Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/294B0808273A11F0AE2D94EBDAE4EC9C.roa
File: 294B0808273A11F0AE2D94EBDAE4EC9C.roa (raw, json)
Hash identifier: Zvm8WGzsE12ITxzG3cY+r8C8h/jljmCalaKmiuHADwc=
Subject key identifier: A1:C6:50:13:7A:D7:14:E4:7C:C7:31:5D:6F:03:90:A6:C1:95:00:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/294B0808273A11F0AE2D94EBDAE4EC9C.roa
Signing time: Fri 02 May 2025 09:45:21 +0000
ROA not before: Fri 02 May 2025 09:45:15 +0000
ROA not after: Mon 12 May 2025 09:45:15 +0000
asID: 140570
IP address blocks: 154.91.5.0/24 maxlen: 24
154.91.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 09:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97890 (0x17e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:45:15 2025 GMT
Not After : May 12 09:45:15 2025 GMT
Subject: CN=68149430-4339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:a4:f6:07:61:d3:d2:97:c0:ae:0e:6b:f5:
4f:57:5a:b9:e9:7e:8d:d4:2d:72:13:4a:2d:a2:d4:
5a:f8:a5:6b:fd:b8:44:70:d8:e2:7b:76:77:fc:6a:
df:f3:dd:b8:d1:6b:c0:a4:f5:d5:fe:41:83:04:bf:
35:71:2a:b1:8c:e0:86:eb:7a:17:89:cd:10:06:46:
31:de:bf:dd:46:57:e7:d3:36:21:0a:ac:b5:bc:25:
c7:ac:ba:7d:a7:93:a8:c3:15:bd:e1:e4:8d:5e:6d:
7a:d2:60:1f:85:50:00:49:e4:fd:51:93:03:af:f6:
8c:40:15:6c:32:49:a2:29:d7:e5:90:cf:51:e1:8f:
72:a8:4b:25:70:ab:e5:36:59:4d:51:fe:d3:50:ff:
49:b1:93:d1:08:b0:f0:01:f2:24:9a:d9:99:dd:fb:
90:7d:b0:0d:bf:43:06:2d:9e:2f:62:15:df:28:63:
2d:23:9f:1e:43:4b:ab:69:ea:52:74:d6:e8:93:32:
aa:ec:09:4d:c2:40:c9:f8:9c:30:ea:f2:56:d0:66:
09:ff:e1:38:d8:5b:8c:74:88:7f:ba:40:14:d9:4f:
ad:1c:0a:d6:0c:45:34:ef:f4:22:16:12:42:85:4a:
bf:d2:76:b4:46:6d:7a:d8:8d:5a:c3:eb:c3:04:3b:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:50:13:7A:D7:14:E4:7C:C7:31:5D:6F:03:90:A6:C1:95:00:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/294B0808273A11F0AE2D94EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.5.0/24
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:22:49:7d:30:eb:82:b7:4a:c8:7f:f6:a2:1f:09:93:2e:44:
40:96:f4:bd:0f:29:96:cf:9b:f5:e0:34:ac:91:16:52:3a:de:
e0:d3:06:de:51:77:53:7e:07:88:ef:36:33:11:1a:ac:49:ab:
98:c9:96:e1:93:70:da:19:b3:84:95:b2:65:ca:5c:f0:30:6d:
79:b2:3f:e8:62:79:65:f6:6a:f7:90:f2:7c:80:c3:2f:cb:34:
1e:6a:50:84:96:50:8a:c3:03:32:0c:be:be:7e:23:00:b4:bc:
42:e6:3f:0c:8a:ad:87:01:50:6a:2d:42:9d:73:44:1d:32:ce:
82:45:71:95:5c:a4:f5:3b:a1:43:02:80:5f:be:14:a8:76:ac:
3c:6b:10:1b:a3:10:bf:24:66:35:fc:ad:85:23:5d:3b:cc:1e:
55:26:25:a5:97:83:16:5f:29:90:07:1b:a8:13:19:f8:cf:2f:
d4:cc:43:47:b4:6d:00:cf:23:d7:cb:14:b6:78:a4:37:f1:4a:
41:6c:69:88:26:47:95:46:0c:9a:b9:29:f4:36:c5:9e:2d:60:
e2:e7:69:d5:11:47:9c:18:c4:92:60:38:eb:e9:56:a4:e6:ea:
f7:a5:19:42:a2:48:39:f7:21:0a:61:27:ca:e4:b0:50:59:45:
59:38:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:56:00 2025 by rpki-client