Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F76B65A3E2911F085D70A86DAE4EC9C.roa
File: 1F76B65A3E2911F085D70A86DAE4EC9C.roa (raw, json)
Hash identifier: LY3Pq9NmZIFOrc3obrQMTFMoG9IHiaO2sVgqlTlPHwU=
Subject key identifier: B6:58:83:CD:15:C8:9D:72:0B:13:53:5D:A6:68:46:27:52:EF:7C:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018412
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F76B65A3E2911F085D70A86DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:11:20 +0000
ROA not before: Sat 31 May 2025 14:11:15 +0000
ROA not after: Mon 30 Jun 2025 14:11:15 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99346 (0x18412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:11:15 2025 GMT
Not After : Jun 30 14:11:15 2025 GMT
Subject: CN=683b0e07-1945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:5a:57:4e:58:36:bf:58:53:56:79:92:96:
17:50:41:0c:da:71:c4:09:56:62:10:79:85:6e:76:
6c:bf:0e:0b:e3:d8:6d:22:9d:ee:ef:48:56:a6:8d:
e9:2d:1d:51:d1:c5:21:b3:10:6e:79:b2:fc:72:a9:
65:1a:aa:31:bb:66:f4:48:22:9b:1d:02:c5:ea:01:
e4:b3:9e:61:44:b2:e6:86:7b:2c:7f:26:d4:d4:cc:
54:04:94:5f:04:26:dd:c2:86:d2:4f:21:37:4d:de:
b2:2b:af:0e:24:c6:0d:8a:6e:ad:cd:a2:b6:75:fb:
d1:16:ce:7b:7e:bc:8b:98:9d:6f:ca:e2:1d:ce:24:
cc:6f:54:16:1e:cc:3b:16:b7:03:a9:6e:ae:9d:33:
a1:f0:a2:00:9c:dc:00:2d:f6:44:38:d5:2d:df:ea:
6e:02:69:3d:1e:87:32:26:6a:3b:83:66:c6:fe:9c:
47:e8:f2:b0:b1:df:26:ef:b8:24:28:9c:9a:60:82:
4a:27:a4:90:11:28:25:2d:d8:1d:48:bd:66:b2:49:
76:3e:5c:08:a9:bc:86:97:8e:c3:5f:e5:12:93:10:
48:08:ab:bf:0d:5b:f5:4d:27:14:fc:89:f3:be:5a:
bc:bf:62:41:e2:eb:c5:7d:8b:9f:6d:89:0e:62:68:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:83:CD:15:C8:9D:72:0B:13:53:5D:A6:68:46:27:52:EF:7C:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F76B65A3E2911F085D70A86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
66:b2:a4:ca:e1:25:2f:a1:17:1f:2c:03:cd:f5:4c:bd:22:fd:
4b:50:8a:ec:62:f4:a9:13:05:df:0b:e2:1b:d3:cb:f6:76:cb:
7b:b3:cb:26:7c:ab:59:21:7d:99:a0:0d:19:a1:01:d8:90:40:
68:25:e3:25:3e:80:18:43:df:40:30:a0:27:f0:b3:7e:a5:67:
68:28:d8:35:7c:28:1c:6c:ac:08:42:88:0c:57:af:64:b2:19:
80:eb:5b:12:b2:83:96:89:5f:fc:01:2e:3d:ac:1e:6a:ba:67:
74:7e:3d:ef:5f:a7:b3:0d:1b:66:71:72:91:63:d3:04:ae:18:
0a:cd:d9:1a:e8:4c:63:5b:6f:25:00:54:4e:83:41:3a:9a:b4:
4f:8f:3e:74:de:f1:3c:82:f4:ff:cf:15:df:f2:ed:d9:ce:63:
64:93:63:ef:ec:e4:d9:5b:58:7f:cc:54:20:36:bd:a4:39:51:
15:f3:dd:8a:7d:56:b7:b5:be:82:7e:58:2f:50:a2:11:46:42:
74:ff:4f:95:59:66:6a:17:8e:6f:a7:50:f1:e0:01:30:68:a3:
51:c4:1b:dd:2a:49:3a:69:40:81:67:bd:ae:c3:3d:3f:1f:bf:
c9:58:6c:65:99:87:21:80:4a:86:79:f8:57:e4:7b:45:8a:f5:
6e:40:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:55 2025 by rpki-client