Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5134CB902EDA11F08010E3E1DAE4EC9C.roa
File: 5134CB902EDA11F08010E3E1DAE4EC9C.roa (raw, json)
Hash identifier: sAyGYY4xugax2NTBMSKGNFJuYWvQUsZdViff2GpifMM=
Subject key identifier: C1:E8:01:16:1E:5D:A4:92:A6:BB:37:FF:B4:E6:FA:FD:2F:07:48:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5134CB902EDA11F08010E3E1DAE4EC9C.roa
Signing time: Mon 12 May 2025 02:39:25 +0000
ROA not before: Mon 12 May 2025 02:39:19 +0000
ROA not after: Sun 01 Jun 2025 02:39:19 +0000
asID: 139646
IP address blocks: 154.214.32.0/19 maxlen: 24
154.216.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98257 (0x17fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 02:39:19 2025 GMT
Not After : Jun 1 02:39:19 2025 GMT
Subject: CN=68215f5d-80f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:07:95:05:53:1c:cf:af:e1:3d:6c:19:7f:
10:72:5d:88:aa:d2:35:44:cc:d6:92:4a:b9:e4:69:
26:1c:17:b9:7e:3e:34:c3:70:2d:0a:43:6d:c2:1d:
84:ee:fe:cd:f5:76:f0:6a:8e:de:2c:28:6e:53:fa:
48:19:b5:cb:3a:3f:79:8e:9e:99:60:6a:d5:dd:cc:
42:ac:42:7e:fb:2b:ba:0e:dc:f0:85:61:84:cc:b7:
a6:39:28:fd:a2:fd:60:97:40:14:fd:c4:7f:d5:0b:
53:62:22:ef:2e:61:67:5f:0f:d6:0d:07:b3:4d:de:
e5:36:f4:59:35:cd:66:b0:24:5c:a0:a5:0e:ac:55:
9e:7b:0d:97:1d:1e:36:49:66:6b:d3:9d:c6:52:5d:
d5:fa:30:1f:84:ee:42:be:1f:8f:1d:aa:0b:9b:5c:
1d:70:78:69:66:1c:1c:b3:b2:e4:ad:52:1f:de:41:
21:19:01:6d:3b:9a:08:b7:0d:6b:41:45:c1:95:31:
b6:7b:ca:56:ec:45:5a:38:cf:5b:dc:f3:ea:52:f2:
0e:73:e2:0a:02:40:fd:4e:56:24:27:ef:0f:2f:f5:
e1:a4:62:39:a5:c3:ac:65:8c:bc:e1:e2:1a:f7:77:
c9:c2:b0:5e:f9:27:8c:dd:e7:ce:19:6f:fa:c2:6a:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:01:16:1E:5D:A4:92:A6:BB:37:FF:B4:E6:FA:FD:2F:07:48:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5134CB902EDA11F08010E3E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
01:62:28:05:0b:88:ab:3d:df:06:c3:03:35:80:3e:1a:79:53:
3f:66:28:10:8d:73:23:00:d6:22:30:f8:b3:73:7c:1b:58:24:
ee:28:10:f5:4c:03:b1:59:ce:e3:e9:b5:32:e4:b2:92:90:31:
f7:e2:9f:47:98:2e:30:9d:e7:c2:32:5f:4c:dc:69:47:bd:39:
d1:da:3f:40:cb:9c:24:22:77:05:58:58:ea:60:25:82:1d:47:
77:e0:9e:67:fb:16:88:4c:78:a9:60:ca:1e:7c:2d:d8:fa:ef:
1e:5f:09:6b:81:7a:80:9b:d6:29:a3:bc:8a:ca:89:23:e0:f6:
ad:75:60:03:b0:be:ef:05:6e:ab:c0:55:2e:7b:0a:11:d7:00:
fa:54:e9:2c:1d:75:1f:44:f0:1c:c7:85:f6:0b:73:24:4c:de:
37:a0:a3:86:4f:bb:f7:1c:53:15:d7:97:0f:38:af:9b:27:34:
94:ad:f5:ea:19:96:ae:64:ad:88:2c:a2:e9:06:19:54:6b:be:
63:a1:80:c8:f3:38:4d:80:84:2e:c8:91:a5:4b:5f:84:26:10:
cb:60:c5:cd:00:b2:56:8e:9c:5e:e2:39:89:81:62:f2:c7:75:
f0:0b:e9:67:54:38:ec:59:16:c6:78:50:df:46:65:4c:c4:d4:
96:76:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:44:53 2025 by rpki-client