Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BF3F94242111F09F6D8DA8DAE4EC9C.roa
File: 30BF3F94242111F09F6D8DA8DAE4EC9C.roa (raw, json)
Hash identifier: 3oNeB1uPwlZhsEcwfSD2iVnW+iKN7l9r4YjR4DbnZK0=
Subject key identifier: 44:A1:8E:5A:CB:6F:8C:33:AB:A9:B0:E4:1C:87:12:8E:85:E9:58:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BF3F94242111F09F6D8DA8DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:09:02 +0000
ROA not before: Mon 28 Apr 2025 11:08:57 +0000
ROA not after: Sat 31 May 2025 11:08:57 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97143 (0x17b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:08:57 2025 GMT
Not After : May 31 11:08:57 2025 GMT
Subject: CN=680f61ce-d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:f1:c2:11:c2:86:28:48:53:35:e1:52:c5:
29:af:66:02:df:89:65:e7:bd:fe:39:61:16:6c:56:
a6:1c:10:a6:59:9d:8c:ab:b1:43:f8:03:ee:42:1d:
57:fa:b3:67:4e:c9:f2:01:31:ba:68:be:67:06:78:
be:db:bb:c5:90:46:a7:6f:56:08:32:a5:47:9c:dd:
e8:0d:c7:47:5f:0b:9f:5b:36:36:35:fc:0d:e1:5b:
2a:b7:b0:07:9b:78:7f:8a:99:05:25:8e:6b:5d:51:
85:73:e1:a0:c6:6d:7c:85:4b:8f:fc:40:28:b0:f8:
0d:4c:50:bd:34:2b:49:4f:f9:70:58:4d:e0:e4:53:
2b:b8:b7:b8:73:1f:7a:3a:9c:c8:5f:23:d5:ad:37:
56:d5:3d:ee:34:c0:68:1c:dc:fe:6a:f2:01:b5:32:
3a:46:57:b5:7b:f9:bd:23:9b:50:f2:1f:ce:eb:10:
ce:6f:3c:d4:35:b7:9a:d8:7d:1b:94:9e:89:dc:bd:
b0:42:3e:b2:39:81:8f:d3:dc:62:85:57:63:80:a7:
e9:fa:0c:d8:fd:61:b9:07:87:89:ad:e5:41:02:32:
bc:19:f5:8d:e6:40:49:48:6c:81:42:28:e4:57:3e:
46:bc:43:48:b8:95:e0:04:60:ba:09:bc:5d:88:51:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:8E:5A:CB:6F:8C:33:AB:A9:B0:E4:1C:87:12:8E:85:E9:58:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BF3F94242111F09F6D8DA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0-154.82.167.255
Signature Algorithm: sha256WithRSAEncryption
4f:ef:49:22:7a:d6:47:16:fe:8e:2b:3e:b8:e5:0a:4c:66:93:
f8:84:7a:5c:df:40:e9:6f:ad:21:64:79:f2:27:5e:cc:8e:a7:
19:5a:78:38:b3:ce:67:47:39:50:71:e3:07:5f:12:96:29:b4:
c7:6c:36:b5:22:7d:f0:b2:96:74:6e:74:35:dd:40:c0:e5:48:
c4:a6:70:58:3b:ee:4a:3a:a4:57:f7:7e:33:83:72:3e:5f:b1:
a4:dc:58:55:29:86:bd:a1:67:73:a8:4a:e9:53:17:18:ea:94:
b3:f6:9e:53:52:a0:ea:e3:01:4f:aa:44:a0:f1:95:f1:b4:9a:
f5:74:6c:d4:9f:93:c7:01:db:33:5f:ac:f7:0b:38:0e:57:c7:
83:4f:72:73:b2:d9:eb:5b:86:bf:57:6f:13:3a:b3:a5:02:20:
93:16:cd:5c:89:c3:eb:15:ba:13:03:bf:84:6e:c0:3d:93:53:
c8:98:e2:2b:e8:ea:87:96:6c:17:a1:ca:92:5e:71:a8:e4:58:
cf:70:bf:36:a4:b7:fb:2a:07:a9:4f:3b:b9:5d:c3:cb:60:76:
b2:01:4a:63:fb:ed:fd:47:89:23:f2:63:72:c9:39:c2:ff:fc:
40:b2:33:7a:ec:ea:27:74:70:8b:e5:1c:66:90:e6:fc:54:b2:
02:47:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:07 2025 by rpki-client