Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CAFEE243011F0860C568FDAE4EC9C.roa
File: 645CAFEE243011F0860C568FDAE4EC9C.roa (raw, json)
Hash identifier: /s2EbpwfO1O0WEveKdzd1WoCL7z+7oXCCzDeaYM2YGE=
Subject key identifier: 65:9B:BA:A5:35:93:64:0F:40:43:E2:4A:8F:BF:8F:4E:70:14:80:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CAFEE243011F0860C568FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:57:51 +0000
ROA not before: Mon 28 Apr 2025 12:57:46 +0000
ROA not after: Wed 04 Jun 2025 12:57:46 +0000
asID: 395793
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.104.0/24 maxlen: 24
154.193.107.0/24 maxlen: 24
154.193.108.0/24 maxlen: 24
154.193.109.0/24 maxlen: 24
154.193.110.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97223 (0x17bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:57:46 2025 GMT
Not After : Jun 4 12:57:46 2025 GMT
Subject: CN=680f7b4f-631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:95:b9:4e:ab:0f:09:ef:0b:6a:79:93:90:
92:85:25:70:43:e2:e5:a8:d0:e1:fb:c1:8d:9c:89:
75:4d:72:b3:12:2c:98:7c:5f:5e:f2:2e:dc:eb:e0:
92:1c:e8:ff:ab:85:d0:f1:3f:76:6d:9f:18:a1:4b:
f9:e9:9a:80:f0:bb:88:8b:05:04:01:77:61:8e:7e:
0d:33:dd:23:85:6e:7a:cd:1e:9c:0a:b8:9b:6a:ee:
c9:d0:2d:fd:f2:c6:13:87:2f:8b:56:cc:e2:33:9f:
21:18:37:dc:fb:ab:57:b5:58:14:65:c3:b6:78:9f:
be:08:67:5c:25:3b:7a:1e:e2:21:78:db:66:4c:ec:
e4:69:c2:79:a7:0b:8d:b6:38:eb:8b:27:44:0c:b4:
de:dd:d2:38:a0:18:fa:58:16:8a:3d:1a:5d:1c:be:
f3:a3:fd:a7:6f:bc:3e:92:2c:ea:71:7e:79:18:d8:
cf:5a:74:7e:3d:48:da:e9:4e:8c:9b:92:57:ad:67:
fb:20:81:9c:dd:ec:61:a6:58:e2:50:d9:76:bc:86:
59:e0:08:d9:f0:6b:25:40:4d:bf:a9:2e:e2:23:a1:
02:1c:b7:35:96:54:ca:b3:13:5e:40:08:99:09:4e:
3f:f7:ff:97:1c:d6:94:c2:e8:04:95:14:22:4e:ae:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:BA:A5:35:93:64:0F:40:43:E2:4A:8F:BF:8F:4E:70:14:80:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645CAFEE243011F0860C568FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0/24
154.193.104.0/24
154.193.107.0-154.193.110.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d9:6e:d7:1b:d9:92:d9:48:99:2b:07:5b:62:a7:2a:dc:93:
06:cc:42:26:7e:70:f2:26:99:fb:dd:10:69:0a:b4:5c:20:90:
6a:46:d6:eb:9c:68:ea:77:6f:49:b2:94:87:12:8c:28:ad:1d:
3e:26:ad:05:2d:2d:ee:a5:8b:23:b4:de:5c:72:fa:28:b9:09:
e1:9e:1a:e0:b5:42:70:d7:15:5d:c0:17:1c:92:b2:f3:13:09:
65:41:27:da:4d:fb:5e:7c:4c:a0:5e:04:9e:f2:c2:21:9d:1f:
5d:0d:85:7d:5e:e0:e0:58:64:dd:2e:6f:25:d7:a7:9f:e5:1a:
aa:f3:c5:d8:9f:69:63:f7:cc:0f:ab:f0:71:1e:6c:93:b0:32:
c4:7a:92:ac:d0:27:12:b9:16:ac:e1:67:c7:2f:84:12:82:9a:
95:5b:0c:5e:cc:c3:32:9b:1a:cd:75:a5:fe:2c:d6:0a:f8:70:
26:9e:af:56:ab:e1:e4:7e:44:8c:e6:b1:4f:d2:d2:3e:b6:ac:
59:ee:14:8e:88:f1:b3:72:88:b5:9d:35:b9:6c:4d:8e:fb:c0:
e3:eb:7d:bb:ef:c3:8a:33:bd:89:fe:ff:98:f3:27:88:ea:05:
3f:65:97:11:45:3f:6e:1b:ac:a2:be:0d:b6:78:3f:c0:11:f2:
c7:21:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:02 2025 by rpki-client