Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A57A1E630B11F0AF58397EDAE4EC9C.roa
File: 75A57A1E630B11F0AF58397EDAE4EC9C.roa (raw, json)
Hash identifier: iVW2Zqebb6LmN7eAmzBkya7U1eSFdxZsWTaMsLs2Ths=
Subject key identifier: 21:06:0E:0E:78:2B:CD:E5:B8:EB:F2:33:1D:86:F6:7C:76:25:06:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A57A1E630B11F0AF58397EDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:42:12 +0000
ROA not before: Thu 17 Jul 2025 12:42:06 +0000
ROA not after: Sat 30 Aug 2025 12:42:06 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
154.195.168.0/24 maxlen: 24
154.195.169.0/24 maxlen: 24
154.195.170.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101934 (0x18e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:42:06 2025 GMT
Not After : Aug 30 12:42:06 2025 GMT
Subject: CN=6878efa4-4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:98:82:d7:21:4b:f3:3a:10:f3:52:0b:3f:
1a:72:f9:d2:4b:8d:d2:a0:03:6f:5b:6b:c0:b4:b6:
e9:2b:9c:ad:b6:51:0b:b8:14:f0:e1:98:21:a2:f4:
b1:f8:95:99:9b:e2:47:c0:27:03:ef:86:54:4a:15:
27:51:1a:b0:38:91:63:84:2e:9c:f3:06:b0:a4:de:
33:b4:40:4f:ce:02:b8:e2:a2:8f:7f:12:0a:95:14:
f8:89:a9:ae:7b:24:8e:b0:bb:64:6c:6d:e8:e2:5d:
ae:02:d3:e7:33:42:75:91:31:77:1a:ab:70:11:2a:
ad:b4:1f:04:9b:08:8b:d9:98:4c:ff:66:89:ed:e8:
b8:63:ef:7a:a0:37:b4:1d:7b:f7:5a:8a:a0:79:60:
52:e3:79:50:78:a5:4f:5d:e1:8d:ff:38:68:c3:a5:
ae:a8:d1:86:5c:20:16:d6:47:02:b3:c2:94:02:4a:
cb:56:ce:b9:fb:6e:cc:f6:59:be:4d:36:23:e1:8d:
65:e5:4f:29:89:ec:0a:1d:6e:df:ed:87:77:79:8f:
86:65:be:1c:11:aa:8f:b5:b0:a6:5c:3a:e5:0d:f7:
44:4f:74:8f:91:c7:09:b5:9f:c2:b9:51:e3:66:fe:
4e:10:93:ee:e4:d4:62:31:df:a0:a1:99:ff:3b:36:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:0E:0E:78:2B:CD:E5:B8:EB:F2:33:1D:86:F6:7C:76:25:06:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A57A1E630B11F0AF58397EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
154.195.143.0-154.195.151.255
154.195.168.0-154.195.177.255
Signature Algorithm: sha256WithRSAEncryption
26:62:78:ce:19:8a:d3:79:48:9a:ce:bf:70:62:8b:75:5f:cc:
30:d4:3d:a2:9b:4d:12:81:72:fe:83:f3:3a:27:a8:9c:1d:59:
b7:9e:ad:a9:4c:e0:bd:85:fb:4f:2c:ec:a7:a3:e4:c7:fc:1d:
12:05:6a:c6:b2:3d:d1:30:0b:50:1a:73:e7:98:a9:c9:ec:2a:
24:08:08:9a:01:2f:0e:df:80:d1:f5:73:41:67:da:b1:9d:fb:
68:eb:c2:ba:71:0c:49:07:d0:77:38:67:ec:10:c9:0d:da:68:
9c:7b:2a:00:19:d8:1a:8b:27:d1:be:f1:61:36:f9:89:98:45:
8e:69:f8:dd:1c:81:1b:a8:36:53:11:bb:14:5d:58:7e:62:fd:
6d:09:e2:53:73:e9:65:1a:45:0f:f4:b8:58:c3:df:1e:7b:a2:
43:1e:6c:b8:93:01:f1:e6:7f:ba:c0:2a:f5:94:36:f5:b4:3c:
45:6f:bb:48:7e:e0:1c:1a:05:22:c2:40:21:6c:b2:a7:bb:2a:
2d:83:16:b5:f4:66:8f:b7:f5:9f:11:59:42:b6:1e:06:ac:dd:
a4:1a:08:fa:4e:d6:37:87:02:75:74:75:27:1c:28:06:ef:01:
1b:a2:7a:f3:e6:08:29:b8:b0:4a:fe:17:8d:c9:5a:8c:c4:26:
a1:be:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:13 2025 by rpki-client