Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4C1C8628CD11F0AFBADFF2DAE4EC9C.roa
File: 1F4C1C8628CD11F0AFBADFF2DAE4EC9C.roa (raw, json)
Hash identifier: 328DNMUt56koeaoUtsLP0Te4jgHgBDaiX40pZFZtxFM=
Subject key identifier: 77:E3:4E:9A:90:EE:E1:05:2D:AA:FD:29:6B:64:44:74:52:5F:21:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ECE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4C1C8628CD11F0AFBADFF2DAE4EC9C.roa
Signing time: Sun 04 May 2025 09:49:51 +0000
ROA not before: Sun 04 May 2025 09:49:47 +0000
ROA not after: Tue 08 Jul 2025 09:49:47 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97998 (0x17ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 09:49:47 2025 GMT
Not After : Jul 8 09:49:47 2025 GMT
Subject: CN=6817383f-4e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:2b:0b:c3:19:fd:92:47:57:78:c6:33:a1:
ee:69:ae:19:13:be:44:54:da:fb:07:14:0f:8d:5c:
a2:93:dd:b4:d6:80:a0:e5:ee:54:9d:fb:ca:2e:bd:
4f:6e:25:fd:4d:e3:f7:cd:a7:82:ce:7c:2e:53:82:
12:e6:23:6c:bc:a1:e7:d3:9f:b2:9d:43:cb:78:7e:
46:50:2e:22:0b:5a:bb:53:03:8b:e3:f3:ef:7d:c1:
9e:2a:3d:88:73:80:d1:75:64:ec:e2:23:a4:bd:ba:
55:c2:2b:8c:10:9b:78:f6:6f:67:49:4f:6b:ac:51:
ff:c2:2f:79:11:a8:ae:2e:74:03:f0:96:39:95:bf:
c9:cb:c1:07:d5:64:e3:93:f3:76:8b:28:8c:6d:2f:
09:35:19:48:bd:00:e4:59:07:ed:3a:a3:0c:c9:fa:
8a:c6:b1:5d:ce:5d:d4:7b:6e:73:5f:ed:89:73:ef:
9c:aa:55:17:b7:8b:49:e7:31:f6:38:55:61:2a:4c:
14:1d:35:79:31:f7:a7:52:a7:84:67:37:eb:86:55:
c2:13:12:ed:7c:dd:86:6d:d2:cb:dc:e6:f2:39:7f:
b9:f4:18:7a:9f:05:df:38:b8:40:f7:04:2d:6c:b2:
c1:f2:91:4d:ff:db:84:01:15:60:af:ce:9a:a1:78:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:4E:9A:90:EE:E1:05:2D:AA:FD:29:6B:64:44:74:52:5F:21:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4C1C8628CD11F0AFBADFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:80:85:0f:42:a8:ba:82:63:49:f5:a7:2f:26:65:ce:47:0f:
08:30:27:e1:5d:85:22:5d:6b:c4:36:35:fc:32:71:35:c1:f4:
df:32:d6:f3:13:62:0c:9f:3f:cf:e2:0f:68:50:74:f6:3a:1b:
fa:fe:f5:43:d3:de:9d:0d:bf:2f:be:34:9e:6b:25:47:b1:2b:
e6:31:8f:c8:12:6d:a0:c0:da:aa:ad:84:24:73:d6:a9:43:c4:
e2:17:9f:8c:39:13:24:ff:87:d1:fc:4f:63:1e:2d:de:9f:7d:
ba:3f:1c:9e:8c:0b:bd:c9:dc:f6:e5:a3:41:39:9f:44:46:68:
1b:a9:b9:df:e9:61:71:18:ef:76:db:39:b5:7e:63:4a:ec:17:
e5:41:72:11:d4:cf:89:50:eb:4f:d3:22:ba:05:8e:8a:0a:dd:
25:1c:18:48:0c:80:93:ea:c1:a7:32:59:8a:01:64:29:d5:0c:
41:0f:f7:fd:7e:b1:62:e5:32:ec:b3:d6:a8:96:9a:f8:5b:d9:
07:45:bd:d5:b8:7a:13:8f:8e:90:5d:75:e9:e7:ac:ca:36:5a:
da:13:38:a8:d3:b1:d7:93:e3:4a:03:3b:39:50:a7:8f:e6:d9:
20:34:2a:e5:68:08:0b:44:40:bd:0b:52:8a:b5:03:0e:d6:d3:
f6:64:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:42:18 2025 by rpki-client