Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FAE7EDC316E11F0B2E60EB0DAE4EC9C.roa
File: 5FAE7EDC316E11F0B2E60EB0DAE4EC9C.roa (raw, json)
Hash identifier: DGEz70XQ2MGhyPi38a1wTTKteEBS9ek9pAICMRA9H1I=
Subject key identifier: DA:13:BB:0F:F4:94:B8:A9:17:39:59:3A:71:73:E1:95:90:CA:A7:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FAE7EDC316E11F0B2E60EB0DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:24:17 +0000
ROA not before: Thu 15 May 2025 09:24:12 +0000
ROA not after: Tue 24 Jun 2025 09:24:12 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98500 (0x180c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 09:24:12 2025 GMT
Not After : Jun 24 09:24:12 2025 GMT
Subject: CN=6825b2c1-5ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:c9:30:aa:d3:46:f0:af:a0:7b:ce:ec:12:
db:a5:93:26:f9:db:ed:0e:94:2b:1b:c6:fa:4d:26:
db:96:7a:8e:da:c7:8a:bf:6a:07:fc:ea:9c:15:1c:
c7:86:d4:7a:8f:f2:68:f8:75:90:24:6f:59:e6:e2:
a7:39:2f:4e:d4:9e:0a:df:36:1b:50:3f:39:52:4a:
1a:39:a0:76:1c:f0:87:bf:7b:4d:c7:6c:74:87:91:
b4:f7:89:3d:bf:d7:f7:46:9b:3c:6d:23:24:75:bb:
6a:fb:c5:cb:bb:45:a6:2e:f9:cb:91:8a:07:d8:87:
8a:e6:2c:49:a8:71:c2:38:4f:3f:90:86:8e:8d:86:
88:82:b0:58:5a:4d:6a:94:11:35:0f:13:fd:a9:c2:
30:7d:48:ca:26:ec:2d:8d:41:53:92:59:c3:de:56:
1a:a6:c1:66:21:13:1a:26:40:0c:30:25:27:4c:e0:
2d:0d:74:68:b8:ee:0d:e8:39:f1:03:a6:c9:3e:b8:
12:33:3e:fb:0b:0b:3e:33:44:d7:74:2c:85:ed:54:
c0:90:d5:58:e5:1c:e5:98:db:e5:2c:ca:86:7c:b3:
fc:2b:1e:73:7f:3e:42:9e:fa:bd:9d:fe:98:82:74:
8b:95:62:ae:14:b4:c6:ee:2b:ef:f5:37:4c:df:51:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:BB:0F:F4:94:B8:A9:17:39:59:3A:71:73:E1:95:90:CA:A7:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FAE7EDC316E11F0B2E60EB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6d:10:3f:65:74:f1:26:f1:32:28:70:0e:4c:23:d1:a8:1e:
96:60:2d:42:91:c2:b4:a2:45:23:20:23:82:f2:4a:1e:4f:d0:
60:08:ae:89:a2:d6:89:f1:7c:bf:60:5b:9a:36:08:82:17:e3:
c5:8a:3d:57:5f:65:1f:51:b8:8c:b8:82:f9:df:d6:ec:39:83:
09:c3:12:84:97:2f:35:c9:6c:3d:01:8b:da:39:6d:65:d8:e8:
e4:d3:ad:39:89:98:ab:d9:5b:2e:83:9a:16:f8:0d:7b:58:f0:
e5:b1:2c:c2:9f:48:3f:d0:c2:ab:64:ca:8c:f6:65:06:8e:c9:
83:72:5a:a8:b6:b8:d2:e2:5a:f8:51:d8:e1:b1:3f:5e:97:6b:
cd:2d:06:4b:64:a4:82:ba:3b:aa:94:b5:ed:59:f0:d5:93:ee:
f5:18:9e:d4:71:3a:23:7f:e5:79:45:11:15:c3:c2:4a:11:8b:
c1:d4:30:dc:91:01:55:7e:35:e0:0b:27:89:b6:1b:5b:1f:8f:
0f:ef:e7:5c:95:ad:f2:07:32:3a:21:ec:ad:63:ba:63:f4:5e:
38:02:31:cd:99:57:db:b1:d4:46:06:50:6b:27:f0:58:bb:fa:
00:3c:08:e1:cb:94:13:ab:a8:fe:43:3f:6a:a0:6d:c7:3a:c9:
36:c1:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:50 2025 by rpki-client