Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD95180243111F08EE0ED93DAE4EC9C.roa
File: 0DD95180243111F08EE0ED93DAE4EC9C.roa (raw, json)
Hash identifier: OKtsNPUzkNG1sSUjmlPwwG+phBd088Lzc6xZV/jNi0Y=
Subject key identifier: 23:12:D8:BF:9C:DF:82:B9:01:77:B2:73:D5:86:95:C2:26:25:14:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD95180243111F08EE0ED93DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:02:36 +0000
ROA not before: Mon 28 Apr 2025 13:02:31 +0000
ROA not after: Thu 23 Mar 2028 13:02:31 +0000
asID: 17561
IP address blocks: 154.203.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97229 (0x17bcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:02:31 2025 GMT
Not After : Mar 23 13:02:31 2028 GMT
Subject: CN=680f7c6c-12a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:2d:91:33:92:26:ae:f0:5e:91:cb:d7:77:
52:e4:a8:94:bb:45:e8:c8:ba:1d:63:4a:40:27:60:
d9:ba:45:4a:09:fd:9e:13:6a:c4:98:ea:6b:a9:84:
c8:a5:d4:c8:5b:ed:48:21:d4:db:45:96:f0:b1:69:
15:87:c4:21:15:5e:c3:48:8f:d6:a5:2d:9f:a6:52:
e3:27:e4:49:d8:a3:95:bd:da:84:c8:e3:2b:3f:d0:
eb:fb:f9:22:84:0a:57:1e:30:c7:dc:51:6d:ea:17:
7f:8d:f4:fa:f2:ef:ce:29:20:b1:8b:df:6a:a2:48:
31:ff:85:6e:92:19:e5:b7:67:8d:c2:8a:fc:69:b1:
5b:e9:e3:fb:fb:61:fc:58:55:ac:93:77:2b:70:4a:
a4:66:fb:99:c7:67:2f:59:be:7c:18:76:b2:22:ab:
d2:99:63:9b:6a:8b:09:aa:ee:82:8a:85:e5:6e:8e:
d1:7c:a7:a5:ee:75:52:fa:6f:29:92:7f:2d:c4:b8:
2f:fd:81:35:3e:e1:cf:62:8c:17:36:0a:a5:9e:11:
3b:6b:c2:1a:30:ca:13:bc:ab:f8:3e:b9:13:13:41:
dd:e0:1c:0c:09:2f:e4:f8:7d:07:9e:44:56:67:9b:
24:88:85:4c:13:9b:8c:e2:5f:67:91:61:2d:fc:35:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:D8:BF:9C:DF:82:B9:01:77:B2:73:D5:86:95:C2:26:25:14:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD95180243111F08EE0ED93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:6e:5c:d5:5c:03:20:03:e8:4f:22:09:21:d6:7f:fc:2b:a8:
94:47:58:c8:7d:19:d8:91:c7:cf:83:e4:fd:9b:1d:f7:bc:7d:
5a:4c:8f:e2:53:d5:7a:aa:73:e9:07:1e:c8:7d:8d:1b:51:83:
46:b2:b6:5d:60:d2:26:42:39:28:8a:e4:76:4e:10:96:f6:4e:
0a:5b:34:2d:da:95:fa:ea:8b:d5:e2:20:1e:f9:ce:28:c8:79:
18:06:be:39:d6:be:52:45:9c:ec:ce:7c:b1:dc:96:19:0e:88:
2f:c2:42:29:0f:06:ae:ff:98:e4:f9:46:07:ca:99:1b:df:78:
c7:6b:48:d6:dd:c8:6f:b9:93:f5:b3:3b:6c:1c:d9:d2:38:5b:
b0:51:c7:89:21:1c:28:c7:ca:f1:dd:56:3b:b0:12:cd:9c:3d:
28:5e:14:e2:10:24:72:e6:11:cc:78:44:9e:0e:d2:18:92:61:
41:59:47:15:9f:b4:a5:21:cb:13:08:6c:33:84:5e:ff:01:4d:
5b:a6:0a:fa:74:c0:a8:99:7e:c6:60:cd:49:9c:67:b5:64:24:
ce:ea:07:e1:d3:ee:1f:83:b2:b5:3d:c8:69:9a:42:ec:a0:ab:
ce:d0:a3:2a:82:ee:47:6a:08:0d:2c:84:f2:94:17:ab:b0:63:
09:8e:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:32:26 2025 by rpki-client