Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59991CE519611F084CE8E85DAE4EC9C.roa
File: E59991CE519611F084CE8E85DAE4EC9C.roa (raw, json)
Hash identifier: bA9yx06vah1PBG9qXg3G7u2mWLwCjRFhDu/pVbtYpLQ=
Subject key identifier: 01:B2:20:2B:4C:6F:CB:F9:99:8D:97:9E:B3:7F:A0:6D:99:DF:75:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59991CE519611F084CE8E85DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:34:59 +0000
ROA not before: Wed 25 Jun 2025 07:34:54 +0000
ROA not after: Thu 31 Jul 2025 07:34:54 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100589 (0x188ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:34:54 2025 GMT
Not After : Jul 31 07:34:54 2025 GMT
Subject: CN=685ba6a3-f63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:b7:87:02:c9:c4:d1:4d:d5:72:65:96:a9:
2b:c0:d9:e0:8f:48:d6:5c:2c:e5:23:30:56:4d:ad:
a0:a2:2f:99:b5:5c:08:d8:8a:e1:5c:e2:86:0f:72:
df:d1:29:ef:fd:87:73:80:6b:61:1a:d0:4e:1d:fd:
9c:ee:bc:98:8b:05:f8:ac:09:47:f7:88:8d:75:b5:
55:f2:32:d3:6c:47:ba:75:51:fc:77:0e:7d:98:f5:
a7:60:fc:29:0e:6e:c4:25:23:2b:c8:70:42:7f:f4:
79:fe:80:a0:56:41:76:db:1a:94:3b:6f:42:33:28:
b6:e4:2c:7b:75:9d:58:8f:2c:4c:d3:3b:5c:b7:b2:
88:f6:4a:ce:e6:b6:27:81:c6:56:a8:c5:98:15:21:
31:8c:cf:99:cf:98:9c:32:cb:bf:88:7a:a6:d7:a1:
28:d0:58:40:aa:77:5d:4a:91:06:57:d0:5f:28:48:
bd:db:1a:01:6b:09:40:6e:33:6e:cc:53:e7:5d:87:
47:0d:a2:bc:2c:0a:48:96:7e:a5:91:b9:58:7a:17:
0d:e7:5f:63:29:53:91:14:a0:d9:13:92:18:df:ca:
3f:fa:e0:4f:97:5b:2a:50:69:da:86:85:9c:90:cd:
b5:e8:cf:6a:39:2f:b6:d1:ff:84:7b:36:dd:8f:34:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:20:2B:4C:6F:CB:F9:99:8D:97:9E:B3:7F:A0:6D:99:DF:75:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59991CE519611F084CE8E85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:aa:d4:72:9f:08:bc:41:9d:01:80:75:b4:6d:02:39:c4:22:
ba:da:78:83:b9:4c:4d:06:2d:f0:af:29:77:a6:de:e5:50:2a:
8b:16:46:c7:01:24:61:73:16:ec:5e:fa:21:31:8c:82:a2:7e:
6b:2f:c3:16:c0:2d:8a:a6:27:c9:19:bd:41:f4:18:a3:80:90:
ca:9d:b4:26:4f:a9:0b:29:3b:5d:aa:e9:3f:c2:1f:79:09:e7:
dd:7e:ad:69:6f:43:b0:6d:78:77:6a:94:02:87:44:8a:7f:06:
ef:5f:f4:42:28:08:96:e8:bc:6b:1b:17:6b:36:3e:88:f2:b5:
91:9e:ca:26:1f:d6:19:f6:2d:f9:cd:0b:80:96:b7:78:19:03:
2e:3e:be:1b:a6:dd:80:16:13:56:29:fc:ac:37:34:e3:0c:f1:
19:6e:4d:f2:0b:39:c1:f7:6d:94:5c:69:05:0f:c8:62:c0:27:
3f:fa:2e:a5:4e:56:38:7a:a8:e1:62:14:15:11:58:f6:7d:69:
2d:e3:9a:06:dd:ae:34:3f:95:be:af:e7:bc:cf:42:91:17:f4:
fe:69:f6:45:90:02:85:75:fa:d2:8a:5e:78:5c:32:29:5f:3b:
f5:00:69:df:b8:0d:43:ef:5c:c4:5e:c5:0e:71:48:31:64:00:
d2:53:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:27:53 2025 by rpki-client