Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AE0D42C247211F0BA56A1C5DAE4EC9C.roa
File: 9AE0D42C247211F0BA56A1C5DAE4EC9C.roa (raw, json)
Hash identifier: Tf/NRAGWsGnrkC2FpcxFve9M9Qs8lf2v7YQvfuCSHqM=
Subject key identifier: A3:01:27:8E:E6:BD:44:47:71:3C:8F:59:97:E9:85:99:3D:D1:C8:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AE0D42C247211F0BA56A1C5DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 20:51:49 +0000
ROA not before: Mon 28 Apr 2025 20:51:45 +0000
ROA not after: Wed 11 Jun 2025 20:51:45 +0000
asID: 138915
IP address blocks: 154.223.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97405 (0x17c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 20:51:45 2025 GMT
Not After : Jun 11 20:51:45 2025 GMT
Subject: CN=680fea65-be76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:c9:df:21:2b:78:2b:2b:dd:26:fc:2b:d2:
74:af:2e:28:8c:54:43:d5:3d:a5:aa:33:05:ac:a0:
3e:e6:71:88:15:e4:26:78:cd:f3:cf:a0:60:e5:fd:
ca:eb:62:28:df:4e:27:23:bd:c7:12:61:c9:ad:61:
b5:8b:72:3a:62:09:7f:77:b1:0d:b0:57:c4:8e:ff:
89:6d:32:c0:64:50:0f:f2:bf:b6:b6:9d:5a:c6:42:
2e:24:d6:9f:fc:0c:53:82:3d:f6:5f:71:dc:9a:e4:
04:6b:bb:c1:36:4b:c6:1b:de:5c:15:01:6e:fe:ee:
c8:d2:62:b6:e3:f9:5b:6c:0b:3e:d2:24:b7:74:9d:
4b:bc:46:19:11:48:a3:2c:62:1a:ac:4a:94:8c:85:
ef:b5:a7:fb:80:31:7c:a0:39:e0:8b:34:2b:23:67:
79:2e:38:7d:90:21:8b:15:81:c6:58:17:6b:42:d6:
68:78:8f:01:45:b6:df:95:1c:4c:2f:ab:b8:05:8a:
9f:be:d3:0a:f0:03:72:31:6b:84:13:fb:cf:39:2f:
cf:4c:3d:96:09:a9:e6:62:5f:67:8f:15:7d:37:2d:
91:33:f3:34:3b:6f:90:e5:9c:97:f1:d4:f2:20:3f:
18:72:e7:bc:43:b1:83:da:01:7f:95:83:4b:fc:3e:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:27:8E:E6:BD:44:47:71:3C:8F:59:97:E9:85:99:3D:D1:C8:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AE0D42C247211F0BA56A1C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.52.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:f9:08:32:e7:5d:a2:10:40:e8:08:ef:2e:ea:c4:9d:1e:15:
e7:6f:c2:70:2f:1a:09:60:2f:f8:f1:bd:00:c2:c4:37:69:39:
47:26:75:02:c7:2f:9d:73:e1:a5:02:69:85:e4:2b:f1:c1:72:
f0:ba:cf:22:e1:b4:0e:2e:04:09:83:bc:d0:58:04:d4:62:1d:
15:05:5a:f1:f3:2e:bd:67:98:37:09:69:5c:02:9c:2d:f6:42:
54:6a:b5:a6:ba:62:4d:4c:53:06:dd:80:c3:14:65:51:c0:d6:
b3:22:98:60:19:02:69:32:83:6e:ff:bc:9a:e4:94:d1:c0:86:
7f:ac:67:95:2e:99:2b:d6:c6:98:5c:61:3d:9c:41:cb:bd:a4:
f1:52:b9:6c:cc:f9:44:06:fa:9b:46:ad:3c:4b:ec:38:eb:79:
e9:32:b0:de:d6:07:91:84:48:74:75:f8:49:02:8f:90:97:bb:
39:f9:06:c2:00:70:f6:81:d7:0e:36:cf:03:cb:1f:86:50:8d:
4c:1d:9d:3d:cd:d1:c9:bc:ef:53:55:4a:c7:6c:85:cf:df:df:
cd:66:6c:fc:f2:93:d6:56:51:95:d8:ee:04:f0:f4:91:3e:cf:
f4:4c:69:8b:b2:33:f6:2d:b9:37:f5:68:bb:a9:de:e8:ca:37:
ab:af:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:49 2025 by rpki-client