Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE23C6A059A811F0BDF28880DAE4EC9C.roa
File: FE23C6A059A811F0BDF28880DAE4EC9C.roa (raw, json)
Hash identifier: pDhwkjarEdtwnMLpoehT8mh4KwjLU2lNuUAnlfQR60I=
Subject key identifier: 76:72:F4:13:3F:55:42:05:B1:15:37:18:CA:43:01:61:0D:E7:BA:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE23C6A059A811F0BDF28880DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:04:41 +0000
ROA not before: Sat 05 Jul 2025 14:04:36 +0000
ROA not after: Sun 24 Aug 2025 14:04:36 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101120 (0x18b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:04:36 2025 GMT
Not After : Aug 24 14:04:36 2025 GMT
Subject: CN=686930f8-312d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:07:75:f7:bc:64:ac:7b:01:0d:f7:21:25:
49:fb:68:a1:17:c3:a4:cd:40:10:ff:eb:07:f1:60:
1d:61:3c:98:e8:2f:a6:99:47:92:97:fe:bb:6d:3f:
8f:69:b1:ac:ec:f9:3a:bd:07:25:74:0b:bd:f2:1b:
ae:df:f8:98:93:32:eb:0e:68:62:e8:ff:e9:37:62:
6c:e0:45:d5:c9:a3:21:78:25:df:fc:3a:71:23:21:
d2:bd:a0:3f:de:ae:a3:b0:ce:8c:9a:e6:7c:83:e7:
8b:09:c2:99:fd:f8:04:40:6a:fe:57:49:38:cc:44:
df:74:9a:ae:9a:a8:03:60:a2:fa:25:46:d1:11:56:
c7:3e:3c:4c:79:2b:99:5f:08:ef:a8:a5:bc:33:79:
4f:a6:27:f8:1e:8c:de:ac:5f:bd:91:f6:3c:a6:6b:
d1:84:86:f4:a8:70:2d:3a:72:03:2d:79:e4:f8:29:
68:a7:26:1a:e2:05:1b:b5:08:b9:21:eb:0f:ea:d7:
f7:f3:f1:d6:72:81:3c:b5:88:92:9e:ca:58:d9:b3:
f0:5d:7f:29:1b:61:ed:2b:a2:d4:c5:89:f8:13:c4:
63:0c:28:2c:ef:78:65:da:41:0c:f9:78:96:0a:d0:
f9:43:31:49:a5:21:c1:a2:1f:b1:93:b7:eb:0b:97:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:F4:13:3F:55:42:05:B1:15:37:18:CA:43:01:61:0D:E7:BA:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE23C6A059A811F0BDF28880DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5a:96:2a:8f:e0:58:93:f7:f4:7a:4f:bf:da:72:b5:bb:f0:
e4:de:06:94:f9:cf:9c:db:dd:c8:58:79:74:9e:75:f3:23:2e:
50:eb:a4:e1:38:3e:7b:41:97:45:d2:de:80:28:cb:54:1d:63:
a9:ce:55:8c:40:8b:30:94:1a:25:de:cc:94:c0:1a:36:fe:c6:
b5:5c:d4:26:59:a0:bc:7b:c7:e1:83:c8:63:39:63:85:cb:be:
50:d8:ef:ca:e7:be:3d:83:eb:83:e6:0b:ad:dc:f9:54:c2:39:
8a:cf:aa:97:ee:bb:cb:33:f5:3c:8c:c1:19:79:00:9b:4b:d4:
84:41:1c:b8:e2:52:50:21:46:5b:46:90:b0:c3:c6:4f:f4:fb:
51:b6:f8:ee:87:a6:80:73:37:e1:3c:33:86:0a:5d:84:76:47:
2a:77:42:7c:78:6f:8f:a8:ed:48:d7:8e:c3:2f:b0:ed:42:e7:
8f:49:d8:43:4b:ec:e4:45:bd:e1:97:5a:8f:f1:58:1c:1f:56:
ee:78:59:03:4b:1f:f9:c4:aa:af:6b:0b:85:97:d0:19:71:dc:
b4:a4:f6:ca:a6:96:c2:c1:59:8b:61:6f:87:fa:0d:a0:88:cc:
9d:f1:bc:69:82:36:f9:7a:2a:a7:2c:bd:fd:30:15:58:ef:f9:
b8:26:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:51 2025 by rpki-client