Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEA00E0590B11F08200BDF5DAE4EC9C.roa
File: 4CEA00E0590B11F08200BDF5DAE4EC9C.roa (raw, json)
Hash identifier: 3HJK0xeXgDh1mcNfR7jArdXnYB6jWWxQE1+IIls4qNo=
Subject key identifier: D9:34:5D:4E:F9:BF:0B:EA:26:4B:BD:42:B3:18:C6:8F:B9:B9:C0:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEA00E0590B11F08200BDF5DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 19:15:52 +0000
ROA not before: Fri 04 Jul 2025 19:15:48 +0000
ROA not after: Thu 04 Sep 2025 19:15:48 +0000
asID: 394432
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101024 (0x18aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 19:15:48 2025 GMT
Not After : Sep 4 19:15:48 2025 GMT
Subject: CN=68682868-eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:6d:98:87:d0:cc:5f:ab:93:5c:01:bd:83:
d4:ff:cd:5c:d7:05:ff:43:91:59:2f:52:d5:16:a9:
29:22:07:bb:4e:92:4e:bf:e6:f9:8c:e4:a9:68:33:
fb:a9:57:30:d8:a0:e9:e0:f0:e9:d6:86:45:42:17:
b2:27:16:c0:15:73:9a:86:ce:26:1d:c1:f4:0a:78:
c5:0b:05:34:a2:7f:6c:26:c4:cd:b7:b5:ac:75:93:
36:55:ec:9b:7b:6f:a0:95:73:6a:88:f0:fb:36:3f:
6f:d4:5f:91:9d:d0:a0:8f:c4:ef:ca:99:9c:40:31:
ed:d9:e4:6e:34:23:90:0d:46:af:4c:f3:43:5a:6e:
50:5e:6e:62:6b:29:fe:2c:71:f4:31:38:70:ae:0d:
a9:bb:12:83:68:0a:c4:55:40:54:70:96:9a:64:c2:
b7:ab:90:09:2f:a7:ce:b4:07:9f:31:c0:16:e7:3e:
ee:81:ef:f2:98:f4:74:be:27:7c:9f:09:fb:95:16:
a3:92:7a:bb:13:0e:64:cf:30:27:cd:5a:af:85:b0:
e9:bc:68:c7:75:a2:62:f8:d7:44:bb:97:b5:f7:b5:
24:7b:c5:9f:eb:a2:b4:b7:91:3a:f9:a0:d2:84:0f:
78:4a:eb:6c:bb:c7:64:a7:c4:e0:96:f2:91:44:6c:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:5D:4E:F9:BF:0B:EA:26:4B:BD:42:B3:18:C6:8F:B9:B9:C0:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEA00E0590B11F08200BDF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
97:8d:c0:5e:ab:08:d0:00:d6:52:72:22:26:60:98:e7:b1:3d:
de:19:f5:56:a9:a5:69:97:13:03:f9:db:12:3e:cd:6d:6c:e3:
ac:76:8b:42:3a:63:7d:2a:42:95:e6:2d:48:60:e7:8b:01:13:
89:db:8b:ba:98:25:5c:54:65:fc:56:64:58:b3:a7:40:56:24:
b0:b4:dd:90:0b:f8:28:04:4b:11:7e:9a:b9:6b:dd:68:50:ef:
10:53:5c:59:4a:03:10:ed:d8:2f:ab:f2:2c:af:47:d3:fa:a7:
5d:c1:00:e3:2a:d2:c5:d0:b9:b1:e7:1b:a6:04:81:3b:49:ef:
81:58:99:49:02:31:c9:47:0e:d3:0b:98:07:77:9a:73:5f:64:
05:c5:23:c5:12:b8:b8:72:b6:82:7c:c7:e8:48:a2:27:63:3b:
5a:e6:e6:bf:ea:84:3e:1c:c9:f6:ba:a5:a7:34:8e:e6:2b:5c:
94:64:1f:82:fb:2b:ec:2d:02:59:8a:b0:ee:cb:dc:e5:97:70:
1a:37:db:df:52:c8:92:7a:60:fa:e6:4b:94:6a:55:d2:2e:1a:
d7:87:dc:96:75:51:61:8b:7c:c4:5c:8b:f4:a6:9d:8b:73:15:
c0:a1:77:10:b2:a5:89:72:48:4c:47:e7:9b:f1:70:23:20:fa:
f1:d0:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:39 2025 by rpki-client