Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9467D5682A6311F0975FAB92DAE4EC9C.roa
File: 9467D5682A6311F0975FAB92DAE4EC9C.roa (raw, json)
Hash identifier: bXPIP/tfOo+xYIKeKSCFx9uscRxda8A8D59Qn/XvzCs=
Subject key identifier: 92:9E:4C:83:A1:F8:1C:8D:87:CB:70:1E:8B:2D:91:A2:B4:01:19:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9467D5682A6311F0975FAB92DAE4EC9C.roa
Signing time: Tue 06 May 2025 10:19:23 +0000
ROA not before: Tue 06 May 2025 10:19:19 +0000
ROA not after: Fri 13 Jun 2025 10:19:19 +0000
asID: 57043
IP address blocks: 154.84.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98087 (0x17f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 10:19:19 2025 GMT
Not After : Jun 13 10:19:19 2025 GMT
Subject: CN=6819e22b-3d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:fd:d1:e9:e3:ba:62:39:13:fb:80:76:0f:
19:58:17:85:a0:14:15:d8:94:30:6f:e1:7c:52:80:
a9:fd:0f:13:6b:a8:17:2d:bc:9e:93:ea:93:a7:a9:
8d:8b:98:63:69:c9:a5:cd:89:53:c6:8b:64:4e:3f:
4e:1d:91:ce:ef:a0:55:9e:fc:31:eb:7c:36:aa:13:
ee:9f:6f:b5:3f:15:e9:aa:3f:af:2c:2d:52:22:99:
f0:58:c7:40:6c:cd:25:e6:21:27:36:84:b2:5f:90:
50:f9:17:40:24:59:c9:e8:f1:3e:e9:23:c9:a8:ff:
f8:78:08:31:aa:4a:7a:78:6b:e5:94:c0:4b:33:ee:
c7:ff:23:93:b7:99:1e:ec:9e:d4:ed:2a:ab:e8:e8:
f6:34:9f:31:48:19:3c:c4:88:e0:f5:17:32:bd:5e:
d9:1b:cc:e0:f9:53:52:ea:6d:cc:0c:45:04:a5:fc:
70:c3:a0:12:21:41:2e:3e:3a:da:71:ce:f8:06:46:
8a:a9:8a:77:e3:a4:d8:02:e4:99:b4:1c:ed:62:c0:
2c:2c:ee:86:42:e0:5b:18:ee:4a:f0:f6:dc:39:42:
77:85:d5:6f:98:99:c1:a6:76:c9:24:09:69:21:ad:
5e:f4:b4:ee:75:4d:7e:ad:52:ed:dc:4f:06:68:5b:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:4C:83:A1:F8:1C:8D:87:CB:70:1E:8B:2D:91:A2:B4:01:19:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9467D5682A6311F0975FAB92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.174.0/23
Signature Algorithm: sha256WithRSAEncryption
37:52:07:2e:f9:a8:74:7b:95:4a:83:58:16:74:35:45:16:36:
8a:5d:5a:54:37:54:d6:ee:7c:4c:1d:22:4d:13:ba:7f:06:a2:
40:0c:35:3a:f2:e1:d4:9c:64:8f:df:51:d0:64:50:d8:3a:07:
eb:02:17:75:14:a6:73:96:59:23:e5:6a:21:18:50:80:61:4c:
8f:c4:0d:bb:6e:54:20:a3:8c:9c:0a:c4:d3:02:77:3f:e4:fa:
2d:44:4b:c6:41:9a:c3:35:72:d4:40:3a:36:ce:ae:b7:2b:fb:
fd:ae:83:ef:cd:03:fc:72:c1:4a:62:14:23:9f:b1:44:4b:58:
0b:e7:17:3e:b5:1d:4c:4c:d9:e3:5d:5b:94:f9:35:c7:9c:73:
89:cd:a0:e3:7e:ed:36:d7:a8:ff:d9:45:49:03:44:c3:5f:c7:
9c:9d:4c:f1:ec:bc:53:c5:8e:66:6b:df:de:fd:26:30:32:0d:
b6:09:61:48:31:11:05:2a:6b:a4:67:fa:b6:c6:ee:3d:98:0e:
22:6f:d8:9e:a5:2f:80:1d:06:0a:24:62:34:b3:df:89:fc:db:
9a:b7:5a:38:74:e9:d1:b6:9a:41:9a:27:41:09:d3:ce:27:26:
c1:d0:ee:ba:d7:8e:ac:ba:34:1f:12:90:2e:9c:c7:af:ce:f5:
8c:7b:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:19 2025 by rpki-client