Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7534AAF02F2611F08EC8C3E7DAE4EC9C.roa
File: 7534AAF02F2611F08EC8C3E7DAE4EC9C.roa (raw, json)
Hash identifier: ozJ5C+TBtjrvmXhFor8KIq7qvMKzEiAsguz0R5eQ+hg=
Subject key identifier: 39:F0:CC:19:8C:D9:7F:9C:3B:DF:3B:2D:EB:71:B2:62:11:92:B0:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7534AAF02F2611F08EC8C3E7DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:44:27 +0000
ROA not before: Mon 12 May 2025 11:44:22 +0000
ROA not after: Thu 24 Jul 2025 11:44:22 +0000
asID: 140570
IP address blocks: 154.91.5.0/24 maxlen: 24
154.91.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98295 (0x17ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:44:22 2025 GMT
Not After : Jul 24 11:44:22 2025 GMT
Subject: CN=6821df1b-f970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:10:24:5e:67:d5:1f:87:56:76:a6:9b:2f:
ac:be:40:91:09:db:8d:c9:e5:59:c1:53:fd:86:fc:
c6:06:fd:a6:dc:f9:27:6f:74:f3:ac:db:56:cd:35:
8a:e8:94:e1:36:fb:c7:8d:e3:b7:61:4b:c3:23:2d:
4f:dc:7b:52:61:c0:0a:bd:0d:f9:06:13:c3:be:36:
8a:66:a2:41:70:b7:02:37:dc:24:e7:22:4e:f3:23:
9a:e6:85:b1:73:88:36:2d:b7:f7:b0:8d:7f:85:8b:
75:6d:42:3a:cd:e3:6d:9a:72:ac:b5:8c:a2:91:82:
ef:67:39:82:8d:62:1d:e0:8b:ae:9e:42:7c:e5:5f:
ef:79:90:d4:49:b8:62:95:a8:b9:f6:3e:0e:de:93:
11:08:05:35:34:57:00:66:0d:31:67:eb:ac:19:6c:
c4:68:73:09:1f:84:1c:13:b7:e1:00:92:5d:27:bf:
75:d8:c1:67:6f:67:4f:1c:e5:6a:b1:66:d4:e7:4e:
e5:b4:74:75:00:ce:27:3c:a7:25:a4:b4:a5:a2:4d:
9a:41:27:a6:91:39:54:c0:5b:47:1f:7c:7a:bc:1a:
ef:8e:93:08:da:20:b8:19:99:48:a6:83:4a:8b:b1:
c4:28:32:9f:3f:15:c2:21:a4:96:db:62:1e:b9:4b:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:CC:19:8C:D9:7F:9C:3B:DF:3B:2D:EB:71:B2:62:11:92:B0:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7534AAF02F2611F08EC8C3E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.5.0/24
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f4:40:2b:93:e4:25:ae:ca:40:ce:d1:00:24:d1:86:62:67:
d0:76:ff:85:ad:af:34:bf:9b:a4:4b:cd:ab:96:04:73:9a:c5:
67:78:68:4b:21:58:7b:56:87:53:d1:69:27:70:b8:ad:10:41:
d2:2c:39:d6:df:c9:b5:78:b7:f9:d2:e1:fe:5e:2f:88:9a:07:
e9:90:a6:73:98:46:cb:0c:e7:b3:59:d8:c5:e6:c0:2d:b4:aa:
8f:6b:55:3c:0a:27:5f:94:88:8c:be:ce:e5:ce:11:f2:03:27:
c9:4b:a3:30:36:64:be:cc:ac:89:21:63:3e:23:ac:a7:ed:04:
fa:7e:c7:c1:9f:5e:5e:f6:8a:b2:e9:3e:10:fd:99:5a:dc:bb:
9e:a9:75:98:ce:6b:47:64:c5:bf:7e:1f:b3:1d:46:8c:91:2d:
1c:eb:63:78:20:09:20:90:36:6f:a2:1a:c9:b6:77:08:89:99:
7c:dc:c4:bc:84:e8:07:df:b3:5c:5d:9b:d5:ed:2a:40:0c:5f:
b8:b8:44:f7:39:e7:82:3a:31:29:f3:c4:c3:3d:1a:ad:af:65:
c4:15:ef:0f:03:a0:8f:07:26:e9:64:77:7d:ef:56:14:52:40:
1d:e3:62:a5:89:d7:31:29:7c:3d:5b:63:d3:b7:36:6c:e6:36:
50:9c:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:53 2025 by rpki-client