Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1848D740490111F090976A9ADAE4EC9C.roa
File: 1848D740490111F090976A9ADAE4EC9C.roa (raw, json)
Hash identifier: JaqSphgxS6NDPrJZCBNsVMEi3xUGlB+jNZGEXPs525o=
Subject key identifier: 78:C4:CA:98:00:8A:22:68:EF:F1:9B:4E:5A:75:03:A4:DB:04:46:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01867A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1848D740490111F090976A9ADAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:22:30 +0000
ROA not before: Sat 14 Jun 2025 09:22:26 +0000
ROA not after: Mon 23 Jun 2025 09:22:26 +0000
asID: 398478
IP address blocks: 154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99962 (0x1867a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:22:26 2025 GMT
Not After : Jun 23 09:22:26 2025 GMT
Subject: CN=684d3f56-2e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:48:04:70:bb:48:00:4b:ca:b5:30:48:b7:
dc:28:54:3c:ff:c6:93:4b:ad:33:61:00:02:aa:e1:
31:b1:73:19:c5:e4:fd:72:c8:fc:20:14:47:0d:82:
c9:c2:af:19:87:68:bd:c2:42:32:ed:95:8e:63:b9:
80:8b:fa:4d:16:5e:15:d4:c4:15:d0:9b:77:6a:05:
28:84:c5:f0:14:47:d4:a4:2a:f1:b7:50:97:00:46:
d7:0d:9d:1d:af:b5:a3:c9:cb:77:02:8c:2f:eb:12:
64:4f:51:05:a2:af:3d:ed:55:a7:82:1b:f3:42:6f:
7d:ef:23:e4:f7:fe:97:94:ca:bf:d6:30:34:0c:c8:
52:99:6d:5e:aa:7e:74:c5:60:9d:78:0e:b8:9d:15:
9a:cc:9a:db:57:7c:87:91:8b:b1:65:90:c7:74:c6:
72:cc:6c:d5:be:e0:00:f4:da:52:01:8a:f2:1d:33:
c1:d2:ae:19:b9:94:4c:bb:a8:3a:8c:dd:d5:0f:da:
4d:3e:c2:1f:f4:09:5b:08:31:29:d6:4c:b9:4b:d9:
0f:73:d4:c9:6c:f8:1f:a7:20:32:bb:6f:f5:46:2f:
58:2b:96:27:6b:03:b7:e1:73:8f:89:72:06:42:c3:
96:1e:75:97:e3:89:20:23:eb:b2:90:4b:fa:05:80:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:CA:98:00:8A:22:68:EF:F1:9B:4E:5A:75:03:A4:DB:04:46:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1848D740490111F090976A9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:c7:c0:df:aa:ff:d6:b9:96:0b:52:31:fe:68:00:09:15:f7:
39:50:09:e0:60:ec:fb:99:e5:bd:70:6b:cb:96:a0:61:d4:55:
9f:3b:d9:07:31:92:fd:d0:5a:e7:8f:c3:56:01:55:6e:98:43:
74:13:40:4f:a2:19:01:2d:44:e2:68:1f:c5:d3:fa:8d:76:cf:
01:62:8b:df:cb:b7:cb:ad:ab:e7:7c:59:29:85:e7:63:7f:18:
f9:66:48:fa:37:bb:d7:20:81:cc:45:62:5d:b3:2a:d4:62:66:
de:78:76:3b:f1:89:d2:f5:86:dd:f2:5d:ef:dc:4e:ff:6e:e4:
c3:af:78:ba:24:33:75:20:33:7d:82:fe:37:60:3a:3d:17:0a:
c2:49:7a:e7:99:f0:a9:1a:51:2e:a2:56:6d:9c:f4:a6:46:4f:
78:51:cc:33:fc:54:43:12:e1:c0:92:97:0c:b0:18:4f:19:34:
11:b6:6b:9f:df:93:ae:be:45:55:ce:01:33:5c:14:f0:07:43:
c1:c7:6f:e8:18:6c:3d:81:39:3e:41:a4:40:ba:ef:1f:e4:a0:
78:c2:7b:c0:e4:29:28:e0:35:1b:ea:57:2f:d3:fc:9e:78:b5:
1e:ed:76:32:61:7f:08:6b:13:57:51:67:9b:fa:da:df:2f:8c:
b9:a7:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:04:58 2025 by rpki-client