Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/4FC9F8B0582A11F0926B49BCDAE4EC9C.roa
File: 4FC9F8B0582A11F0926B49BCDAE4EC9C.roa (raw, json)
Hash identifier: cJA24+0QFZHgLG+qNh475FbEtKunGho9e7RUrnJHRT4=
Subject key identifier: DB:68:BE:0D:61:32:88:74:39:C4:C2:75:70:7F:C7:BD:43:E5:2F:1B
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 039D
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/4FC9F8B0582A11F0926B49BCDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 16:25:20 +0000
ROA not before: Thu 03 Jul 2025 16:25:16 +0000
ROA not after: Tue 31 Dec 2030 16:25:16 +0000
asID: 15964
IP address blocks: 154.72.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 3 16:25:16 2025 GMT
Not After : Dec 31 16:25:16 2030 GMT
Subject: CN=6866aef0-0c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:99:04:25:bb:7e:68:93:fe:92:d5:90:c6:
7c:43:15:da:74:19:96:7e:8c:e8:db:ea:51:88:4c:
23:77:f2:1d:b5:43:d0:f8:4c:6b:bb:aa:58:18:48:
70:cb:db:3e:9d:c3:ba:52:96:1c:fa:2f:e3:7b:e2:
2d:1a:f4:d7:44:a6:24:e8:aa:3b:11:1a:dd:93:61:
f8:59:62:42:da:a7:dc:90:79:5b:66:90:b1:01:b9:
17:2d:3b:23:97:ec:d8:99:e5:c0:9c:92:95:8d:37:
2b:4d:0f:24:ae:ba:34:7a:f9:1d:5c:9a:dc:bd:68:
a8:b5:2b:44:23:73:60:83:20:aa:51:3e:f5:88:7d:
59:6e:a8:2d:40:c7:d7:5b:17:03:61:56:41:c3:f3:
95:a2:73:8e:21:95:89:fc:5d:1d:f1:a5:a3:5e:93:
97:bd:c6:ce:17:a3:d6:54:6f:48:5a:2c:d2:66:94:
e0:3b:51:7a:8d:1b:7c:99:a6:78:a2:65:f6:49:17:
c0:55:8a:be:d4:dc:36:46:2f:05:35:f2:51:01:08:
d3:e4:94:70:f3:a5:c5:ef:ad:68:f2:ed:7c:50:1b:
ff:69:78:3c:14:24:96:88:39:3d:f0:d9:98:de:f3:
21:ab:b1:40:c1:d3:3c:59:71:28:a6:2e:ef:97:65:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:BE:0D:61:32:88:74:39:C4:C2:75:70:7F:C7:BD:43:E5:2F:1B
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/4FC9F8B0582A11F0926B49BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.168.0/23
Signature Algorithm: sha256WithRSAEncryption
00:bb:a7:b4:45:f7:f1:e7:f3:d7:76:f9:8f:65:9d:cc:9c:69:
77:a2:f7:7b:03:2f:e6:9c:0b:50:a6:fa:c3:9f:9a:19:fa:e3:
ce:51:45:ee:73:23:51:2e:1d:c4:29:07:0a:83:27:1a:30:cc:
75:00:53:81:68:b5:e1:65:f1:d4:d3:d8:9e:4a:33:d2:63:6d:
e7:04:60:52:dd:1e:a8:2a:8f:9a:18:5b:f7:f9:ed:41:ff:ba:
a9:8d:af:24:cf:cc:1f:4f:cc:79:fd:14:9a:b0:11:74:03:ca:
66:75:b9:6f:6e:45:96:09:cc:23:09:b6:db:4e:1f:7e:91:14:
bc:70:73:5d:dc:44:77:1a:b4:b1:f8:06:1a:ea:16:d9:94:15:
91:eb:93:cd:fd:92:a1:79:30:f8:af:27:b8:e8:ca:aa:1b:ec:
b5:d3:e8:1c:2e:d6:ca:a4:f7:1a:08:af:4c:67:8f:8f:c6:df:
cc:4f:5a:c0:5f:a2:04:9c:2f:63:f0:a6:42:6b:f8:76:4a:85:
24:3f:42:58:01:fc:09:2f:9c:91:ff:b0:a9:1e:f4:23:c7:f8:
09:f8:a2:de:e8:07:b0:40:58:2b:67:8a:74:ad:17:1b:dd:2f:
7a:19:55:67:45:6a:87:83:dc:d7:a6:75:57:c6:29:71:52:08:
1d:13:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 05:59:58 2025 by rpki-client