Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E25DB6441EE11F080DFD78ADAE4EC9C.roa
File: 1E25DB6441EE11F080DFD78ADAE4EC9C.roa (raw, json)
Hash identifier: ANvXZy15eenpkgZzRz9secs+abUqKdfQ1QaKEWEeRig=
Subject key identifier: 34:BD:AB:94:83:7E:CF:9F:11:FA:2A:89:59:FD:2F:D7:21:C1:46:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E25DB6441EE11F080DFD78ADAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:19:02 +0000
ROA not before: Thu 05 Jun 2025 09:18:57 +0000
ROA not after: Sat 26 Jul 2025 09:18:57 +0000
asID: 4760
IP address blocks: 154.88.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99574 (0x184f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:18:57 2025 GMT
Not After : Jul 26 09:18:57 2025 GMT
Subject: CN=68416105-9f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:18:3e:06:97:2d:c6:2c:a3:1c:49:23:e6:
c6:bb:b6:2b:f3:68:1a:74:e6:80:3a:15:e8:c2:05:
27:23:50:95:82:51:7b:52:e2:65:42:3d:dc:b4:cf:
92:dd:23:5e:90:c3:09:09:93:1d:15:0e:d3:4f:f8:
4c:1c:75:7e:52:d4:93:2e:5b:c5:37:31:ed:b7:78:
e2:bf:28:89:17:f1:af:55:c7:b0:0c:4b:49:0b:91:
fb:34:2f:3a:72:ea:64:16:5a:2c:60:09:d2:58:09:
7f:e0:93:5b:fb:d9:84:30:a1:0a:d4:84:67:60:fd:
83:f7:cc:30:98:23:19:a9:b5:74:1e:67:62:f6:dd:
9c:90:59:29:34:2f:f0:16:de:6f:95:c9:ff:cb:4b:
82:7e:69:45:f8:c9:f6:ff:8f:64:72:46:25:92:51:
04:f9:60:20:4f:e5:d9:9d:91:9d:f8:eb:4d:c6:1b:
67:ca:1b:40:b6:8d:92:22:cb:89:29:0d:97:7e:ca:
7f:3a:c4:4b:2f:c0:91:93:92:42:34:48:51:74:ce:
16:7e:cd:ad:a5:fd:e7:df:9b:db:ad:ee:96:8f:62:
f6:d2:80:23:9f:4b:54:61:19:cd:5f:36:ef:fe:68:
7c:67:60:1a:ed:f8:58:1e:c0:a5:bc:cc:45:0b:cd:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:AB:94:83:7E:CF:9F:11:FA:2A:89:59:FD:2F:D7:21:C1:46:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E25DB6441EE11F080DFD78ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:2f:84:83:a0:9c:ba:81:68:47:67:5b:1c:2e:ea:53:e4:0a:
a3:19:77:a2:02:cf:a4:eb:a5:b1:a8:cf:c2:98:ed:97:1a:dc:
e3:05:f0:6a:c3:31:9f:44:10:e4:5f:2c:69:1f:aa:d7:74:b4:
2f:8b:8c:6f:18:ff:2b:5f:0b:ef:dc:59:e7:e2:a9:bb:15:c2:
1f:57:16:00:c8:fd:c8:75:7e:49:3c:94:47:17:3a:b5:e2:d4:
64:c8:49:67:65:44:b1:82:fc:24:cc:9f:59:79:9c:b7:fe:68:
3d:20:42:5c:6d:1c:ea:cb:49:f9:74:6b:6d:90:1a:5d:80:98:
58:49:40:14:c7:5f:94:c9:1d:00:4e:3a:0c:56:b8:a4:bf:37:
b0:17:a2:07:aa:12:b1:51:e2:e3:7d:27:4d:6b:31:bb:cc:06:
06:82:cf:b0:8c:7c:39:f9:63:2b:14:f6:da:e1:06:95:be:06:
4c:81:a2:13:8f:6e:e9:dc:27:80:39:ed:bb:cd:c9:6b:3c:c3:
a1:df:84:d8:c2:d7:89:ae:97:5f:c4:38:03:9a:a1:3d:97:7f:
d3:d9:22:da:ad:4d:aa:7e:8c:30:23:f4:62:fe:a9:6f:96:42:
07:00:65:63:5a:cb:63:78:e0:f4:c0:8e:11:3a:00:ee:0c:fb:
0d:27:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:09:59 2025 by rpki-client