Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C0A6A8E2BFB11F0A48A13BADAE4EC9C.roa
File: 5C0A6A8E2BFB11F0A48A13BADAE4EC9C.roa (raw, json)
Hash identifier: i0r7KDB0ccW6/i6PwqwSsvCixV03+RxWQ2nGyTNSY2E=
Subject key identifier: B7:8B:7E:AD:2D:4A:4A:B8:65:52:72:7D:75:58:D1:11:97:CC:8E:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C0A6A8E2BFB11F0A48A13BADAE4EC9C.roa
Signing time: Thu 08 May 2025 10:58:23 +0000
ROA not before: Thu 08 May 2025 10:58:19 +0000
ROA not after: Fri 08 Aug 2025 10:58:19 +0000
asID: 9294
IP address blocks: 154.210.32.0/19 maxlen: 24
154.210.64.0/19 maxlen: 24
154.220.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98194 (0x17f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 10:58:19 2025 GMT
Not After : Aug 8 10:58:19 2025 GMT
Subject: CN=681c8e4f-32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:d5:cb:1d:59:e6:b6:27:9e:18:82:b4:54:
fe:e0:86:f8:0e:c1:12:33:50:ca:35:72:1b:86:69:
24:1b:ee:0e:bc:c9:9a:1e:ff:d0:9f:c9:10:34:a1:
52:98:b8:e2:4c:66:e6:27:c4:65:96:76:c3:ad:4b:
4e:41:e8:87:db:73:22:ae:57:f5:4a:2d:7a:4b:91:
42:94:33:9c:38:07:75:3a:e7:ad:66:63:8a:8c:6f:
5a:7e:35:26:72:f8:24:64:92:d0:86:4c:d4:30:d7:
c6:5c:08:c6:90:7b:61:42:9e:e1:6e:8e:ad:88:b4:
7e:56:f5:01:be:88:57:f4:c7:97:89:b1:01:42:2c:
0d:6f:4d:d3:03:e3:f9:51:df:d1:07:84:2c:de:00:
dc:ef:93:59:e9:d0:76:f5:b3:b1:59:55:76:89:66:
b9:9e:83:a9:be:36:9d:09:0f:7f:12:ae:24:9d:22:
ce:8f:75:ba:e1:0d:ec:f4:18:01:ec:47:f2:36:c8:
00:d2:36:e3:7e:62:f5:e1:fe:4d:85:af:4c:59:07:
87:12:a2:ee:ef:e1:bf:25:87:96:0e:02:12:89:11:
38:fa:4d:5d:a7:0a:97:f7:2f:31:f8:29:8b:1d:5b:
81:1e:ee:04:5c:95:c6:7d:51:86:78:0d:bf:57:54:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:7E:AD:2D:4A:4A:B8:65:52:72:7D:75:58:D1:11:97:CC:8E:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C0A6A8E2BFB11F0A48A13BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.32.0-154.210.95.255
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:e3:cc:73:e1:84:1c:88:67:74:f6:13:00:3d:ef:5f:57:39:
b4:6f:d5:a4:a8:3c:b7:31:3f:d3:3f:6e:fa:a6:5f:6c:7c:b6:
93:43:52:4e:b0:05:8d:88:07:38:a0:53:1f:bb:28:ec:11:ed:
9d:d9:50:b0:d5:29:ae:c8:b8:7f:c0:df:e0:2e:6d:b3:76:a5:
4b:42:e3:bf:d2:2f:44:c1:2d:4f:34:4b:1f:22:03:8c:30:29:
42:94:20:1b:68:4c:27:a5:43:31:e9:a1:1b:a7:c5:4b:e3:4d:
41:5c:54:9b:42:0a:9c:56:e9:61:b8:7e:95:0a:02:28:9f:92:
76:b3:77:40:75:2d:00:0a:a3:68:8d:f0:64:e1:4e:bc:f1:f3:
5d:ff:91:f2:3e:6b:ec:f7:7c:6e:39:6f:be:9e:22:20:19:16:
b8:38:d3:82:5a:03:48:e5:bc:77:c8:6d:9d:39:48:d3:a3:2e:
7a:66:7a:89:75:6f:41:d2:02:6c:b2:8b:00:07:d4:08:85:04:
7c:e4:0c:2f:79:38:2c:04:58:c7:04:fa:e8:81:74:d4:b5:ab:
49:2c:4c:9a:2f:a9:48:99:06:ff:22:7b:5d:39:25:96:2b:f0:
c1:f2:a3:9a:7f:19:e6:9b:27:bd:19:63:90:85:19:10:ed:b9:
aa:23:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:09 2025 by rpki-client