Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE75D7658C411F0A3BA8EB0DAE4EC9C.roa
File: 3FE75D7658C411F0A3BA8EB0DAE4EC9C.roa (raw, json)
Hash identifier: v5kVU6pDwpAnNRMQfE/UqTWyq8BQ3Z6wgUZDpz7s+zU=
Subject key identifier: BB:15:05:57:2C:9E:A5:61:AC:FE:6B:77:4B:6C:6D:EA:B3:4F:77:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE75D7658C411F0A3BA8EB0DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 10:47:16 +0000
ROA not before: Fri 04 Jul 2025 10:47:11 +0000
ROA not after: Fri 08 Aug 2025 10:47:11 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100940 (0x18a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 10:47:11 2025 GMT
Not After : Aug 8 10:47:11 2025 GMT
Subject: CN=6867b134-a7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:df:64:ca:67:58:e9:a5:47:bf:80:96:ae:
44:8b:68:3b:f4:5e:1c:3e:c2:16:7d:23:4f:68:92:
05:6c:d7:db:57:8b:90:62:01:37:c0:fc:d8:70:f8:
35:ec:d2:2b:5f:f8:91:d5:31:59:d1:df:01:fa:54:
4a:b4:68:c2:ae:ef:e1:8f:1f:07:a9:46:e7:ee:65:
fe:52:fc:9f:a7:e3:1e:4b:1e:c2:1b:55:bd:27:4c:
c6:7e:1a:af:18:62:72:b6:2f:65:8d:59:85:5e:70:
79:5e:db:ae:35:8a:4e:36:30:05:d2:ca:19:53:82:
35:4d:ae:30:05:57:d2:06:50:d6:dd:2e:b4:7e:5d:
f1:e5:08:e9:a8:42:a5:7a:5b:38:c4:d3:9d:28:cd:
fe:4d:9d:2d:74:2e:89:cf:e0:3d:b7:18:ec:d8:4e:
67:05:f0:84:bd:7e:31:61:c0:11:eb:95:38:cc:39:
a8:79:32:e6:b5:6b:4a:58:a2:16:e6:c6:21:84:17:
d2:d9:a1:c2:37:62:58:b6:95:8a:6a:7e:01:87:c7:
7c:af:56:e2:84:86:89:25:44:8a:6c:3b:81:13:4a:
90:55:81:ea:29:63:78:ae:05:2a:e9:02:e9:86:51:
ca:63:33:50:a9:31:37:56:c8:86:f6:2c:b1:89:6d:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:05:57:2C:9E:A5:61:AC:FE:6B:77:4B:6C:6D:EA:B3:4F:77:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE75D7658C411F0A3BA8EB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:27:c9:1e:e9:92:b2:0d:03:36:da:7a:56:04:45:46:bc:9f:
79:6f:dd:3d:4b:91:4e:d4:c0:15:9d:68:65:f3:f9:0f:f1:68:
c1:f8:01:6a:ea:87:23:5a:b3:9a:44:71:e2:ba:7f:32:40:12:
12:ff:07:4e:1e:a7:7c:2e:b7:b6:32:98:28:c4:c9:01:44:79:
7f:58:cc:bd:0d:33:98:0a:a6:71:96:ec:8f:e3:62:77:30:fb:
ac:23:a7:b0:a6:1d:85:fa:f5:ba:93:cb:1b:8e:ca:b3:0a:f4:
3f:30:09:39:a7:f0:46:0c:05:c5:d8:f2:f5:95:dd:14:53:91:
f5:b1:68:bc:35:fe:15:e3:fc:e7:a1:cc:7e:e6:5d:8a:1d:28:
c2:3f:b1:97:4e:d2:d9:e1:0e:ff:5a:e9:e8:7b:89:d2:59:26:
46:d5:75:7c:60:93:14:39:6e:69:bd:55:79:19:e7:3d:f2:87:
8a:ee:54:52:0e:96:b8:3c:16:ec:51:b6:38:c4:95:c3:9f:12:
bb:37:0e:4d:35:6a:6b:79:7e:c7:5a:4a:f0:c7:ce:03:0e:0d:
dc:58:72:bd:4d:1a:a4:4a:87:dd:f4:1a:b9:11:71:e6:c3:ed:
ae:8d:c3:fd:1e:7b:cc:67:f3:9a:fa:02:86:43:1d:45:02:15:
8f:81:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:11 2025 by rpki-client