Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4D5526235811F0924C76EBDAE4EC9C.roa
File: 7E4D5526235811F0924C76EBDAE4EC9C.roa (raw, json)
Hash identifier: RFWuKvEschRF+5gWCl84D23qSAKC3jaT8D6wVWWAdw8=
Subject key identifier: 00:C2:14:D8:A3:31:54:73:4D:44:C8:2F:E7:C5:0C:81:33:D9:EE:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4D5526235811F0924C76EBDAE4EC9C.roa
Signing time: Sun 27 Apr 2025 11:12:23 +0000
ROA not before: Sun 27 Apr 2025 11:12:18 +0000
ROA not after: Wed 27 May 2026 11:12:18 +0000
asID: 984
IP address blocks: 154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97091 (0x17b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 11:12:18 2025 GMT
Not After : May 27 11:12:18 2026 GMT
Subject: CN=680e1117-91bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:f2:33:5c:af:d8:79:03:3a:af:a9:b5:27:
ad:5b:5a:8f:33:ae:1d:7b:9a:3f:37:e7:1b:fc:1d:
29:f4:7b:d1:0c:14:e9:98:32:d0:e0:21:63:8a:10:
8e:44:59:8f:7b:d6:78:1e:1e:ad:bd:a5:74:99:6d:
97:f6:a0:f1:70:fc:f1:91:19:4f:d6:74:ff:60:f2:
2c:32:30:77:23:b4:89:74:3c:b9:e1:72:0c:4c:4f:
69:08:aa:59:6f:51:dd:7e:be:1c:70:7e:5d:a8:02:
76:c4:be:ad:23:5d:e4:97:74:82:45:cd:78:ac:78:
8c:9c:3d:73:a6:d9:92:20:fb:8b:34:cb:04:21:61:
3d:ff:db:ce:73:80:75:be:a4:b5:85:33:87:c2:8a:
65:f4:08:ba:04:34:e8:8f:4c:1c:38:1e:49:39:a4:
bc:5a:44:82:6f:55:04:0a:6d:8c:9c:99:fe:e7:46:
bb:5b:fa:1d:80:0b:9a:c8:88:fa:b7:da:f4:55:ba:
5f:55:ca:0b:26:09:f3:72:88:9f:6f:f6:c9:e1:07:
43:b9:2b:57:64:a8:85:33:a8:c9:a9:af:34:0b:20:
b8:46:68:4d:97:48:0d:81:9f:ef:52:23:df:ef:15:
88:1d:c7:9c:46:7b:59:d3:34:8f:fc:ea:37:92:16:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:14:D8:A3:31:54:73:4D:44:C8:2F:E7:C5:0C:81:33:D9:EE:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4D5526235811F0924C76EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e5:c4:39:6a:f2:d5:a0:65:ba:76:e5:ac:a3:ad:e2:2d:d1:
d9:e2:0d:7b:cc:54:b3:02:e1:74:da:b8:ce:63:2f:47:01:29:
e3:09:dd:fb:1f:91:2c:3b:c3:f6:28:47:89:3a:81:f9:cb:54:
ac:56:5a:18:dc:71:7b:3f:ae:90:4d:d0:fd:dc:4e:0b:bc:46:
31:ef:79:53:2a:83:0f:a4:bc:a1:69:99:67:a7:8c:67:6a:c3:
b4:69:ff:6c:6e:d4:f0:94:e3:e1:d0:b2:a6:01:12:58:3b:3a:
58:a3:a7:aa:95:cf:11:6d:36:01:97:77:ac:87:81:6c:d9:c3:
a3:d6:f7:8c:55:42:a0:88:c1:fc:75:bc:b7:84:b4:65:1a:c0:
b7:4c:41:7d:96:ca:c1:e3:97:2a:d1:11:81:a9:54:11:31:93:
0e:65:92:07:d2:ff:55:b2:34:ee:6f:cf:e2:6a:0a:2e:83:d9:
97:0d:0f:c2:c6:4d:71:b9:df:5b:9c:b5:0d:b6:f7:3f:38:66:
b9:1e:97:d5:28:99:ba:f8:03:29:86:68:a6:0d:91:b0:03:15:
2d:23:57:10:aa:a2:49:1b:f8:af:7d:c0:82:72:09:55:66:62:
87:e0:16:9f:d9:70:a1:e7:7f:0a:5a:83:fc:fa:ff:cb:49:69:
25:cf:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:12:51 2025 by rpki-client