Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DEAE7E42F3211F0A542CDB8DAE4EC9C.roa
File: 6DEAE7E42F3211F0A542CDB8DAE4EC9C.roa (raw, json)
Hash identifier: j9+kgEaJyOFzogphsyyfLyBEfEePQc+1bkAfqZ+CByc=
Subject key identifier: 4E:DE:36:BE:56:F3:2C:CF:AD:D9:37:24:46:C5:8F:87:13:5D:71:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018017
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DEAE7E42F3211F0A542CDB8DAE4EC9C.roa
Signing time: Mon 12 May 2025 13:10:09 +0000
ROA not before: Mon 12 May 2025 13:10:04 +0000
ROA not after: Tue 20 May 2025 13:10:04 +0000
asID: 18013
IP address blocks: 154.207.55.0/24 maxlen: 24
154.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98327 (0x18017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 13:10:04 2025 GMT
Not After : May 20 13:10:04 2025 GMT
Subject: CN=6821f331-219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:90:7d:ac:04:db:3e:8a:ed:0c:d2:d3:5b:
1e:5a:ce:ea:33:4d:07:5c:b0:ef:44:42:82:ac:6c:
0a:d1:df:d7:1b:e7:e4:19:1e:7e:d1:a6:15:f3:c6:
25:39:e9:76:92:50:d7:89:56:4d:88:c9:3c:8f:38:
2a:d0:d7:ab:dc:ba:08:f8:1e:b2:4b:1f:44:76:58:
c3:74:d3:b1:50:f9:21:9a:28:38:8d:2f:e4:a0:05:
63:a5:c5:58:ea:4f:8e:c1:8d:fb:1e:66:d2:56:92:
45:d6:3a:11:95:ae:ba:b9:14:8b:2a:6a:6a:de:60:
99:22:ac:d5:1a:89:42:41:01:c9:80:90:72:0d:ff:
3c:56:42:a9:39:8e:86:45:8a:e8:3b:d7:b6:58:1b:
f8:41:95:7c:11:ba:e2:23:9e:37:52:f0:05:61:2d:
13:cd:9f:e7:10:44:f4:fd:c5:43:8b:46:48:d3:00:
df:39:96:61:95:a3:bd:a4:6b:7d:79:d8:98:d4:41:
c8:c1:bc:3c:06:09:de:0c:f3:1a:66:aa:1f:0d:34:
a3:23:d6:b8:d5:85:68:69:4f:53:d6:27:6a:7e:dc:
51:f2:fb:c0:40:9a:bd:29:a7:47:74:f1:3b:dc:d8:
c6:af:d0:84:5e:8c:be:29:94:3d:c8:71:82:e4:73:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:36:BE:56:F3:2C:CF:AD:D9:37:24:46:C5:8F:87:13:5D:71:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DEAE7E42F3211F0A542CDB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.55.0/24
154.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:7d:32:36:6f:69:74:78:df:02:20:a8:78:02:fa:dd:d0:
e0:db:bb:4f:7d:47:8f:11:b1:a5:6a:91:a4:1c:56:f8:8d:1c:
29:44:f6:86:2a:82:32:60:98:ca:b0:1e:28:46:c8:3f:9f:27:
ff:c0:09:7c:9b:b8:8e:ec:8b:86:27:6b:c7:ca:43:75:db:4c:
00:38:bf:f6:36:55:2e:6d:fb:4e:13:22:91:71:a6:ca:3d:b6:
1c:a5:94:30:5a:2d:2d:32:e5:6f:ef:04:14:7f:1a:28:c2:7a:
d4:fb:52:fc:3b:bb:61:db:05:67:2b:0b:92:b7:45:51:3d:98:
d5:e2:69:a8:d7:d3:56:01:4c:df:49:8e:7a:59:3b:fe:8a:5c:
71:d2:0f:19:96:ed:7d:39:4f:de:72:ea:00:b8:8f:29:42:72:
8f:b7:c3:34:a9:ff:3f:99:8f:b7:26:b2:1b:07:49:a1:b5:99:
79:ca:a7:e0:2d:9f:96:aa:dc:f3:6e:0e:77:2c:39:2d:a1:9d:
72:70:10:bf:c2:44:9c:ef:30:47:ea:fd:df:45:37:73:e0:af:
0c:62:db:64:50:17:a4:19:48:24:fb:97:0d:aa:31:45:bf:98:
31:2c:33:6a:cb:83:35:4b:63:42:cc:45:eb:b7:18:88:45:dc:
33:08:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:36 2025 by rpki-client