Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96F030C450511F0AD54FAA6DAE4EC9C.roa
File: F96F030C450511F0AD54FAA6DAE4EC9C.roa (raw, json)
Hash identifier: msm9qFMkMcK0ZYGjBiiNQUaEpZqFm0ZGI6V0nPx0GzM=
Subject key identifier: 17:E2:63:4A:AE:E0:67:F2:68:37:23:CD:55:B1:37:BD:BB:A3:2F:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01857E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96F030C450511F0AD54FAA6DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 07:47:21 +0000
ROA not before: Mon 09 Jun 2025 07:47:16 +0000
ROA not after: Tue 07 Jul 2026 07:47:16 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99710 (0x1857e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 07:47:16 2025 GMT
Not After : Jul 7 07:47:16 2026 GMT
Subject: CN=68469189-b0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:3e:f0:51:55:35:c6:95:a1:4a:a7:f5:56:
00:24:13:29:3b:ce:2a:94:6b:6e:e5:61:69:f4:31:
b1:95:b9:e1:72:3f:21:cd:e6:09:dd:08:6f:5b:f2:
6a:8a:c7:f7:26:0b:a5:51:84:1a:be:e5:e4:bf:c7:
f5:ba:f8:2e:b4:cc:b7:c0:76:a5:c9:f4:d5:eb:4f:
cc:f5:e8:cd:1e:63:12:36:42:9a:50:3c:84:7a:cd:
37:59:39:df:91:e6:22:5b:73:08:10:73:6d:50:b2:
e3:bd:56:90:27:a9:31:94:b6:9c:90:a3:de:db:df:
58:a6:96:a1:c0:98:aa:a6:30:3e:27:9e:a1:36:e3:
ac:ae:86:27:93:87:87:c6:33:54:f9:eb:9f:67:31:
af:ef:09:17:fb:2d:44:d6:4b:86:1d:38:83:05:19:
76:4e:b9:52:51:61:1c:d3:ac:f6:19:4f:f7:fe:bf:
b0:3d:e6:6c:31:18:f3:b8:0d:2c:d2:0e:e2:dd:f8:
91:a4:15:60:7c:ff:51:62:03:ed:95:af:5e:4f:17:
80:77:45:e6:b9:f1:08:8a:9a:e3:0d:c3:6f:76:71:
a5:68:86:a9:1e:90:79:64:47:e6:76:0f:ce:6d:9f:
05:cb:6f:bf:dc:89:40:c5:c2:a4:60:07:d1:e9:ca:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:63:4A:AE:E0:67:F2:68:37:23:CD:55:B1:37:BD:BB:A3:2F:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96F030C450511F0AD54FAA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:bc:b4:e7:49:8a:70:65:11:68:b8:ac:33:1d:f6:80:e1:
8d:58:1e:e5:b1:a7:33:69:8d:9f:cb:eb:03:11:13:b3:be:ca:
08:af:58:04:a1:26:d7:43:a9:c9:de:15:27:da:80:54:25:9d:
cc:7d:a5:e1:c9:97:11:fb:a3:d6:29:4f:f9:b0:f0:ae:97:bf:
c8:61:8e:9e:61:30:f9:1e:4c:7f:3f:20:8b:ca:5f:6f:84:49:
a1:d2:a2:3b:b2:0d:39:cd:68:6a:f8:36:78:85:1b:ad:b5:aa:
1d:f0:8e:b2:9c:0f:55:89:e5:f1:db:0b:77:34:21:60:8d:d4:
4e:7a:ea:2d:4c:ee:71:9a:27:af:5a:80:47:81:46:e2:2b:ba:
ba:b3:8d:f6:c5:19:a6:fb:f3:59:e4:d3:39:da:bb:be:e8:57:
a3:91:73:b4:8b:cf:d3:56:66:43:17:f8:5f:0c:98:cf:78:f7:
42:10:6a:b2:14:bc:95:5b:c7:3c:d8:96:5e:5a:44:c0:a6:59:
44:8b:3b:ca:07:7d:c5:e6:19:fa:2c:e7:0b:69:3e:cf:93:86:
d9:6f:e5:1b:f0:47:5a:f6:4c:e3:7d:07:65:bf:fd:52:e7:4b:
1e:b3:03:cc:5a:c4:1c:ee:65:8f:1d:a6:d0:db:ff:b8:30:11:
ea:fa:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:13:07 2025 by rpki-client