Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA74FFAE3D6911F0B1CDB0A9DAE4EC9C.roa
File: DA74FFAE3D6911F0B1CDB0A9DAE4EC9C.roa (raw, json)
Hash identifier: 3zeUsT6zydgL0LoeF4S/SxQkZXiogAtelfaMIvqZapI=
Subject key identifier: 01:B9:20:0A:2C:72:31:5E:5B:86:6E:64:6C:B7:1E:16:3A:E4:1E:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA74FFAE3D6911F0B1CDB0A9DAE4EC9C.roa
Signing time: Fri 30 May 2025 15:22:10 +0000
ROA not before: Fri 30 May 2025 15:22:05 +0000
ROA not after: Mon 09 Jun 2025 15:22:05 +0000
asID: 400619
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99315 (0x183f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 15:22:05 2025 GMT
Not After : Jun 9 15:22:05 2025 GMT
Subject: CN=6839cd22-fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:40:0b:45:59:ec:84:e3:a2:1c:98:4a:d8:
5a:61:e9:d0:68:c1:1d:fd:05:f1:43:3a:53:7b:d6:
9c:6f:23:2b:d4:a0:ec:fa:3e:b5:5d:53:5a:b6:09:
ac:1b:10:82:20:ad:4c:96:36:54:b7:e2:d6:e8:97:
cf:a9:a7:b0:0d:d5:1e:76:e7:a7:88:99:2c:75:c7:
72:8d:98:c7:ab:19:a3:65:d2:cf:d1:16:f5:2a:e4:
b6:99:f1:a5:2b:34:65:a3:53:5f:b8:2c:5b:1f:a3:
b9:67:1c:5c:f8:37:54:22:01:2d:f8:cf:b0:39:d0:
a4:4d:ec:f1:7a:f5:a3:f3:ce:1f:00:6f:c5:79:43:
d2:34:57:84:c2:a7:8f:f5:3f:b1:b9:67:f7:a0:42:
fa:8a:d6:fe:a8:6d:eb:e7:13:19:81:3d:15:e1:27:
6a:71:45:aa:70:57:1c:2c:1e:f6:cc:c8:2e:0a:8e:
6e:e2:1b:c0:bc:cb:c6:9f:41:5a:f0:66:b8:8e:d7:
f0:de:f7:c1:ba:09:2b:80:89:b8:22:e3:fd:87:71:
5c:b7:ec:8e:61:55:a7:f6:98:2e:13:25:74:fa:b2:
07:3f:75:bc:50:97:82:0a:94:19:84:e8:ca:fa:74:
1a:73:f7:2f:0b:ac:96:4f:36:2d:52:1a:fb:73:15:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B9:20:0A:2C:72:31:5E:5B:86:6E:64:6C:B7:1E:16:3A:E4:1E:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA74FFAE3D6911F0B1CDB0A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
49:3f:2f:37:64:e8:82:8f:7d:da:fa:8d:6e:df:97:3a:ea:67:
bb:4d:0a:61:2d:a0:52:4b:a1:85:88:6a:25:4f:ee:9d:9b:76:
5b:3e:1c:b7:22:46:4b:04:a8:f6:4e:90:23:f5:67:cd:8b:d7:
68:58:3b:98:8d:7b:98:14:03:de:61:e8:09:0f:9e:0f:9a:c8:
0d:cf:ac:fb:37:3f:fa:dd:68:cd:16:31:c7:62:ad:77:4b:6b:
19:83:4f:d1:5b:f7:38:58:b8:a7:36:b9:5c:29:04:4c:3c:15:
85:8c:b7:73:84:f2:77:21:a7:17:be:d3:13:d1:c1:47:40:5c:
4f:d4:ba:f1:a3:e3:c6:be:78:82:d9:62:d9:a1:97:80:47:56:
7b:d6:22:a2:8e:53:02:92:a8:6c:e8:16:62:90:41:5a:50:bd:
67:fe:4c:af:ff:00:7f:21:af:b9:53:9b:bc:23:be:b6:ab:33:
f9:4d:9f:be:71:17:7a:ea:87:16:8d:a1:e8:1b:36:2c:ae:1b:
1a:28:fd:17:ab:f4:76:2c:b5:f0:a6:e9:61:35:41:df:d7:69:
e3:0f:6a:8b:cd:cf:49:14:67:ff:f9:09:39:28:91:3f:e0:89:
40:ad:7d:96:85:5c:55:92:a9:c9:fc:dc:0e:fb:80:16:20:49:
35:51:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:54:46 2025 by rpki-client