Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76BEF02490111F08D0EDB9FDAE4EC9C.roa
File: F76BEF02490111F08D0EDB9FDAE4EC9C.roa (raw, json)
Hash identifier: 4oMa8lWCkQI4LcQcR/LkGyZN1OwBUFyWWeoLvUP+aFM=
Subject key identifier: 24:A1:D7:10:DF:F4:AB:14:49:1D:71:D7:4A:8E:54:E9:78:24:EC:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01867C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76BEF02490111F08D0EDB9FDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:28:45 +0000
ROA not before: Sat 14 Jun 2025 09:27:53 +0000
ROA not after: Mon 23 Jun 2025 09:27:53 +0000
asID: 398823
IP address blocks: 154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99964 (0x1867c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:27:53 2025 GMT
Not After : Jun 23 09:27:53 2025 GMT
Subject: CN=684d40cd-14c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:65:5d:05:fc:b9:d0:f3:91:9d:0f:fd:28:
8a:c0:ae:9b:98:85:31:d9:f4:21:9e:69:59:f5:ec:
73:fc:6c:83:35:57:5f:f9:fd:76:0a:30:49:b3:3c:
0f:99:c9:77:c8:f6:5f:85:f9:10:f3:48:7d:ed:96:
bc:a9:11:75:a4:3a:ec:51:f6:46:ab:bd:67:5b:1a:
09:2e:74:a4:e3:7d:04:e0:61:f8:12:82:a8:67:37:
44:e4:f6:72:9c:36:2c:d7:c8:c5:b7:68:2e:79:b9:
d9:69:51:de:d9:ed:a9:04:56:b3:e7:ba:03:a7:67:
4d:ff:31:55:11:3b:c1:c4:a9:e4:21:01:4a:63:f2:
95:cb:d4:2e:1a:a4:12:8d:d9:16:ab:90:cf:8a:fb:
5e:10:53:4d:21:c5:1d:82:b9:d2:fb:bb:cd:7a:97:
a5:97:fd:65:ff:f9:23:bb:98:ec:09:3f:36:95:80:
ac:9f:25:72:e6:54:bc:d8:88:ee:d0:6c:69:6f:91:
d0:e8:1b:25:39:e6:a1:59:da:28:14:79:0f:8d:b0:
ab:08:63:aa:81:cc:eb:f2:d4:62:96:97:ee:63:d3:
e9:42:a9:30:cf:a7:76:a6:10:e8:fd:26:f7:af:b6:
bb:8c:24:a6:ba:43:5c:74:88:f3:99:61:e1:95:89:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:D7:10:DF:F4:AB:14:49:1D:71:D7:4A:8E:54:E9:78:24:EC:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76BEF02490111F08D0EDB9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c4:8b:5a:06:08:7d:50:5d:95:61:77:68:df:d4:f7:de:a4:db:
44:4b:cf:a1:90:f8:c6:11:da:5e:6a:27:7e:17:ae:e3:0b:3c:
bc:c4:1b:a0:10:ce:1d:1c:2e:16:62:1e:4c:b9:a0:32:d5:a5:
fe:c0:df:6f:3f:96:e0:bd:ae:bb:d4:7c:2c:20:df:a1:b9:ec:
b6:a7:31:2a:1d:dc:ad:0d:4c:74:61:83:78:8a:c6:ff:31:76:
93:2f:f3:68:19:b1:83:91:5f:ca:61:c9:02:f9:82:54:2a:6e:
9a:d0:0b:f6:e5:dc:63:39:0e:7c:85:18:ad:e7:c8:df:2b:dc:
a1:29:73:55:06:b0:73:ff:20:6c:b2:27:c1:af:35:49:d7:9f:
aa:47:df:fd:68:39:03:6e:de:21:4e:6c:67:51:4e:32:1f:71:
21:f5:66:90:d2:8d:59:ca:2b:f8:5f:67:1f:bb:28:95:5a:32:
84:7f:f9:d9:55:93:ca:67:95:88:dd:1d:2a:af:b4:9b:c9:5a:
2e:77:cc:f5:6b:23:d0:fd:b2:ab:09:0c:73:63:9a:61:44:ae:
84:a4:25:1b:87:57:3b:1b:87:f9:e5:d5:b6:79:ab:6c:5b:0b:
fe:08:93:1f:56:b5:8c:d5:69:ca:da:81:0f:87:91:c9:2d:10:
a7:b3:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:46:37 2025 by rpki-client