Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04C2BA0C2F4211F08FCC259FDAE4EC9C.roa
File: 04C2BA0C2F4211F08FCC259FDAE4EC9C.roa (raw, json)
Hash identifier: wbSkeRZCtxS2I2uaI2mRJv70nAe+MWk0cnmsD8VsaTk=
Subject key identifier: 0F:6E:8C:FC:AE:B8:37:C4:68:88:EC:7B:EE:90:09:BF:F6:9B:AF:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01802F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04C2BA0C2F4211F08FCC259FDAE4EC9C.roa
Signing time: Mon 12 May 2025 15:01:45 +0000
ROA not before: Mon 12 May 2025 15:01:40 +0000
ROA not after: Thu 22 May 2025 15:01:40 +0000
asID: 54801
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98351 (0x1802f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 15:01:40 2025 GMT
Not After : May 22 15:01:40 2025 GMT
Subject: CN=68220d59-ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:59:cf:0c:39:a7:44:6f:7f:c1:e8:57:46:
dc:2c:4f:1e:12:b6:c1:09:8f:96:67:94:e3:60:ae:
c8:01:cf:42:a5:d6:61:d5:54:07:fc:7a:a2:ae:73:
99:7a:5b:8b:19:be:e9:a3:66:37:7b:8e:7d:fb:5c:
28:1b:83:c8:bc:f3:5e:68:69:fe:04:1e:d1:76:22:
21:16:68:54:60:49:dc:e6:f0:54:3c:b9:ef:0c:45:
ed:22:59:5f:71:32:66:54:d1:57:0c:39:c1:24:dc:
0c:4d:f3:03:32:66:bf:4f:aa:4d:d1:bb:4c:d0:2d:
17:71:ae:b0:34:0b:43:4c:60:8e:27:17:ea:85:f4:
83:b3:97:a6:e6:31:da:7b:a2:02:d9:c2:f0:31:20:
c4:24:1e:5a:53:6e:04:2b:66:98:b5:24:e4:6b:98:
47:88:d8:ad:74:a3:00:e3:5a:57:3e:03:f5:21:98:
cd:5a:75:aa:da:15:a0:cf:ec:24:6c:35:71:fe:f8:
7d:c3:4b:a9:2f:5a:8f:90:f5:9d:70:67:da:f4:7d:
4c:5c:2d:3b:80:4f:91:66:cf:27:a3:4f:61:8c:9d:
99:3e:3e:3f:7d:de:70:b4:cd:77:f1:86:a5:12:89:
8e:2e:a1:c3:ba:4c:41:5d:87:a5:81:86:c5:f0:08:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:8C:FC:AE:B8:37:C4:68:88:EC:7B:EE:90:09:BF:F6:9B:AF:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04C2BA0C2F4211F08FCC259FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:45:c2:91:c9:eb:e0:f6:10:68:56:a1:69:f2:1f:66:80:83:
8c:a6:d4:c9:bf:9c:08:1c:41:f5:bf:18:c1:e5:fa:29:e1:cb:
6b:33:0a:99:5c:10:a6:90:c3:88:89:a9:09:f3:7b:ec:78:de:
58:d0:9d:80:4f:21:7a:3b:1e:46:e3:d7:08:ef:c3:c7:f6:e3:
3b:b3:99:f2:1f:f5:17:1d:45:53:e3:99:c2:6a:c2:dc:8b:5a:
99:34:80:5c:bc:06:39:ca:9f:80:61:7f:e3:6a:b2:e2:89:3e:
f5:f9:6b:4f:e5:87:5f:b9:18:c9:69:ed:3f:8a:47:02:2c:c5:
9e:31:9a:60:b0:ae:9b:c5:51:79:74:a7:74:ef:00:fe:fc:b0:
37:88:23:7e:a2:ed:03:ba:47:53:49:bb:fb:a5:7b:0c:d7:99:
07:d5:83:d9:89:74:78:24:27:a9:f3:1a:53:9f:96:ba:04:e5:
b9:b5:ff:e5:95:33:5e:02:70:b7:d4:81:c9:98:38:55:2b:b9:
5a:56:ce:d0:71:23:4a:b8:76:b4:c2:f2:6d:2c:12:ba:ee:f2:
d8:74:10:9b:87:e6:7c:ca:64:fb:38:47:c9:e8:e1:e2:a3:23:
5a:7d:7b:7d:3f:e2:74:d0:f0:7d:4b:00:e5:3f:d6:bc:f9:c9:
3d:18:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:55 2025 by rpki-client