Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6D19E245D11F09C5A3EBADAE4EC9C.roa
File: 75F6D19E245D11F09C5A3EBADAE4EC9C.roa (raw, json)
Hash identifier: 4kPmM5s3QpXPddbIc8pO4OkWBmBWOgtB7Lh1Yz9aJSw=
Subject key identifier: F5:4A:C1:AB:C3:B5:DA:B7:16:91:28:9B:64:3E:A9:25:F8:DE:A6:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6D19E245D11F09C5A3EBADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 18:20:28 +0000
ROA not before: Mon 28 Apr 2025 18:20:24 +0000
ROA not after: Tue 28 Apr 2026 18:20:24 +0000
asID: 984
IP address blocks: 154.215.192.0/24 maxlen: 24
154.215.193.0/24 maxlen: 24
154.215.194.0/24 maxlen: 24
154.215.195.0/24 maxlen: 24
154.215.196.0/24 maxlen: 24
154.215.197.0/24 maxlen: 24
154.215.198.0/24 maxlen: 24
154.215.199.0/24 maxlen: 24
154.219.10.0/24 maxlen: 24
154.219.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97375 (0x17c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 18:20:24 2025 GMT
Not After : Apr 28 18:20:24 2026 GMT
Subject: CN=680fc6ec-929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:f2:4d:40:c4:91:13:22:ed:7c:ce:02:06:
78:c1:b0:7f:81:b0:19:01:00:5b:8f:c6:88:d4:36:
1e:bf:01:a0:90:33:8e:9f:40:9f:73:ab:5e:2b:ac:
9f:2b:8e:b2:32:86:61:3a:82:c1:93:ad:9f:4b:0b:
08:77:f5:dd:70:c0:68:57:62:86:ae:d1:df:54:1b:
9a:17:95:28:45:b8:db:c2:5f:ff:9c:6b:fc:20:68:
13:01:45:cd:aa:ac:fd:53:e5:51:35:cb:9d:fc:b6:
3e:70:6a:66:37:a4:53:f1:cc:7b:a4:b2:c8:05:18:
91:18:f0:89:6f:48:be:c8:ac:04:e0:72:a5:05:1f:
c1:be:2f:bf:c9:e2:a9:2a:90:19:70:5b:4d:66:66:
9f:e4:27:90:5f:5b:7e:90:0c:2d:46:a9:ce:4d:b7:
85:93:35:cb:dd:91:2f:c8:9e:f3:0c:b5:14:fc:33:
75:1a:b2:4a:00:e9:c1:03:68:49:63:82:4b:48:2f:
4b:31:e6:93:89:9a:14:5e:7d:07:87:13:68:49:b4:
17:4d:98:f1:ef:5c:b2:97:c8:22:38:1f:e3:e6:06:
25:d0:4f:25:ad:d4:c6:65:96:47:05:0d:92:c6:b2:
0c:74:a1:20:91:62:27:a2:24:23:6a:1e:ea:ef:53:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:C1:AB:C3:B5:DA:B7:16:91:28:9B:64:3E:A9:25:F8:DE:A6:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6D19E245D11F09C5A3EBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.192.0/21
154.219.10.0/23
Signature Algorithm: sha256WithRSAEncryption
75:04:aa:41:a4:f9:d8:de:5a:29:89:79:69:c4:75:12:89:71:
ad:c0:95:62:26:5c:5d:a6:c1:78:30:6a:d6:c3:c2:6d:26:1d:
9f:d1:21:38:d2:a8:b2:8a:1d:7c:3c:57:a7:fa:25:90:e0:c2:
a9:ff:8b:25:32:d2:e2:4b:a8:98:d0:af:ee:fe:e7:bc:56:3c:
9b:f5:70:7d:c4:e5:ab:43:bf:8c:75:3e:8d:e6:ee:06:58:02:
f7:4d:8f:6b:c9:f2:d8:b0:05:36:de:d6:ce:aa:8f:e1:61:7d:
59:d2:4e:5f:f4:b8:dc:e5:98:f1:3d:57:76:79:04:69:f1:17:
3e:63:69:e6:3e:6b:21:db:35:ed:ae:63:a4:e0:8c:74:cf:af:
d7:12:dc:7f:35:f4:ea:eb:6e:9c:00:aa:5d:3a:17:3b:42:f5:
96:be:d6:21:e0:5f:6d:b4:03:29:a3:d3:6a:fe:02:a2:53:ca:
cd:af:8f:55:c9:d4:b0:c9:06:0b:a0:66:3a:6f:1d:86:2d:b3:
4a:a5:53:d7:0e:6f:73:bd:70:b1:f6:d4:09:79:82:ab:30:15:
e2:24:d5:c6:26:b0:ea:3c:43:e9:19:e3:15:42:64:19:3a:6f:
fe:7b:78:87:8b:d4:a0:21:38:08:29:3f:4e:9e:31:50:02:ec:
eb:e0:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:15:39 2025 by rpki-client