Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B23E07C244211F0B823AD86DAE4EC9C.roa
File: 3B23E07C244211F0B823AD86DAE4EC9C.roa (raw, json)
Hash identifier: vT8qfp63C0UyzYM21n7k2qQzGjzXdBy6o98AF7NyQUM=
Subject key identifier: 62:5C:3F:F4:20:BF:0E:EF:FE:E8:38:AD:9E:B3:41:46:52:0F:88:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B23E07C244211F0B823AD86DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:05:33 +0000
ROA not before: Mon 28 Apr 2025 15:05:29 +0000
ROA not after: Sat 28 Mar 2026 15:05:29 +0000
asID: 984
IP address blocks: 154.82.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97317 (0x17c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 15:05:29 2025 GMT
Not After : Mar 28 15:05:29 2026 GMT
Subject: CN=680f993d-f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:68:e1:3a:62:6d:0b:48:56:00:0e:ac:2a:
e6:5c:1c:b9:08:20:ed:bd:38:bc:e1:ec:09:ff:b5:
b3:c7:81:8d:11:54:db:e8:6f:9e:cf:f7:47:7e:cd:
fe:71:b5:8f:44:23:ef:fe:e3:38:20:60:29:14:a1:
6c:ab:48:64:fe:96:f2:a5:81:3b:59:80:16:f1:84:
0f:fc:c6:df:53:81:56:43:78:55:c8:28:67:4e:d7:
1d:2c:b5:07:82:ac:68:39:6c:10:ab:08:41:8c:f0:
aa:ef:3d:86:26:83:24:ee:33:65:ac:5d:09:4d:63:
2d:2f:2d:42:56:5f:49:65:e2:a0:55:3a:c0:f8:b9:
b3:2a:fa:56:5a:6a:16:a4:72:4a:9e:06:81:7a:98:
a5:2e:6d:48:58:94:c2:d1:e7:51:d5:69:78:d9:d3:
83:c0:bc:23:60:bc:64:ed:99:bd:b5:c9:7e:4b:b9:
97:f5:eb:6a:cf:f2:81:18:c4:10:75:37:e9:4f:f2:
c8:af:49:9c:ab:f9:ac:05:89:37:d5:2a:2a:49:ab:
6e:78:b7:6a:9d:5c:bd:08:aa:b1:e2:bb:17:89:3d:
94:3c:65:e4:27:a1:78:b7:17:10:ec:6e:87:51:37:
54:e2:ff:24:a1:49:73:bb:cc:b7:01:9a:7c:f5:e2:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5C:3F:F4:20:BF:0E:EF:FE:E8:38:AD:9E:B3:41:46:52:0F:88:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B23E07C244211F0B823AD86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.149.0/24
Signature Algorithm: sha256WithRSAEncryption
29:17:37:81:c4:cd:79:ea:83:07:fe:84:46:9e:c6:4f:d5:31:
3c:c9:3f:ef:d3:79:93:4c:c8:46:b6:ca:b5:ef:31:ce:2d:26:
7b:4d:dc:30:bd:c9:c3:e0:6f:eb:ee:a7:c3:5f:50:14:bb:47:
09:17:db:0f:72:bc:37:c1:b2:24:50:72:74:e2:8d:5d:59:3d:
d3:88:9c:a5:d1:8c:98:0c:6f:ec:75:0c:a8:a9:0b:f5:b8:f5:
30:2f:52:09:8b:0a:34:5c:58:b5:24:4b:eb:fc:4c:34:bf:c4:
e2:06:18:e5:f4:63:d0:50:26:97:51:9e:d0:a0:b7:fd:3e:a8:
3a:21:fd:38:69:72:64:2d:2e:20:a4:d8:f0:8e:6b:65:84:85:
1b:bf:1f:47:fa:03:20:5b:73:6a:a7:67:35:cf:cc:f7:24:8c:
35:f3:68:58:ff:aa:a9:24:19:aa:9d:fc:04:05:00:98:d4:36:
78:ae:9a:19:48:68:e4:08:49:aa:26:6d:20:2f:5d:12:7d:83:
e8:6e:30:7e:94:ee:4b:e9:da:15:49:30:a7:52:25:a4:26:07:
7c:34:52:ca:50:bd:bb:a1:03:f0:5d:1c:13:9e:da:ad:b4:3d:
47:43:96:79:03:9d:cd:8f:fc:d9:8b:0a:61:dd:2c:e5:8a:76:
05:da:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:13 2025 by rpki-client