:f1:73:5e:f1:c7:b8:fc:1a:f0:06:64:6d:bd:
32:99:4b:9d:13:6f:b8:b5:9a:ef:d6:52:67:f8:24:
6c:e6:d1:46:d6:1d:1e:d2:34:c9:6f:f9:53:70:05:
58:f2:56:59:47:44:54:31:f9:83:0f:13:ae:82:fb:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:95:02:AF:5B:D6:93:D1:7F:B1:76:29:EB:2C:97:60:07:03:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C595DA22381E11F094ABA5AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c3:a8:af:c7:64:18:02:d1:63:5d:c9:dc:15:7c:27:39:d9:
6f:2e:e4:5a:40:fb:d0:33:7b:be:20:e2:15:29:ed:7d:88:f0:
b0:c9:a9:62:5d:ad:d4:e7:c7:d7:d8:64:b4:ac:aa:6c:39:c5:
5b:9e:23:65:a6:3d:57:25:fd:63:c1:d8:9c:04:22:97:d7:43:
95:30:17:6d:61:9a:09:29:6e:86:9c:27:52:8c:f6:a1:79:f9:
12:13:12:79:ed:74:0f:55:97:0e:71:02:29:85:ff:de:9a:ed:
e5:53:1b:56:7f:3a:28:85:2f:c4:d0:6c:6a:b4:9f:f3:82:41:
29:0e:f3:29:44:83:cb:52:e3:00:c3:01:54:48:e0:bf:96:ae:
39:ee:7d:00:ef:75:d4:a2:bb:67:ee:a0:0e:14:54:44:f3:7b:
12:7c:8e:1d:fe:fa:e9:e8:21:29:62:d8:e2:f6:f5:a5:73:c4:
61:6b:50:7c:8f:3f:6e:49:1a:b7:31:e8:1d:1d:da:76:76:c9:
73:13:c3:0d:98:39:88:d5:55:8a:38:f3:a2:ff:84:69:70:97:
23:cd:87:15:32:9d:b9:22:32:25:44:c6:cd:ea:94:6b:e5:74:
46:98:eb:2d:e4:6f:e5:09:9a:8a:a0:62:dd:03:ad:37:c1:3e:
ef:dc:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:19 2025 by rpki-client