Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBF718C2F3E11F08004F485DAE4EC9C.roa
File: 2EBF718C2F3E11F08004F485DAE4EC9C.roa (raw, json)
Hash identifier: 78N/DHcG5qAhefXEiR/yIKjjW/3e8pHj+AVbg3ISUOA=
Subject key identifier: 98:05:97:98:81:9B:E9:B2:18:9E:34:C5:B2:88:9A:09:CB:4A:F2:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018027
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBF718C2F3E11F08004F485DAE4EC9C.roa
Signing time: Mon 12 May 2025 14:34:17 +0000
ROA not before: Mon 12 May 2025 14:34:12 +0000
ROA not after: Thu 22 May 2025 14:34:12 +0000
asID: 135097
IP address blocks: 154.204.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98343 (0x18027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 14:34:12 2025 GMT
Not After : May 22 14:34:12 2025 GMT
Subject: CN=682206e9-d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:47:18:86:48:e6:b1:72:73:82:61:05:84:
7c:c1:14:1a:9b:dc:5e:8c:af:a4:31:01:f1:64:50:
5d:f8:85:0c:51:34:67:61:31:da:a8:95:2a:c5:98:
8e:7c:b8:a9:84:fc:92:1a:94:a6:90:fb:54:f2:cb:
06:a4:05:35:25:ab:9c:6a:31:e0:b3:ec:62:29:b5:
ef:be:b6:5e:18:25:bb:69:6b:cc:e6:5d:f8:74:58:
5b:02:85:81:bf:84:62:26:3d:8d:d4:46:04:42:87:
d0:5d:89:e8:39:12:28:90:ca:69:89:27:56:7d:56:
a0:7a:a6:3a:f2:97:01:24:35:18:0f:97:9a:30:83:
88:e1:9e:44:16:fd:0e:6e:e6:b7:fb:9b:23:19:73:
5e:51:2e:44:f0:f2:56:29:64:f8:42:ac:e5:e4:d1:
71:2e:eb:f1:1b:36:0b:82:ac:b3:e4:1c:82:7b:7e:
13:b2:0d:ac:88:e0:57:62:3d:88:9e:d5:0b:0e:3b:
40:ab:34:92:74:c3:e7:5c:9e:18:06:7b:cf:48:f8:
dc:2b:f2:f0:ec:83:d0:31:3a:c8:3a:33:63:31:47:
1a:f7:8f:60:72:a0:aa:f3:82:5a:ae:6b:9d:78:3d:
84:b0:02:e9:78:17:ab:c6:24:5a:ee:20:ff:28:03:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:97:98:81:9B:E9:B2:18:9E:34:C5:B2:88:9A:09:CB:4A:F2:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EBF718C2F3E11F08004F485DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:fb:1e:94:e4:e9:51:6f:83:2a:c4:7e:4f:b4:53:e2:d3:7d:
77:3b:56:4a:a8:81:71:12:01:7d:bd:10:14:48:89:26:9b:a3:
8b:39:ab:cc:63:35:3a:bd:f6:91:90:d5:3f:bd:84:e9:d6:96:
44:87:a1:0d:0e:17:01:39:b1:a3:c6:c7:0e:5a:4d:18:cd:13:
12:c6:fe:f5:bc:7a:8c:36:44:f0:c9:3c:a9:05:93:29:46:23:
a0:b4:53:00:07:40:08:dd:b4:df:41:ba:fe:64:7a:56:1e:8b:
35:e4:06:24:0b:ad:fa:9e:b4:2d:7e:e9:be:14:a6:98:88:2c:
9f:28:54:ef:66:3b:c8:4f:ab:82:58:58:b2:f5:45:c3:2b:00:
f4:41:f2:90:4b:85:8f:30:fc:46:7f:36:b1:b6:89:47:c8:f0:
20:73:8f:fb:e8:a6:9b:25:87:c1:71:97:b4:36:bb:86:ba:2f:
23:83:0d:ac:fb:60:0a:6c:57:91:5e:76:a2:48:b3:c8:d7:32:
ce:41:21:50:1c:13:35:75:da:9c:c0:ed:28:1e:b6:54:68:6c:
d8:3d:30:60:2b:b1:14:0f:69:8c:c0:e7:f7:9b:89:ba:53:19:
6e:1e:90:aa:55:5a:2c:11:7a:3a:17:fa:2d:d0:14:ab:cd:78:
54:0d:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:04 2025 by rpki-client