Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96B27E7442C611F0A18CB387DAE4EC9C.roa
File: 96B27E7442C611F0A18CB387DAE4EC9C.roa (raw, json)
Hash identifier: O9qTSwEm11Yom9guLL63R4/7gZdjmH0ynl3GtG5vYm0=
Subject key identifier: C8:C6:3B:1D:7C:1C:55:AE:F3:1C:B1:1F:00:31:1B:FF:EE:B5:60:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01851A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96B27E7442C611F0A18CB387DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 11:08:35 +0000
ROA not before: Fri 06 Jun 2025 11:08:30 +0000
ROA not after: Thu 14 Aug 2025 11:08:30 +0000
asID: 984
IP address blocks: 154.193.6.0/24 maxlen: 24
154.193.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99610 (0x1851a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 11:08:30 2025 GMT
Not After : Aug 14 11:08:30 2025 GMT
Subject: CN=6842cc33-9f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:f7:80:1c:43:13:01:49:c1:0b:d4:73:21:
52:23:ae:28:f6:ac:3d:b0:f9:ca:f7:4c:71:31:a9:
b0:92:a6:f1:c7:4d:e6:d5:38:54:ed:51:33:5a:ba:
88:f7:c5:74:8e:52:90:16:bc:4c:60:61:19:bc:28:
15:47:83:3b:b2:b0:71:8d:6e:66:c1:39:f2:df:e1:
ef:36:cb:29:44:6c:ec:94:a0:e5:a3:f0:3f:ce:0f:
4c:6f:36:14:fc:f3:41:49:5a:45:a7:28:5f:3a:bc:
fd:4b:ed:a1:67:c8:96:ba:79:88:2d:b4:91:f2:93:
40:6f:23:3d:bd:62:72:ad:00:f2:79:20:b1:3c:f0:
72:e5:f8:f7:9f:aa:54:5e:d9:ce:84:3a:3a:65:82:
54:8e:ab:cd:40:74:63:92:b8:cd:47:47:94:14:c1:
88:6a:e0:05:88:92:1d:33:82:85:cd:dd:d2:b6:3a:
1c:bb:07:ec:65:19:7b:38:c2:65:51:d1:17:96:13:
91:44:a9:a4:f8:2b:ee:ac:9a:0c:00:71:3b:99:0c:
2c:c6:1f:93:3d:cc:97:f5:c4:72:79:67:3f:de:ca:
47:56:f9:ba:2d:eb:06:34:70:c8:43:33:0e:05:96:
10:43:62:39:93:21:5a:ba:23:c7:be:9f:37:16:7f:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C6:3B:1D:7C:1C:55:AE:F3:1C:B1:1F:00:31:1B:FF:EE:B5:60:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96B27E7442C611F0A18CB387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.6.0/24
154.193.38.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:cf:16:ce:8c:3b:6f:61:5a:49:68:ad:8f:6b:89:71:45:
ff:b3:d9:24:1e:e2:61:d0:cd:14:44:8a:26:42:83:b6:61:ab:
ea:14:2a:8e:9c:af:fc:29:ce:7f:ed:8e:06:5a:76:39:44:6d:
18:0d:92:04:78:74:b5:54:cd:7c:1c:c0:46:62:8c:cf:f2:6d:
3a:c3:42:ea:e0:5c:1f:ba:a7:35:4e:11:66:84:b8:b8:76:bc:
a6:23:68:f2:ce:fc:e7:b6:d2:19:f7:50:05:e3:bd:14:03:9b:
57:bb:17:c3:81:9e:2c:be:01:7a:4b:11:38:d1:2f:38:38:38:
25:e5:b5:4c:b3:f8:4a:0f:44:a0:24:d0:8d:39:fa:d3:ea:13:
48:fb:bf:aa:2d:5f:b5:64:f1:a4:a9:a7:d3:62:7f:b3:81:ca:
c4:cc:37:97:de:3b:bc:ec:5c:37:4f:b1:bb:bb:10:5c:b1:fe:
85:42:cd:9b:65:ff:a6:1f:6f:3e:93:41:d9:a6:88:27:39:db:
b1:e6:c3:12:d3:cc:a2:21:ce:1d:c8:c5:9e:45:90:0d:c3:51:
64:35:bf:74:6a:27:3c:f6:db:2b:a2:87:b4:f0:7d:6b:cc:75:
f2:2a:0f:67:c0:ff:34:d0:f8:f2:c5:78:b9:67:d4:fc:5f:59:
0b:ae:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:55:11 2025 by rpki-client