Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D83E2C2B3D11F0AB0A9BBFDAE4EC9C.roa
File: 17D83E2C2B3D11F0AB0A9BBFDAE4EC9C.roa (raw, json)
Hash identifier: O1OwnNk+TrJ7NZzJaT6BfI5YvI/5R8RJyDa2RcgQUBc=
Subject key identifier: 5F:A3:91:B4:E0:17:04:FD:7C:E3:94:EA:B5:82:3F:72:FF:22:BC:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D83E2C2B3D11F0AB0A9BBFDAE4EC9C.roa
Signing time: Wed 07 May 2025 12:16:25 +0000
ROA not before: Wed 07 May 2025 12:16:20 +0000
ROA not after: Wed 15 Oct 2025 12:16:20 +0000
asID: 138959
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98151 (0x17f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 12:16:20 2025 GMT
Not After : Oct 15 12:16:20 2025 GMT
Subject: CN=681b4f18-9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:dd:45:64:a0:83:b8:11:e0:c8:6a:7b:0c:
24:a6:c1:75:a4:a0:3f:8b:70:c6:8d:77:e9:f6:9a:
10:2b:da:4b:e8:02:45:84:b2:7e:a4:10:de:6d:c9:
e3:b3:22:90:5b:21:8f:ab:8a:af:5b:b4:a6:6c:d3:
62:e3:61:48:a3:62:25:c6:5a:c4:9d:1a:f3:37:6c:
b5:50:5b:29:b8:0e:a5:c1:03:da:f9:7b:06:30:a1:
3b:b3:b0:ab:11:bd:66:20:50:9c:34:a2:65:0b:08:
7e:cc:23:8c:bd:ff:d1:f3:18:5b:84:1d:59:b6:9b:
9d:05:11:75:12:fd:cd:a6:5f:00:e5:a0:1b:61:23:
4c:df:59:4e:42:c4:50:97:d2:b3:6e:67:30:ec:27:
ca:ba:f9:be:b2:06:0c:5f:2b:81:7c:e5:26:9c:fd:
bf:97:4a:4d:7a:ba:dc:e6:d4:62:a5:47:a2:19:22:
9c:10:a4:bb:11:69:cb:8a:1e:70:ab:7d:f5:ea:7f:
95:b4:f4:a8:bb:3a:b0:f5:49:12:1e:ad:68:61:62:
bc:23:bc:d2:ea:c8:24:de:a8:ae:be:db:75:dd:a1:
35:a7:a2:e7:0c:ef:c0:8c:5c:31:90:d8:d1:a1:dd:
30:7d:15:53:ec:92:7a:1f:a7:89:f0:7f:b2:e2:c5:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:91:B4:E0:17:04:FD:7C:E3:94:EA:B5:82:3F:72:FF:22:BC:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D83E2C2B3D11F0AB0A9BBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ee:80:14:9e:90:bb:ea:90:19:d2:2b:40:f2:b8:fb:20:25:
65:3a:fa:4e:d8:86:2a:c7:09:6a:7e:b0:67:6e:d0:ee:8a:21:
91:b4:cb:e3:7c:33:94:88:cf:b5:45:87:84:8b:a7:63:0a:aa:
47:35:4a:be:58:40:de:9c:69:13:8b:61:72:48:7c:07:88:16:
c9:50:cf:53:1e:b1:ee:55:5e:e5:63:13:88:1f:1b:65:5b:92:
77:03:08:2e:b2:98:f8:bf:74:5e:e4:77:6b:30:73:d9:0d:c4:
fd:18:50:a6:e8:af:77:6b:a5:1c:44:40:6d:e8:39:e9:47:15:
8f:b7:10:47:50:a5:5e:59:8f:d7:38:e4:0c:19:09:5e:20:34:
ef:ae:84:0b:27:ac:a0:9f:44:29:c5:ab:94:03:02:16:86:ad:
81:55:c2:dd:66:0c:cc:60:8f:c4:3e:31:bd:92:54:4d:4e:47:
53:a0:b3:84:6f:c7:53:fb:5f:f9:22:70:83:1b:6e:54:5d:cc:
11:6b:2d:d2:85:7d:1c:4b:fd:95:3a:9b:31:e4:22:d2:8f:3b:
dc:f4:68:88:da:24:76:fc:f5:80:66:b9:5c:b0:dc:93:e3:92:
b0:4d:88:43:f9:0b:d4:f0:b4:96:4e:54:22:3b:ef:f0:7b:8e:
3e:d0:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:59:53 2025 by rpki-client