Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7459E2317C11F0AA565E8FDAE4EC9C.roa
File: 7D7459E2317C11F0AA565E8FDAE4EC9C.roa (raw, json)
Hash identifier: 6B7P7avhqS/CKB6eb9kZB3hqSoCd5UW8SFkgsR6x9VA=
Subject key identifier: EE:B4:09:F9:DA:83:73:6B:56:58:CA:23:F0:4D:B9:D8:3D:5C:E1:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7459E2317C11F0AA565E8FDAE4EC9C.roa
Signing time: Thu 15 May 2025 11:05:20 +0000
ROA not before: Thu 15 May 2025 11:05:16 +0000
ROA not after: Sat 05 Jul 2025 11:05:16 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98524 (0x180dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 11:05:16 2025 GMT
Not After : Jul 5 11:05:16 2025 GMT
Subject: CN=6825ca70-c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:97:1c:b0:c5:6d:a3:bb:14:e7:97:09:16:
10:1f:59:7c:6e:38:c4:75:7e:7f:40:5d:e4:10:cd:
79:68:1d:59:64:c7:8c:43:6b:44:e8:be:5c:3f:1a:
c1:92:a3:42:02:44:98:74:89:ef:fc:63:66:5d:53:
3f:83:1b:0a:66:5a:e3:85:e4:4c:a8:9f:a4:1e:e9:
7b:ec:75:e8:76:94:1f:7b:c4:b5:86:01:eb:49:f6:
9d:df:fa:10:3e:8e:a1:4e:54:c1:48:d4:be:ec:19:
4a:d6:5b:40:a5:ce:83:e8:6b:ec:62:3c:34:6b:cb:
3e:a1:71:8e:8b:40:26:d1:2c:20:07:59:9b:24:83:
f0:58:6e:30:95:d9:48:a0:f8:d4:45:64:c3:87:47:
cd:a6:00:19:08:ec:10:77:d8:37:9c:82:2b:23:db:
57:39:fb:2d:e1:77:33:59:66:3c:03:26:a5:1e:96:
10:72:96:a6:f5:3f:a2:fa:54:25:23:1c:05:71:7f:
a7:57:49:e7:0a:54:01:5d:99:4d:a4:13:db:89:e1:
bd:6d:29:7a:b6:67:d9:a1:8e:57:1f:4f:ef:5c:9b:
e0:1a:f4:cc:8a:7c:4c:19:7a:4a:fd:d8:5c:cb:2c:
20:ff:61:65:39:5a:64:ba:e9:11:d5:02:29:23:56:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:09:F9:DA:83:73:6B:56:58:CA:23:F0:4D:B9:D8:3D:5C:E1:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7459E2317C11F0AA565E8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
07:f0:f0:2e:23:28:75:c1:2f:c2:35:18:ce:ac:c0:30:92:80:
73:03:5f:8a:85:07:7b:a5:22:fd:3a:4c:7a:22:69:06:30:0e:
85:4e:a5:e0:89:ca:90:30:0c:e4:8c:33:8d:f4:e0:e0:d6:5d:
53:94:da:19:19:56:17:5b:3a:60:a1:db:5e:0f:90:9a:79:7a:
e7:7c:50:e6:eb:6e:98:68:18:9f:35:31:3d:85:81:74:02:ef:
40:6d:7d:0d:f5:e1:ac:65:7a:43:98:43:3c:05:b7:57:21:be:
61:50:ac:71:9f:2d:34:29:09:db:c6:fe:73:04:db:f4:23:7b:
a1:43:70:6a:ef:29:88:d2:6f:24:6e:86:8b:3b:66:ae:21:a7:
94:e6:d1:d3:72:01:7b:53:84:15:b1:1a:b5:b2:9a:a0:b5:bd:
8a:dc:f9:24:ab:a4:91:cc:72:60:c1:9a:a0:85:9d:5f:71:49:
08:ea:38:7b:e6:39:7c:38:af:77:ef:50:99:21:2c:4b:f8:92:
a3:18:6e:ce:7c:7e:ba:99:f4:38:3c:90:0d:57:c4:db:8c:40:
f6:ee:e6:32:1b:6d:31:d3:d8:f2:d9:22:74:6e:dd:ed:6b:3f:
9d:dc:07:28:74:be:f7:16:a0:ab:5d:b9:2e:bd:6a:de:21:0a:
9e:02:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:57 2025 by rpki-client