Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BD6070575E11F09A49CB8CDAE4EC9C.roa
File: 24BD6070575E11F09A49CB8CDAE4EC9C.roa (raw, json)
Hash identifier: QiFDvLgL/N3d9JLQOjyTNeKzUPV23JPPP7ZtTLsDcoQ=
Subject key identifier: 71:54:A3:F6:28:51:87:13:94:EB:80:D8:78:AF:D8:4B:E1:07:E4:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BD6070575E11F09A49CB8CDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 16:03:51 +0000
ROA not before: Wed 02 Jul 2025 16:03:46 +0000
ROA not after: Thu 04 Sep 2025 16:03:46 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100836 (0x189e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 16:03:46 2025 GMT
Not After : Sep 4 16:03:46 2025 GMT
Subject: CN=68655867-3256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:66:99:45:84:ad:26:d9:7d:1d:c1:3e:91:
4d:86:90:16:83:31:d2:d8:c4:46:fe:4f:18:89:81:
79:72:7b:54:d0:13:42:9c:23:43:80:2b:12:a1:12:
c8:6b:91:ff:96:be:9f:3e:b0:ef:80:b0:0d:ea:91:
0e:cd:9d:bf:cf:30:9f:d3:6c:d2:48:b7:06:ac:1b:
ac:7f:54:1f:09:6a:2a:60:5d:0e:7b:72:73:6b:64:
11:a1:3e:85:be:3a:21:58:3f:6a:e6:28:5d:44:18:
c5:ac:04:ba:f1:14:f3:44:91:77:7e:cc:ed:37:20:
84:c9:86:15:ad:bd:b6:70:1f:09:39:03:7b:94:cd:
87:7f:b9:02:d6:ba:de:7c:ce:11:99:bb:ad:4d:21:
cf:9c:50:e9:42:14:03:e8:c6:92:b9:8d:49:c6:42:
68:34:01:39:b6:ff:84:0a:56:ad:da:7e:6e:df:dd:
94:73:b3:07:13:8c:9b:0d:75:08:ad:ef:7e:f5:f6:
1f:96:52:48:24:26:a8:e0:fc:63:d6:a5:02:f1:7d:
f4:d1:a1:a6:fa:92:e6:9d:55:b1:74:4b:50:b6:0b:
ff:23:62:50:3c:bd:56:5f:24:06:87:a4:ab:ea:20:
18:9f:f4:a5:e2:9c:4e:3a:eb:dd:e2:64:a8:23:6b:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:A3:F6:28:51:87:13:94:EB:80:D8:78:AF:D8:4B:E1:07:E4:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BD6070575E11F09A49CB8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:15:6c:c6:5e:97:6a:70:e0:6f:7d:71:f9:95:82:12:8e:e1:
b5:1f:25:1c:6a:d0:e3:31:96:0d:f4:d0:40:6b:03:a9:1f:23:
2c:5f:67:af:22:42:92:a7:e6:02:f5:8f:cd:47:35:d4:d4:2b:
bf:12:4e:62:bd:62:d3:a0:41:1a:6f:f3:76:78:20:0d:61:f4:
d6:08:fd:d7:4d:e6:c6:40:65:7c:7e:ec:f7:8c:f9:25:0a:f3:
d8:0e:d4:20:f7:d5:54:bd:5d:d4:ba:23:93:51:f7:a5:ad:f9:
76:14:e0:73:ce:fa:c6:aa:a8:fc:04:a6:dd:78:f7:8c:6d:5b:
c0:a9:01:c1:b6:48:da:2c:88:95:3f:f9:d5:a1:81:c8:f8:97:
07:c8:9a:85:c0:d1:63:99:f0:cc:74:0f:3a:8c:a6:8f:02:79:
d8:18:38:c7:90:c1:70:68:75:c8:87:e7:b8:8d:d5:5b:ac:7c:
06:4b:2f:1e:db:b5:26:0c:b3:c2:06:10:2c:6f:dc:fa:bc:77:
17:1e:d9:8d:b8:5a:cc:62:65:e8:e7:af:24:31:50:6c:b0:1b:
7c:e7:54:60:74:cc:dd:19:89:ee:7f:80:20:d2:30:74:61:f7:
f8:85:f9:e9:25:81:c4:cc:81:a1:3e:26:e8:ff:72:c9:b6:0c:
bd:9a:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:08:20 2025 by rpki-client