Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5F59381C737E11F0AE9654A5DAE4EC9C.roa
File: 5F59381C737E11F0AE9654A5DAE4EC9C.roa (raw, json)
Hash identifier: +eQGH4JWW6JBqSSbTejgVwja+jvovxrHQh1cSQUlKf8=
Subject key identifier: 37:F3:EC:C7:36:C3:6F:C1:CF:FA:78:98:52:46:28:B3:30:82:2E:B6
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 03D2
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5F59381C737E11F0AE9654A5DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 11:05:06 +0000
ROA not before: Thu 07 Aug 2025 11:05:01 +0000
ROA not after: Tue 31 Dec 2030 11:05:01 +0000
asID: 15964
IP address blocks: 197.159.1.0/24 maxlen: 24
197.159.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 03:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Aug 7 11:05:01 2025 GMT
Not After : Dec 31 11:05:01 2030 GMT
Subject: CN=68948861-f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:7a:be:2d:61:55:84:62:70:33:93:c3:fe:
b0:00:ee:c9:bf:be:c5:bf:d9:e7:6b:99:e4:2e:0c:
6e:9b:91:06:4f:fb:ca:c0:1c:6a:dd:83:8d:1c:bb:
2e:4f:b9:c6:cf:17:b0:76:68:4a:1d:af:b5:50:5d:
1e:28:fb:7e:a4:45:22:00:8d:b4:ab:ae:85:83:29:
5c:bd:69:ff:ea:a0:77:05:f0:ad:93:2f:5f:64:78:
18:77:c0:98:00:40:88:5b:b6:88:31:2f:26:8c:e7:
2d:35:7d:1d:05:ff:c6:7b:46:5f:4a:a3:24:f6:6b:
9e:71:21:71:13:6c:1c:bb:49:de:25:43:5a:bc:f6:
bb:be:2b:5d:b8:a8:12:68:fd:e8:cd:bf:59:c3:e7:
dd:0c:9a:e5:dc:77:05:df:0e:04:0d:20:b9:df:15:
61:f3:f5:8d:51:77:9f:be:ee:52:c9:97:a1:27:7f:
4e:a3:72:f4:17:10:d5:28:d2:e6:bd:f2:ec:89:31:
a2:f6:04:44:72:d9:a6:9f:9c:c3:a4:01:c7:f9:ef:
aa:62:91:0c:c1:2b:76:0d:3f:ee:86:96:3b:75:8c:
d0:7c:c2:7b:28:a9:0d:3c:b3:f3:8d:62:65:bb:60:
36:11:c1:4d:f4:f4:e5:93:db:97:6f:84:67:16:fd:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:EC:C7:36:C3:6F:C1:CF:FA:78:98:52:46:28:B3:30:82:2E:B6
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5F59381C737E11F0AE9654A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.159.1.0-197.159.2.255
Signature Algorithm: sha256WithRSAEncryption
6a:43:39:1c:dd:6b:d4:94:4e:a0:ad:9b:a4:bc:57:a1:40:4d:
8a:53:8b:95:6b:a2:72:16:8c:28:4c:8a:a5:f4:3a:85:c4:e1:
5e:7e:0a:fa:1e:58:e7:34:91:1f:20:83:45:72:cd:05:6d:65:
04:0a:a3:5b:7f:01:f9:3a:3a:a4:2c:8f:5c:3f:27:35:03:46:
b9:2d:4f:1d:5d:40:7f:05:97:b9:5b:4d:45:a7:47:38:7a:4b:
e5:a0:f0:79:f8:a1:3e:be:0c:4b:7c:bd:f0:6f:02:0c:04:83:
5d:67:28:1b:2b:af:fc:f1:56:63:e0:83:d2:d0:fe:2a:93:6e:
a3:83:55:fa:b9:49:d7:27:aa:4e:e5:a3:66:32:2c:d3:36:b9:
3e:a0:89:9d:cc:94:2f:90:f4:c2:42:e7:98:a2:75:51:87:68:
a7:a5:fb:6a:9f:17:04:ff:9f:e9:f4:7e:c2:67:cb:7e:4c:e1:
ff:0e:54:ca:4b:3d:05:5f:6b:31:1e:45:9d:8f:6e:02:e8:0d:
56:e5:5d:af:3b:d5:2a:87:6f:3f:17:ab:78:ef:6e:f4:f6:f9:
63:20:bd:20:6d:49:3b:29:4b:b1:ee:d4:6e:ee:20:58:93:0b:
a9:ef:ef:fd:e2:7c:d5:ec:62:01:69:2a:25:89:8e:cd:c4:f3:
9c:89:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:06:28 2025 by rpki-client