Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1755F246243511F0997F33ADDAE4EC9C.roa
File: 1755F246243511F0997F33ADDAE4EC9C.roa (raw, json)
Hash identifier: oXqDWhwo42tzhmgOr3US/tqpBMQ+ef3IihXkEcVgY8Y=
Subject key identifier: 76:D5:AF:78:1F:1B:B3:A5:B8:3C:EC:48:28:EC:F8:AB:B8:6F:7B:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1755F246243511F0997F33ADDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:31:29 +0000
ROA not before: Mon 28 Apr 2025 13:31:25 +0000
ROA not after: Thu 23 Mar 2028 13:31:25 +0000
asID: 17561
IP address blocks: 154.207.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97259 (0x17beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:31:25 2025 GMT
Not After : Mar 23 13:31:25 2028 GMT
Subject: CN=680f8331-ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:7f:bd:5e:42:e8:2d:44:a2:78:36:5c:84:
8a:69:6c:8c:ac:e2:79:86:09:e1:2c:06:f9:d6:75:
86:c7:7f:af:7e:73:bb:a3:d4:37:31:04:54:b7:e7:
aa:17:86:0a:2a:6a:15:ec:46:b2:3d:2a:6a:8a:5b:
0e:98:54:8f:c0:ec:b2:e1:fc:14:56:d0:aa:8e:f8:
42:62:76:62:7e:ef:36:50:8b:7b:e9:d3:6c:b7:1d:
1a:21:eb:7e:5c:f2:3e:89:b9:46:19:6a:44:d7:e3:
40:77:40:8b:f4:3f:6f:b2:a1:e9:12:58:1a:4b:40:
93:95:8e:05:53:c8:b4:a0:2d:90:eb:7e:80:4e:da:
f7:67:d6:9a:ce:72:a0:bf:d1:aa:9f:ad:64:20:4c:
a5:ef:4a:81:0a:06:68:a5:f6:11:d6:d3:41:34:17:
b6:16:62:d4:a0:bd:96:32:e9:d7:ca:ef:74:cd:64:
f7:e8:42:ba:6b:4e:53:b0:01:5d:e7:42:b1:81:86:
67:eb:d4:c7:0d:1a:cb:bc:de:f6:30:77:60:ed:b9:
4f:bf:c5:32:94:22:c5:ed:85:60:99:2a:13:98:22:
2a:06:a1:3a:e9:01:86:bb:84:40:c6:5e:a3:fe:39:
9a:86:16:a0:9c:9e:9d:97:95:41:c4:f4:e9:21:7d:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:AF:78:1F:1B:B3:A5:B8:3C:EC:48:28:EC:F8:AB:B8:6F:7B:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1755F246243511F0997F33ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5e:a2:ac:5f:ad:9d:a9:83:25:d8:95:30:91:dd:11:45:0c:
c1:f8:b5:46:ca:38:32:20:12:fd:19:c5:9f:73:4a:f8:db:c0:
78:bc:64:2a:ee:ae:b5:f4:9f:7f:b1:b5:68:48:08:3e:ac:80:
fb:b1:81:5b:2b:da:e6:0d:e7:4b:37:ff:4d:a7:5d:40:fc:bb:
a4:7a:48:b2:f4:c3:b0:95:60:47:6d:50:00:ee:8c:b8:b3:d3:
a8:cf:35:fd:de:1d:42:86:13:6b:d4:b1:6e:63:d8:6b:18:f5:
90:11:6a:33:83:7b:36:39:98:eb:d4:06:a1:c9:84:b6:8e:c4:
30:f8:1c:54:73:77:39:6e:18:ac:ea:1c:20:4f:fb:fd:de:06:
5f:b8:7b:39:e8:67:c2:12:1d:d0:68:ba:06:9a:08:be:d5:be:
63:f2:98:05:9c:0f:47:fc:20:50:93:ee:68:c1:b5:a8:02:f1:
70:f8:ff:85:45:fb:be:db:5b:68:5f:c4:b9:c8:18:bd:a3:4b:
e4:0c:58:9a:dc:10:a7:74:e2:19:8b:77:01:ab:9c:23:2e:f6:
8a:0d:e7:17:d5:6d:e5:53:ff:d1:d6:e6:09:55:b3:da:a0:4d:
74:1a:1e:ed:49:23:c0:30:c3:00:8c:56:9e:19:98:e9:c4:d5:
dd:d0:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:44 2025 by rpki-client