Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/88EE59C2520511F0838F9DC4DAE4EC9C.roa
File: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (raw, json)
Hash identifier: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=
Subject key identifier: 7A:E3:07:9C:FA:84:C6:45:48:C5:E6:69:00:B6:17:F9:3B:BF:54:1F
Certificate issuer: /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial: 0E9F
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/88EE59C2520511F0838F9DC4DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 20:46:58 +0000
ROA not before: Wed 25 Jun 2025 20:46:53 +0000
ROA not after: Tue 25 Jun 2030 20:46:53 +0000
asID: 37271
IP address blocks: 41.78.188.0/22 maxlen: 22
197.157.64.0/19 maxlen: 19
2c0f:fa90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3743 (0xe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Validity
Not Before: Jun 25 20:46:53 2025 GMT
Not After : Jun 25 20:46:53 2030 GMT
Subject: CN=685c6042-be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:c6:e6:6c:c6:f5:cb:07:99:e2:62:f4:9f:
4d:b7:72:55:06:9a:79:36:f3:22:59:27:4a:be:14:
bd:80:51:4b:89:b9:7b:e4:71:c5:a0:8c:9a:b9:71:
95:78:72:93:fe:8c:e7:ac:4f:e1:6b:5e:d6:39:80:
b0:e5:73:a8:fd:da:bf:4f:4d:84:92:a6:ee:a5:42:
a2:70:d3:d4:33:78:58:0e:30:75:7c:89:ae:f4:3a:
05:12:6c:32:c5:98:b1:90:06:8f:ba:92:66:34:71:
e3:1d:55:da:b5:79:20:6a:e6:24:d4:b2:84:e0:e0:
9a:24:f2:a3:dc:d0:39:48:94:7d:d7:89:8a:db:1b:
b3:75:4e:01:1c:68:20:5a:1b:e4:bf:90:da:7f:0b:
38:be:c7:0b:8a:eb:dc:1c:e8:80:73:d7:b1:9c:ef:
32:26:cc:ad:94:72:04:a3:4b:8e:da:98:cf:84:46:
67:ec:32:39:eb:47:76:82:5f:19:af:21:45:9c:09:
6e:6f:56:3f:fb:e0:45:71:cf:06:df:7b:88:8c:1d:
6a:9a:8f:96:21:e2:04:3f:6e:d0:11:83:60:bf:98:
b0:f2:7d:eb:c0:05:db:75:1d:3c:f1:f0:8e:02:b0:
c4:6c:58:e7:45:8c:a0:2d:d2:9c:48:1e:1e:90:b0:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:07:9C:FA:84:C6:45:48:C5:E6:69:00:B6:17:F9:3B:BF:54:1F
X509v3 Authority Key Identifier:
keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/88EE59C2520511F0838F9DC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.188.0/22
197.157.64.0/19
IPv6:
2c0f:fa90::/32
Signature Algorithm: sha256WithRSAEncryption
76:6f:f7:5b:00:dc:52:1c:5f:6a:d1:c9:0e:e6:7d:72:09:f6:
c3:8a:44:fb:8a:ac:35:89:f3:51:e7:63:93:79:26:5f:8b:da:
38:af:30:af:dd:d2:4b:6d:68:cc:0a:2c:58:40:63:6b:ca:27:
9a:b6:8a:0d:9e:af:99:5a:50:27:08:a2:01:d5:43:0b:3b:56:
fe:70:51:9d:17:cb:5d:77:05:53:c0:c9:e0:3b:41:60:ff:e8:
67:6c:4a:de:d6:e6:b6:e5:6b:4c:a5:a0:72:50:e7:90:69:b0:
5e:64:0a:e4:80:80:f8:18:fe:33:09:a6:df:ae:b8:c9:99:78:
58:93:0a:12:ec:d0:50:7a:ef:30:aa:de:09:41:70:91:01:29:
20:f6:ea:de:6f:d5:66:0c:38:86:81:9e:e0:71:b9:43:c4:90:
a6:69:f6:93:e0:41:d1:a6:4b:02:01:96:8b:ef:0e:b8:66:a6:
22:f5:8a:ec:c3:38:83:fa:b4:c2:d0:ff:44:5e:54:a1:33:a9:
d9:8d:6e:d6:6a:4f:c0:96:9e:dc:59:c9:f8:3a:66:3d:e7:24:
63:76:5f:2a:44:d1:04:f9:f0:11:65:aa:da:5f:ce:be:fd:d7:
7d:07:ca:a1:6e:e5:c5:b7:56:00:f5:cd:20:dd:71:05:7e:11:
16:d3:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:33:36 2025 by rpki-client