Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475800582FFF11F094B70D94DAE4EC9C.roa
File: 475800582FFF11F094B70D94DAE4EC9C.roa (raw, json)
Hash identifier: aNmQ+L2+8fN1XGWk/JiluWiYOVges5/NXEvTs5CQue0=
Subject key identifier: B8:4F:6C:BD:20:E3:22:EB:B0:EE:00:AF:8E:D0:4C:94:C7:59:47:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018074
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475800582FFF11F094B70D94DAE4EC9C.roa
Signing time: Tue 13 May 2025 13:36:31 +0000
ROA not before: Tue 13 May 2025 13:36:27 +0000
ROA not after: Sat 21 Jun 2025 13:36:27 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98420 (0x18074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 13:36:27 2025 GMT
Not After : Jun 21 13:36:27 2025 GMT
Subject: CN=68234adf-b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:ac:59:1c:46:17:ff:24:51:bf:72:ee:ac:
82:f8:e9:de:6c:98:c0:86:3b:e1:3f:ca:5a:db:80:
41:17:27:35:ef:1a:40:5d:db:ed:c7:13:16:e9:a9:
a3:c5:fc:05:43:f5:12:ea:5f:00:4c:3e:2c:d6:42:
32:6d:e8:08:bd:d8:d3:e8:c5:0c:a7:67:de:db:57:
68:90:3f:c8:65:7d:a5:6c:29:1e:65:94:c9:82:f4:
03:f1:c8:7c:84:b9:74:62:e4:90:48:5c:2e:5c:af:
45:43:ba:c9:85:e2:9b:5b:1c:e2:85:d1:48:e4:24:
60:ef:10:59:ff:1f:99:59:58:2f:ee:ab:34:34:8d:
46:a6:9b:1e:63:c7:bf:f6:a5:b5:e7:fb:84:93:9a:
51:5c:5f:22:96:6e:6f:2a:e3:6c:39:ba:33:20:db:
96:d6:87:fc:f6:39:c3:64:68:be:9e:6f:6c:94:d7:
8b:9f:8d:16:d5:ef:4d:ff:6c:99:b2:ec:1d:f5:2e:
93:02:5f:3d:ec:8b:8d:da:90:c6:57:89:5d:7d:82:
cf:d5:23:df:54:cd:97:8d:47:05:38:d4:1c:21:07:
2d:ac:53:1e:1e:dc:8b:e6:57:72:d3:67:5f:f2:21:
17:df:2a:d4:ef:ea:88:55:65:bc:df:92:1a:03:f7:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:6C:BD:20:E3:22:EB:B0:EE:00:AF:8E:D0:4C:94:C7:59:47:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475800582FFF11F094B70D94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e0:c3:41:4b:1d:9f:ad:41:80:db:71:7e:f7:dc:fe:49:18:
0e:f3:d8:86:b8:04:80:cf:53:cd:82:38:bb:8c:71:13:84:f7:
22:20:4d:79:10:e3:3c:85:44:9f:c0:b8:2f:43:a8:ad:7f:2c:
f9:2b:8d:6a:dc:6d:95:4c:a5:ef:63:44:98:07:f4:7e:df:2e:
c4:6a:92:d3:70:69:8e:32:db:62:6d:ea:eb:a2:71:9b:88:5d:
c4:3c:0e:85:6c:c8:68:21:c9:16:f8:4e:04:1c:69:6c:cb:87:
38:a9:16:3e:b1:07:0f:aa:68:4a:f4:ff:26:58:04:03:77:6d:
0e:57:39:b8:46:30:a1:8b:24:df:a7:4e:ba:2a:89:41:2d:9a:
4b:7b:81:f1:ed:8b:20:ac:93:dd:21:55:d8:14:65:7a:30:68:
2e:6e:ff:1a:ef:ab:e5:6a:62:66:50:f4:a8:43:a1:46:51:9f:
f8:8e:c8:8d:67:21:d9:c3:b2:ab:b2:2f:90:31:25:21:70:5f:
66:32:f6:7d:c5:c3:9f:ad:e3:a8:eb:3b:16:dc:ce:ad:ce:8e:
1a:48:e5:12:1b:b5:86:cf:ed:2c:25:bb:66:4a:61:99:d3:10:
cc:1f:c5:46:02:0e:b2:cf:61:3d:23:ad:66:a1:b4:d8:29:f5:
9a:35:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:41 2025 by rpki-client