Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F4BA805B7D11F0AB11E5E0DAE4EC9C.roa
File: 69F4BA805B7D11F0AB11E5E0DAE4EC9C.roa (raw, json)
Hash identifier: Oltjx4Co2BlUVcUZTrcuU1ftnnSVrbi7jjxgQLkd5bQ=
Subject key identifier: 6A:5F:DF:28:25:FC:B3:FA:43:8C:74:F8:D2:BF:61:C9:A2:D1:E1:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F4BA805B7D11F0AB11E5E0DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 21:57:46 +0000
ROA not before: Mon 07 Jul 2025 21:57:41 +0000
ROA not after: Thu 04 Sep 2025 21:57:41 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101486 (0x18c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 21:57:41 2025 GMT
Not After : Sep 4 21:57:41 2025 GMT
Subject: CN=686c42da-6395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:0e:fb:3c:82:29:04:c8:eb:8f:84:89:58:
5e:8c:a6:2e:28:bf:f4:16:9c:58:4e:f7:14:89:f2:
8f:2e:68:2b:a7:00:02:fc:ab:93:93:65:20:3c:be:
3c:0f:27:e2:ac:d9:44:4a:95:34:7b:6b:44:0f:8a:
cb:16:4c:68:e8:62:c7:19:3e:81:07:60:b7:7b:37:
6b:48:75:1b:8e:98:bc:64:55:26:d2:d9:79:51:0a:
ff:6d:38:d4:f7:73:e9:d8:b3:e3:e2:15:8e:b1:90:
d0:bc:eb:37:5c:1e:21:fa:ca:a4:f2:99:f5:cb:b9:
f6:33:79:f0:e6:ee:a3:b6:8a:2b:f2:6c:62:88:b1:
7a:18:19:80:24:63:fd:93:18:f9:86:57:7e:07:b8:
0b:7f:5e:41:7d:4b:78:84:33:d1:c7:60:9c:8a:cd:
94:8a:69:98:0d:a2:38:1a:76:36:fe:04:8c:a7:41:
99:33:ab:24:d9:19:21:6b:b6:64:b4:59:f0:e6:7a:
b4:d5:0b:fb:6c:01:15:1d:0c:41:79:8b:cb:7a:0e:
5d:84:d8:9a:70:73:47:93:d3:fe:6a:d2:cc:61:42:
e6:9a:18:e3:b5:08:6c:bc:67:c3:ed:10:7b:10:6e:
57:22:fd:7c:85:67:cd:18:ab:b8:c5:ab:c0:be:75:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:DF:28:25:FC:B3:FA:43:8C:74:F8:D2:BF:61:C9:A2:D1:E1:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F4BA805B7D11F0AB11E5E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:fc:65:97:09:08:5d:7a:4f:7a:40:51:89:9d:ff:c8:57:1b:
7b:16:22:d6:ca:ba:dd:bd:ec:98:d9:99:f1:f3:b9:7c:ab:8d:
c1:b2:53:89:83:e0:24:1c:a4:b4:52:0d:71:03:9f:e2:54:c4:
ee:07:8b:c8:42:e3:1c:0e:c5:4f:b8:26:8b:38:05:07:88:48:
40:e2:54:ea:62:89:55:49:cd:b9:dd:ec:b3:5b:32:40:c2:42:
30:90:f4:2e:d3:b5:6a:af:37:25:df:4c:82:de:9a:92:cd:2b:
0e:92:ba:35:27:0d:a5:f2:f3:0c:97:18:89:66:00:53:93:45:
11:5b:cc:54:de:b8:19:82:98:b9:9c:ed:8f:30:e6:11:dd:1a:
8a:9d:2e:0e:4f:e1:28:08:98:5f:5b:28:38:04:ae:4d:03:80:
3d:21:93:f2:a4:0e:4b:52:0e:d2:85:a3:ee:91:f9:d0:f9:aa:
f2:00:c9:bf:45:af:54:1c:05:16:16:c0:be:51:1f:6c:99:b3:
66:2d:7d:aa:3f:55:bd:84:92:56:d3:8f:94:81:f0:6e:0a:37:
cf:53:b5:aa:d2:cb:04:07:24:50:69:7a:de:a3:41:96:58:26:
0c:fd:f7:54:82:b6:e8:43:f3:11:c8:27:40:ab:0b:64:f5:a2:
e8:6b:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:46 2025 by rpki-client