Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817D14682F4011F0B27DF895DAE4EC9C.roa
File: 817D14682F4011F0B27DF895DAE4EC9C.roa (raw, json)
Hash identifier: dygd3sgjV9pNM5rl7Dj06q2GVbyFVJjQIW/zwvWtSNs=
Subject key identifier: F6:57:22:0A:3F:83:00:BD:C0:6B:82:33:F4:98:D6:49:ED:B4:90:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01802B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817D14682F4011F0B27DF895DAE4EC9C.roa
Signing time: Mon 12 May 2025 14:50:55 +0000
ROA not before: Mon 12 May 2025 14:50:50 +0000
ROA not after: Thu 22 May 2025 14:50:50 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98347 (0x1802b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 14:50:50 2025 GMT
Not After : May 22 14:50:50 2025 GMT
Subject: CN=68220acf-ae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:44:9a:76:02:51:81:ee:4f:02:e4:1e:05:
08:97:22:10:2f:d5:d4:ac:46:8e:d9:34:cb:e4:79:
1c:c9:29:1f:61:e3:1f:fa:e5:77:9e:76:f8:43:f6:
46:5b:b6:79:a8:28:2c:1b:b7:1d:83:9a:22:1a:25:
8a:a4:98:a0:30:2b:1d:30:67:1a:00:85:51:d5:0a:
ea:8f:d9:71:9c:16:17:00:85:a7:4d:d8:6b:69:ed:
b7:ce:21:b3:4c:a8:e3:0f:d0:29:77:c3:f0:0e:90:
99:d1:36:80:f5:02:87:da:21:99:11:52:88:c6:6f:
fe:db:1e:3d:54:5f:c6:40:3d:5c:87:46:61:b1:e8:
24:a8:02:ae:fd:69:c3:4a:0f:d7:0c:22:0a:03:9d:
6a:2f:8a:38:0d:0a:4e:15:70:84:92:d4:af:55:7f:
54:a2:55:60:19:68:d9:20:39:59:2d:6f:bf:e0:47:
3c:6a:a6:8b:1d:cf:3b:dd:a5:e1:56:be:af:09:06:
47:0e:0c:2a:e3:9d:ee:8d:c9:9a:35:d7:74:5f:57:
78:a4:ee:88:cd:6b:47:8f:6c:53:4b:48:c2:f2:e3:
00:d4:03:93:2e:83:43:45:97:e5:f7:05:f3:bf:29:
56:e0:38:5d:2b:7e:cb:d0:5c:e1:68:eb:37:25:9c:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:22:0A:3F:83:00:BD:C0:6B:82:33:F4:98:D6:49:ED:B4:90:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817D14682F4011F0B27DF895DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
89:da:4c:51:1a:93:46:22:87:29:4c:dd:e9:df:d3:66:70:4d:
8c:a5:91:5c:fb:f8:36:a9:bf:26:17:cc:34:88:e5:b9:76:20:
2d:75:8a:c6:ec:5e:82:61:0b:b0:91:91:b4:0f:b9:a1:1b:80:
7f:6e:fb:95:12:28:80:5b:02:4b:fc:e0:32:92:81:e9:25:50:
38:dc:72:ec:e7:ea:19:70:8e:62:58:87:3f:a9:41:cc:cb:a1:
4c:7a:73:d6:41:5d:8b:b7:f9:11:b4:7e:f5:8f:26:ed:9b:7a:
58:90:e4:72:0b:17:f4:9f:43:bd:d0:eb:11:d3:b3:ad:d3:a7:
96:de:e4:e3:9a:74:ce:eb:1f:6e:ce:78:62:50:d0:d2:bb:b5:
a1:c5:6a:7b:32:52:22:6d:c8:c0:53:18:af:79:d6:a7:f2:b3:
cb:a8:0a:f9:04:53:14:9e:4e:1c:ea:c1:41:cf:a4:79:24:7e:
dd:31:cf:53:f7:d4:4a:59:95:60:ac:b2:9d:78:d3:a2:0f:76:
68:a6:bb:71:88:62:aa:35:51:b0:ff:a8:13:a1:5c:64:26:51:
d3:0d:82:d0:7f:5e:f6:12:dc:4c:63:10:d6:ed:86:9c:04:19:
57:16:4e:88:aa:5e:5a:f1:d9:fd:dc:f1:82:41:83:8b:02:b9:
cd:3f:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:02 2025 by rpki-client