Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5ABD9A248011F0BF407C9FDAE4EC9C.roa
File: 8E5ABD9A248011F0BF407C9FDAE4EC9C.roa (raw, json)
Hash identifier: Jkpx24jn6uQ/r7wjBYbvnv9mQUXKoBljy4hnq2EA4Ow=
Subject key identifier: 63:5B:6B:86:7B:25:A8:50:FF:1B:4A:2F:51:AD:7F:7E:A7:79:E6:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5ABD9A248011F0BF407C9FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:31:42 +0000
ROA not before: Mon 28 Apr 2025 22:31:37 +0000
ROA not after: Fri 04 Jul 2025 22:31:37 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97419 (0x17c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:31:37 2025 GMT
Not After : Jul 4 22:31:37 2025 GMT
Subject: CN=681001cd-be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:ce:d0:27:22:3c:c4:5e:28:c8:40:dc:65:
8e:f6:64:94:ac:ee:4b:d5:8a:3e:92:73:18:e8:f8:
19:da:37:51:e6:42:5c:59:8e:43:16:0f:e8:cd:f4:
de:cb:13:19:4f:ae:2f:ab:9f:fd:0f:5b:8a:ed:92:
5b:39:67:e5:89:94:e1:de:81:7f:92:4e:aa:b6:1b:
67:ea:33:4c:5f:17:ba:15:c0:28:2a:b3:a0:3b:4a:
3e:7b:84:31:7c:34:98:8c:79:56:a1:03:09:dd:3f:
bc:fe:91:41:d5:27:e1:98:a9:6e:76:1e:d0:89:25:
91:a6:c7:30:07:db:2c:c1:72:4b:f8:f8:b6:90:27:
3f:a2:01:11:98:84:d2:c4:c0:8a:a0:70:a0:a1:ac:
16:22:cf:c9:a0:d0:c8:10:2b:2e:a8:6e:ff:52:b7:
0b:28:58:4b:15:4e:41:cd:f4:5c:e0:09:05:82:96:
ac:c1:cb:8f:e7:70:45:78:2f:16:79:68:3c:2f:79:
52:70:6a:9d:e9:f0:f0:38:64:38:7f:28:45:8e:d6:
e6:ec:67:b9:af:e6:d7:e3:10:d9:59:6e:05:18:10:
28:8a:24:3f:31:e5:94:64:e8:4f:40:c5:6c:0a:e4:
5d:c7:5e:2c:76:ea:07:e5:80:f2:f9:98:3e:06:60:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:6B:86:7B:25:A8:50:FF:1B:4A:2F:51:AD:7F:7E:A7:79:E6:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5ABD9A248011F0BF407C9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.98.0/23
154.93.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b1:75:fc:36:2f:98:46:0c:27:fe:1a:f4:39:09:0e:d0:d6:
5e:d5:30:25:bb:25:fe:9a:c4:63:63:29:c0:ee:b7:af:10:4b:
e4:d2:9c:9b:98:96:63:c2:bc:17:95:fb:8c:28:28:32:20:32:
3b:c5:0c:5b:d4:3c:18:5d:9a:02:2c:bc:0d:2b:bb:65:2c:18:
63:db:c7:2d:3c:55:f3:72:cf:e2:d1:63:81:93:c0:b2:86:fe:
02:3e:b5:2f:85:a7:e2:47:10:28:d2:81:29:c7:2a:d5:e6:81:
24:6a:9a:a4:9c:6b:ad:88:37:0c:bd:81:16:7f:75:43:6a:f2:
8a:a9:77:4a:5a:03:47:45:ba:a4:48:8a:99:3d:1d:8e:82:d7:
4a:6c:9a:ad:46:4d:da:1d:82:ab:f1:41:0d:fd:fe:24:ce:ef:
67:50:93:0c:46:4c:a8:69:36:a2:de:3b:d2:9c:27:bf:7e:3d:
61:99:f6:92:c8:d3:ce:80:c1:84:1a:62:75:89:b9:1d:86:44:
5c:5f:4c:e6:c1:49:8e:44:ee:3b:08:53:ed:9b:02:b6:8c:e4:
23:58:76:f1:65:de:a5:b9:33:e2:23:5c:29:00:58:cd:1a:ee:
f8:6e:49:f8:99:19:fe:64:fb:a8:e2:79:9a:dd:eb:a0:70:5d:
de:eb:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:55:23 2025 by rpki-client