Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504864D4706711F0BF210B81DAE4EC9C.roa
File: 504864D4706711F0BF210B81DAE4EC9C.roa (raw, json)
Hash identifier: RkL/cHQdjT7DucfBE3kZ50N4R840uRutetsZJf5uBGs=
Subject key identifier: 11:3F:52:EA:AD:DA:09:2E:E8:2C:FC:A2:EA:35:C7:7F:03:07:FB:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01909B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504864D4706711F0BF210B81DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:42:28 +0000
ROA not before: Sun 03 Aug 2025 12:42:21 +0000
ROA not after: Wed 08 Oct 2025 12:42:21 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102555 (0x1909b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 12:42:21 2025 GMT
Not After : Oct 8 12:42:21 2025 GMT
Subject: CN=688f5934-e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:71:6e:df:37:ec:ae:ce:ba:2c:09:6c:75:
27:ee:9f:d6:8c:cd:c3:aa:56:71:71:5e:b2:f8:4d:
2c:f2:62:72:54:8f:ef:7a:dd:74:0b:8a:8e:92:0b:
6c:42:ea:59:25:85:6f:c7:25:4c:cd:b9:5f:e4:98:
1c:a6:fc:7c:53:cc:b1:de:e0:dc:ca:28:f6:f7:cb:
a6:72:80:59:19:b5:bf:d0:8b:b5:1a:b8:30:56:95:
63:31:50:c1:c5:d0:a2:36:56:e4:c8:dc:e4:46:17:
ef:af:f8:fb:fa:1f:27:a4:9d:3b:88:5e:57:23:2b:
2c:00:b0:cb:2f:b8:16:a9:aa:9a:89:78:ec:30:26:
e0:07:13:33:25:8d:42:ee:94:36:b7:e6:b4:9e:a2:
01:06:7f:93:d9:11:96:54:c7:d2:13:8f:90:d4:7e:
67:0a:9c:49:d5:19:3b:11:7b:62:da:b8:17:1a:60:
26:49:36:3a:fc:5d:d6:53:eb:ba:1f:35:a8:bb:95:
b7:b5:07:2f:08:28:73:77:93:57:7b:e7:9d:84:61:
13:f4:e8:9c:a4:8b:82:b8:c5:66:cf:12:28:e4:ca:
6d:0a:47:c0:8d:c4:4e:4d:cb:f1:b9:5e:ad:dd:16:
88:85:b1:5c:97:ef:ab:a6:97:17:2e:7f:7d:a8:36:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3F:52:EA:AD:DA:09:2E:E8:2C:FC:A2:EA:35:C7:7F:03:07:FB:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504864D4706711F0BF210B81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
8f:c0:06:57:50:3f:04:02:73:b2:a7:9e:d5:aa:98:da:61:e4:
02:49:fc:a7:66:67:48:f7:58:f1:2e:bf:92:19:2d:ba:1f:5f:
2a:67:9d:b6:ba:74:20:b0:1b:5e:ae:30:aa:d0:6e:dc:43:da:
c2:45:57:e0:63:a6:73:3f:24:d6:dd:2c:9b:1c:10:fb:b9:97:
fb:93:d9:b9:38:87:25:9c:29:81:e5:b1:f0:ea:07:e4:59:7f:
71:af:fb:f4:eb:44:6c:92:d7:57:54:9c:dd:a5:64:f1:82:29:
66:57:5e:a2:08:68:8c:5e:3e:15:37:a0:5d:84:c5:f2:81:e6:
f4:0d:ec:13:41:db:de:85:02:91:80:15:8b:b5:e8:83:90:4b:
05:dc:db:c9:2d:30:61:bc:b7:ba:ab:15:93:66:21:d9:8d:86:
bd:17:61:43:b5:f6:72:a4:3e:cb:29:a5:62:ef:66:24:f2:37:
3e:27:b1:54:d7:61:75:dc:a0:3c:dd:7d:b0:cf:2d:e9:cb:bc:
b5:2b:33:13:23:fa:e7:d7:7a:bd:86:c5:c0:0b:e0:da:e3:cc:
f1:b3:04:ea:88:ac:33:19:7d:2a:d1:8e:ac:c4:10:91:8f:38:
17:ff:ea:c8:ac:c0:2d:a7:22:80:28:5f:34:69:26:95:5e:a3:
f1:dc:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:44 2025 by rpki-client