Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/545A98A2242311F09A634DB7DAE4EC9C.roa
File: 545A98A2242311F09A634DB7DAE4EC9C.roa (raw, json)
Hash identifier: DhpiuSIhbmr7ApS0AWBCsQe82PB7rfyceWLwwjFwLdU=
Subject key identifier: E1:08:41:A8:3E:0C:AD:CA:63:E8:F1:8F:65:CB:76:44:EF:00:20:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/545A98A2242311F09A634DB7DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:24:22 +0000
ROA not before: Mon 28 Apr 2025 11:24:08 +0000
ROA not after: Wed 15 Mar 2028 11:24:08 +0000
asID: 17561
IP address blocks: 154.94.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97151 (0x17b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:24:08 2025 GMT
Not After : Mar 15 11:24:08 2028 GMT
Subject: CN=680f6566-e60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:a7:98:2a:55:72:02:23:6f:bc:dc:dd:0e:
ac:78:c4:e6:d6:ea:64:6a:72:da:b9:51:19:e2:52:
5d:9f:a6:7c:3a:c6:62:e6:10:bd:ff:54:b3:cd:7c:
5e:20:32:85:12:a7:b3:0e:f6:5c:c8:2f:d6:c4:77:
b1:c6:23:fa:13:54:85:01:d0:f5:7b:43:a9:4d:fd:
e8:46:c0:f6:9e:10:1e:28:00:6d:21:f7:8b:1d:a5:
3f:46:67:cc:f0:c8:4c:1a:0c:00:16:92:13:05:c8:
9f:8e:8c:a4:c4:13:36:bf:98:2c:0c:e2:54:ef:ca:
f9:26:bb:6c:94:52:a9:3c:c6:41:f1:c5:3c:d6:f0:
97:ec:e8:ce:37:d5:5f:8d:72:04:a7:11:5e:da:db:
01:49:35:f0:28:63:56:5e:b2:85:15:c0:54:c7:51:
15:dd:51:0c:ac:49:6d:2f:e5:a7:47:e9:68:ba:02:
9b:17:e9:63:b0:a7:02:96:df:59:52:44:df:b6:ee:
d8:f8:e2:17:f6:b3:b3:85:01:5a:96:be:21:e7:98:
2e:f5:1a:54:de:24:61:9c:3f:f5:76:3b:53:16:69:
d3:93:bd:6f:8e:62:d0:61:23:8c:79:04:ce:3b:9c:
a4:49:61:df:97:97:ec:27:b7:0b:65:c7:84:3f:c9:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:41:A8:3E:0C:AD:CA:63:E8:F1:8F:65:CB:76:44:EF:00:20:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/545A98A2242311F09A634DB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6f:3c:87:82:38:7c:52:a6:53:bb:76:e3:de:da:da:5d:96:
90:46:aa:31:04:9a:d3:80:84:9a:27:cb:bb:5e:15:fc:e7:aa:
95:93:37:6b:6d:d3:d2:de:ee:86:9b:44:55:fe:fa:69:a1:9f:
c9:ef:cd:01:b7:f7:cd:69:ff:4f:68:fb:fb:d9:2b:ab:61:ca:
54:9c:f9:0c:24:28:1c:28:44:48:5e:b3:75:ac:b9:7e:b8:4d:
9e:d5:06:24:7a:3d:d8:87:76:d5:51:a1:4e:53:c3:d3:6c:b2:
89:45:f4:2b:b2:ee:3c:b7:ec:c9:8d:c2:90:95:00:21:4e:30:
17:ce:75:21:d2:9d:c1:57:c0:db:20:e4:db:d8:dd:10:77:6b:
6b:16:63:e3:fd:44:c0:ca:b2:ca:13:e2:38:a8:75:02:8b:60:
fa:74:5d:8d:ed:c5:b8:34:81:57:62:92:17:1d:e6:a5:f1:f0:
89:12:c7:6c:75:5d:c5:90:b1:ca:c2:9f:a5:d4:7b:99:d2:66:
73:2d:3c:1e:f9:cf:f1:e1:6e:14:23:26:14:e8:01:3e:58:6c:
7b:0e:a0:6e:3b:4f:d6:5e:62:75:87:f7:26:cb:3b:5b:b9:bd:
86:36:6c:4a:3d:70:49:5d:7c:ca:18:09:43:86:36:28:cb:5f:
83:90:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:48:03 2025 by rpki-client