Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5795173A2B1811F0986829CDDAE4EC9C.roa
File: 5795173A2B1811F0986829CDDAE4EC9C.roa (raw, json)
Hash identifier: uLamrpdB14DFCdnFJBqvhIhCIIC6jKvFmzo91LNyxRc=
Subject key identifier: 96:C6:BF:D3:B5:99:99:30:C8:E1:98:D2:0E:FF:99:31:54:32:E1:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5795173A2B1811F0986829CDDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:53:20 +0000
ROA not before: Wed 07 May 2025 07:53:15 +0000
ROA not after: Wed 11 Jun 2025 07:53:15 +0000
asID: 36680
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98111 (0x17f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:53:15 2025 GMT
Not After : Jun 11 07:53:15 2025 GMT
Subject: CN=681b1170-7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:fd:c7:50:9b:a5:99:10:9e:19:a3:11:8b:
bd:37:eb:e7:2f:05:0d:48:c2:93:bf:44:b3:c6:b3:
20:1b:cf:c7:36:c3:7c:2a:34:d8:b8:f4:dd:7c:73:
f6:f3:01:cd:2e:ed:4f:70:4a:63:83:b3:ff:d2:94:
ef:2b:02:9b:19:8a:58:d2:1d:81:38:e0:a8:da:db:
c4:81:14:bd:32:25:f7:19:0e:83:37:38:2d:5b:ef:
e9:65:d6:9e:ef:d8:5a:16:1d:f5:16:9e:e8:f2:ec:
3b:00:19:1d:24:9e:df:4f:f7:39:1d:fd:55:12:d3:
4e:4c:bc:2f:a7:b9:d6:ae:8a:d9:55:ae:e9:d8:1f:
02:93:1a:98:3d:eb:eb:d4:ec:92:2e:e7:ec:60:33:
de:6f:01:e2:5e:a3:7b:ae:d9:5c:0b:25:29:a9:60:
06:bb:d8:4e:2d:0e:a2:9b:b2:b0:c1:4a:12:dd:db:
12:c8:59:9f:6f:ec:ee:14:03:2e:9c:21:00:d7:0b:
de:4e:54:c0:fe:eb:3e:33:9b:22:16:89:04:0c:1a:
4b:d8:68:6c:69:35:ca:c3:0f:52:c3:98:b4:e4:eb:
6f:78:ab:da:29:ed:cc:2d:2a:8f:da:75:5c:6c:85:
e5:cd:7c:3f:b3:ab:99:33:0c:aa:13:9e:58:17:21:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:BF:D3:B5:99:99:30:C8:E1:98:D2:0E:FF:99:31:54:32:E1:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5795173A2B1811F0986829CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f7:65:e1:b9:60:6c:b2:db:6a:2f:31:56:29:cd:ca:94:47:
ab:7c:81:5e:d3:d0:d6:f2:8e:5d:a4:c1:dd:6b:21:dd:b2:21:
bd:52:ec:89:e6:05:dc:87:e8:8c:1b:6c:5e:f4:c0:30:f1:82:
34:37:1b:fe:9d:5b:81:c1:41:45:ad:b2:e4:c9:fa:c7:da:a5:
85:f3:b4:29:af:69:93:23:26:3d:09:c4:03:25:ae:0f:8c:1a:
c5:98:a5:83:fc:a9:0d:9a:98:77:86:fa:79:b8:6b:d0:5a:7f:
47:79:c5:3a:ac:e3:b8:87:47:62:94:18:9a:a1:b8:b2:2e:9b:
cb:54:df:a0:34:e8:75:38:e4:d9:1b:9b:ac:50:e6:9e:34:66:
11:a7:f5:eb:ad:09:5f:94:39:72:c3:ef:d0:c6:f4:42:41:13:
f1:ca:b7:24:3e:67:50:dc:b3:ee:39:85:f7:87:28:54:72:25:
dc:da:2c:38:3b:3c:6d:3b:9a:3f:3f:ac:55:5e:99:53:9d:d3:
df:4a:11:96:b5:3b:8c:55:3b:28:2f:6d:bb:eb:00:f6:e6:23:
ee:77:f8:a1:a7:83:9e:bd:74:d2:d9:d3:ae:0c:eb:7c:f1:17:
f0:a2:1d:e0:35:60:96:24:6b:fa:90:08:30:38:77:a5:37:b9:
ab:c6:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:41:19 2025 by rpki-client