Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173A72443F9411F08BACC1BFDAE4EC9C.roa
File: 173A72443F9411F08BACC1BFDAE4EC9C.roa (raw, json)
Hash identifier: xhZ+PAQr98wI6Sgr460zCNl/56+HiyySbn0n5gMubfo=
Subject key identifier: 74:EA:B4:AD:61:F6:5F:13:E8:AC:7F:C7:D4:41:EC:1A:5E:E3:80:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018452
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173A72443F9411F08BACC1BFDAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:29:33 +0000
ROA not before: Mon 02 Jun 2025 09:29:28 +0000
ROA not after: Tue 08 Jul 2025 09:29:28 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99410 (0x18452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 09:29:28 2025 GMT
Not After : Jul 8 09:29:28 2025 GMT
Subject: CN=683d6efd-63c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:bb:b6:a1:70:3e:21:38:39:e7:c3:a8:6b:
fb:38:2a:88:d0:43:17:01:47:fd:e7:25:b0:7c:b6:
b3:bb:76:32:1d:84:5b:c0:55:e9:ab:9c:db:dc:79:
77:55:3a:02:d6:48:f4:11:b6:2c:ba:88:52:cc:3a:
66:b6:8b:64:f7:83:d2:15:e3:05:f6:0b:d4:0f:bb:
4b:aa:c0:41:93:2d:b8:2e:04:e8:db:88:e5:5e:46:
85:d0:d4:f9:4d:af:c1:fe:ba:c5:70:16:20:77:78:
28:50:3f:b7:5f:02:62:b4:28:55:f2:3e:79:77:83:
09:c4:c6:d4:ba:c9:8d:a0:93:3b:8c:10:11:5d:46:
a2:9e:e8:ae:2b:59:40:fe:ef:95:53:02:c1:f0:eb:
23:c1:9f:20:62:35:84:b5:56:86:26:fc:e6:5e:99:
24:0e:ac:b4:05:a5:12:a9:40:2d:b3:5a:42:8f:6f:
10:6d:5f:b3:0d:72:3a:57:2e:02:39:96:1c:02:a4:
22:50:bc:fd:68:a4:21:a9:bc:f1:41:d4:64:f3:de:
53:b7:e9:3a:91:06:7e:2c:dd:ff:a7:14:5b:5e:74:
a5:88:f1:a4:1b:6d:aa:88:ac:32:a8:b7:07:a1:7c:
0d:69:59:bb:bd:03:50:2b:6c:10:db:53:3e:55:1d:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:B4:AD:61:F6:5F:13:E8:AC:7F:C7:D4:41:EC:1A:5E:E3:80:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/173A72443F9411F08BACC1BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:95:a5:be:e5:55:32:a6:f7:1a:b2:58:5c:1d:6f:fa:15:f4:
a7:57:3e:7c:f8:9c:6f:fb:f2:fa:19:2f:ef:13:bf:28:7b:ff:
8c:70:84:1b:2e:bb:44:55:cf:d6:bc:09:56:7f:a4:1b:7c:df:
d3:a8:00:fd:f8:46:e2:8c:9c:74:0f:10:2d:c7:0b:bb:c6:30:
f4:39:ac:42:a2:9a:0b:8f:0c:f0:b1:cf:a1:e9:ce:e9:2d:25:
89:81:56:5f:11:89:60:ea:96:24:4b:ba:dc:e7:38:ab:d8:10:
b1:89:7b:9d:8a:bc:6e:24:df:a0:94:14:7b:b7:f1:5d:bb:bc:
d9:3d:27:8a:94:d8:7f:0c:e3:cd:b0:08:5e:35:d5:94:0a:ff:
d7:fa:8d:a4:b7:27:c2:66:ec:96:1b:25:25:af:5e:77:7f:1e:
81:b9:c3:84:3b:f5:9e:7f:6c:36:1c:d5:0f:82:29:d7:1a:8b:
17:44:8c:69:03:60:6b:2e:a8:1d:a8:52:2c:c0:e3:70:0e:10:
ef:73:e8:d3:45:95:8a:6d:78:fb:24:62:64:ba:3b:0e:7d:01:
b4:e2:2d:6f:c6:d8:a0:47:6e:97:00:e3:d7:28:df:56:b7:f9:
43:d7:1c:01:b8:92:2a:ff:15:8d:3a:2f:80:a2:ef:b5:5b:3a:
f3:76:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:11 2025 by rpki-client