Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF48B6519811F0A069AF8EDAE4EC9C.roa
File: 75AF48B6519811F0A069AF8EDAE4EC9C.roa (raw, json)
Hash identifier: g1m6liB9fjt4BYrEwJHVbHnL5HmhCkZ8qv7copSZ680=
Subject key identifier: 54:BB:65:B9:AC:46:11:8F:43:47:EE:AC:6B:9B:9E:5A:57:7C:C5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF48B6519811F0A069AF8EDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:46:10 +0000
ROA not before: Wed 25 Jun 2025 07:46:05 +0000
ROA not after: Thu 31 Jul 2025 07:46:05 +0000
asID: 20473
IP address blocks: 154.81.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100593 (0x188f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:46:05 2025 GMT
Not After : Jul 31 07:46:05 2025 GMT
Subject: CN=685ba942-11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:2a:e8:39:f7:ce:d5:d0:6e:f6:5d:e7:cc:
5b:c5:4a:a4:54:b7:3d:a6:1c:95:8c:11:6f:39:8a:
c7:7c:b6:64:b7:82:80:fb:62:fa:e0:6e:da:e4:8e:
6d:51:d5:61:03:50:c1:61:cf:c8:a7:4b:c9:21:05:
ec:98:e6:dc:d2:48:55:de:77:86:03:7f:3b:47:75:
da:2e:7e:14:06:80:c3:c1:cc:5a:7c:15:64:02:53:
34:f5:72:5c:1c:50:70:28:0c:b8:26:24:e3:e0:66:
a8:83:ce:70:c4:c2:71:fd:e6:9f:8d:f2:03:b9:85:
eb:ac:56:da:95:70:05:b7:29:23:0c:92:01:08:6f:
bb:a2:b2:d4:80:5b:bd:b9:6d:4d:f2:4d:f0:e0:fa:
12:58:b8:8b:74:33:96:ef:e8:b7:4d:7b:8f:a6:0a:
bd:4b:9f:56:5f:7c:16:bb:84:d7:e4:69:47:f2:39:
f3:ef:3d:57:17:d0:8b:c8:3e:be:d0:2c:e9:86:29:
0f:b7:70:2b:9e:17:8b:bb:c1:a0:88:e3:e1:95:b4:
74:ac:86:3b:ac:a2:6e:96:d9:50:b0:6f:94:2e:21:
e6:3b:5f:df:01:93:48:fa:da:fc:7b:94:49:5a:bf:
aa:58:d5:82:55:0b:34:ac:eb:87:d0:a7:2a:62:21:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:65:B9:AC:46:11:8F:43:47:EE:AC:6B:9B:9E:5A:57:7C:C5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF48B6519811F0A069AF8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6a:ce:0e:69:9a:b0:66:b4:62:cb:99:83:90:77:b9:e3:c0:
dd:b5:9e:3e:73:5a:85:13:d2:67:0a:6e:8e:50:5a:c2:a5:a5:
ee:dd:cb:17:3b:13:92:98:5b:54:56:17:06:38:87:1b:09:90:
78:94:d1:6c:cd:aa:4d:65:de:54:87:a0:7f:cf:4f:4f:22:81:
21:c4:80:f2:b9:1a:04:34:53:8a:29:50:63:33:f9:aa:ba:52:
3f:6b:fd:74:b2:d0:6a:af:78:89:dc:cd:01:12:08:c0:8f:05:
4e:c8:3d:a0:c4:e3:c3:4f:20:d2:b0:e5:d9:d3:60:0b:d4:44:
6b:ee:46:50:b9:d9:06:fb:d4:7a:46:ec:b9:1e:64:96:43:52:
83:98:77:87:f6:a2:d0:96:58:91:6e:4a:9c:14:b1:8d:9a:6a:
23:48:3b:ad:45:ce:46:ac:c8:e4:80:11:ab:bc:a1:6e:01:4c:
81:3e:2f:c0:10:49:57:a6:f6:53:06:8b:7a:06:0a:e7:16:64:
f1:1f:27:07:e7:69:9d:24:fd:c5:14:d9:23:5c:39:a9:24:86:
db:b2:78:83:b9:4b:7f:93:20:5d:4c:b4:6e:d6:e4:2a:62:cd:
9a:9e:77:2f:85:35:5a:9d:df:5d:07:63:36:1a:76:9f:8d:32:
d3:62:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:49 2025 by rpki-client