Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ACF262490511F0A2DA6BB8DAE4EC9C.roa
File: C7ACF262490511F0A2DA6BB8DAE4EC9C.roa (raw, json)
Hash identifier: Qo30M5p7KBp/YtIe4dlI+5E/88aKzz6J9BCnR+IBinY=
Subject key identifier: 95:9F:28:F1:F4:B6:55:93:0A:F1:6E:69:F1:B3:8D:BF:67:BC:DA:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018688
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ACF262490511F0A2DA6BB8DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:56:03 +0000
ROA not before: Sat 14 Jun 2025 09:55:57 +0000
ROA not after: Mon 23 Jun 2025 09:55:57 +0000
asID: 54600
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99976 (0x18688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:55:57 2025 GMT
Not After : Jun 23 09:55:57 2025 GMT
Subject: CN=684d4732-98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:4b:cc:a7:ed:e2:63:07:3d:91:e9:c7:78:
f5:80:80:c9:88:1b:fc:80:4e:02:9e:14:c9:79:59:
32:78:d9:51:6d:d5:53:62:cc:d7:95:c3:e5:69:d6:
a9:20:c8:4d:ba:66:1d:8e:4d:14:12:2a:8b:a9:51:
a5:d0:ac:db:a5:02:d5:1a:aa:a4:2f:de:76:50:88:
42:37:bc:51:aa:dc:07:dc:45:57:30:1e:1d:bc:d0:
79:f7:b8:63:34:77:1c:60:5f:13:4b:76:34:c8:0c:
7b:81:98:c8:7f:ed:51:35:66:81:0f:bc:03:b2:3b:
c9:a2:1f:4e:21:5c:63:20:06:09:71:3a:28:d8:7d:
6d:c5:77:d9:16:1a:e7:bc:33:1e:65:fb:7c:b6:ec:
21:f9:a1:a2:1b:7f:76:14:07:0e:b6:a6:e4:4e:4a:
f4:4e:07:2f:b9:ac:50:77:79:3c:92:5d:20:12:75:
fc:13:50:42:b8:ba:a2:ab:e0:ec:86:b3:04:42:58:
3c:ac:b8:c7:eb:a6:96:e8:7a:5a:53:0b:59:58:58:
38:41:2d:b6:6f:de:48:b0:b7:e4:a3:7c:53:ae:70:
77:dc:21:b4:20:20:d3:11:ce:a7:25:fa:8a:26:8f:
80:95:6a:f0:5d:f2:99:39:f9:f2:43:fc:f8:3a:b0:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:28:F1:F4:B6:55:93:0A:F1:6E:69:F1:B3:8D:BF:67:BC:DA:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ACF262490511F0A2DA6BB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
81:96:79:8a:c4:bf:76:1f:85:ef:9c:f7:e1:65:71:6b:36:6a:
23:15:21:f4:be:52:38:20:1a:c1:da:af:54:9c:b1:a2:70:cf:
04:d7:b6:f9:36:27:b6:d4:9f:a6:51:41:b4:dc:33:e2:40:08:
d5:81:c2:78:1a:96:dc:5a:d1:42:40:26:11:15:8b:1d:31:20:
ef:7a:2c:d1:07:0c:52:b3:9a:3e:48:40:c8:bb:a5:82:98:5e:
37:a6:91:ef:26:e0:69:98:7b:c5:f0:79:94:07:57:19:7c:ac:
fa:fe:6b:c2:df:f9:67:27:29:c0:da:99:bb:27:e1:05:8f:97:
0d:a4:7d:f4:c2:69:61:d2:77:94:39:33:11:04:87:74:64:30:
2d:80:80:92:5e:f8:9f:12:f7:63:d7:52:3c:b1:b9:eb:47:46:
ac:58:1e:1b:dd:c6:3a:f2:39:4f:64:50:10:e4:f0:bd:4a:fc:
6c:ca:80:f2:6d:0c:0a:56:26:1d:e4:3b:61:ad:03:e5:e3:89:
ab:26:26:a0:26:fe:d4:0c:3a:cd:f8:fb:39:e6:88:c6:fe:b6:
cd:e3:a6:11:46:b7:8d:14:88:6e:cd:b0:b4:cc:47:c8:de:fc:
2a:8f:51:b1:2e:73:7d:17:71:3d:d8:e7:9f:51:60:2f:80:64:
86:1b:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:14 2025 by rpki-client