Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619B534446A111F080B7B099DAE4EC9C.roa
File: 619B534446A111F080B7B099DAE4EC9C.roa (raw, json)
Hash identifier: MBp31C0jE4uaAo7HAW7pC5AjeRXMbPH9JmG9PCAEbA0=
Subject key identifier: 90:85:99:53:93:89:9D:2A:ED:3F:6F:BA:D9:41:8A:84:12:E6:F2:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619B534446A111F080B7B099DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:52:19 +0000
ROA not before: Wed 11 Jun 2025 08:52:14 +0000
ROA not after: Mon 16 Jun 2025 08:52:14 +0000
asID: 400619
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 08:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99836 (0x185fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:52:14 2025 GMT
Not After : Jun 16 08:52:14 2025 GMT
Subject: CN=684943c3-e8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:88:86:e5:fa:a9:96:57:ff:83:d7:70:9c:
cf:1e:18:55:ce:2f:36:8c:dd:1d:91:ca:5b:c7:bb:
09:24:44:49:e1:b5:c3:f8:79:8d:2d:c0:f7:36:4f:
1c:99:59:4c:46:ff:93:f2:e5:5d:f0:be:da:8b:f2:
47:28:68:fc:9f:ff:cb:60:85:01:f6:a1:da:36:05:
dd:ac:c5:a3:0f:94:e2:42:2d:98:14:df:61:91:65:
3a:5e:98:78:a2:b7:39:33:65:e9:26:6d:e6:ac:e9:
02:bf:86:22:40:2b:d3:d6:14:ff:28:92:c5:9e:d8:
b1:c4:0d:dd:dc:78:1b:8b:0d:46:5a:78:e5:2b:99:
be:54:b4:9a:70:52:88:ac:be:01:40:71:4f:11:54:
61:65:ad:2e:c7:33:98:af:ce:d6:c2:18:8d:83:22:
a9:7a:8a:d8:c8:57:01:94:99:80:61:db:83:b1:5c:
b4:a5:f8:3e:f3:5c:09:b0:9c:38:43:66:58:f3:fe:
89:2c:ab:28:89:75:62:08:29:c5:0b:56:e3:68:25:
7d:ba:84:b1:47:7e:3a:aa:ae:0e:d9:96:21:a8:4a:
6b:54:88:ff:0b:58:6c:0a:d7:0e:fa:de:d8:aa:f1:
ad:ac:81:2d:ba:a1:91:40:c8:ca:78:e6:8d:5a:1e:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:99:53:93:89:9D:2A:ED:3F:6F:BA:D9:41:8A:84:12:E6:F2:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619B534446A111F080B7B099DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:c3:05:fe:ee:b8:c0:a8:a8:c5:a0:21:e2:42:3d:ba:95:75:
1b:9f:9b:76:7b:e9:da:ac:17:ee:4b:3a:43:2b:6b:f4:a2:81:
47:10:c9:5a:90:57:24:4e:28:d4:f2:2b:0b:ff:d6:c0:c2:32:
17:57:1e:b2:ac:aa:5c:22:9b:42:24:82:a8:a1:39:9c:a7:2d:
79:8d:a9:84:04:7a:f0:f8:06:90:bc:26:59:76:74:99:a6:d8:
14:0d:07:96:20:86:5e:81:1c:cc:5e:fd:d9:2f:80:71:0b:23:
42:2f:00:c8:0a:b3:62:63:a6:6e:48:ce:f2:b2:23:ec:6f:40:
2e:32:2b:26:cc:ab:58:84:51:6f:3f:78:75:c9:33:d8:40:38:
de:bb:0f:aa:ce:d4:03:68:77:29:0c:2c:38:b4:ac:13:2a:18:
ad:03:80:04:6a:62:96:56:59:bb:24:b0:42:c1:d4:0a:f7:9e:
80:56:04:f9:20:ce:15:af:18:3d:ef:ee:9d:8f:45:e4:26:03:
74:cb:f9:16:30:54:fc:73:b9:71:ca:61:ef:6d:78:c0:42:b4:
a0:28:95:1a:c0:a6:42:21:52:ed:ac:28:60:d6:d1:37:49:96:
c4:1b:a6:b2:55:06:9a:74:0a:3c:5a:80:ef:4d:92:1c:63:2c:
19:ce:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:14:51 2025 by rpki-client