Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C06FA34241D11F097B3DB91DAE4EC9C.roa
File: 9C06FA34241D11F097B3DB91DAE4EC9C.roa (raw, json)
Hash identifier: Oq6sv9PicNuQruCeTi2tj3MezDBlGzEuUbQCtSsRM+U=
Subject key identifier: 7A:95:A9:B3:E5:7F:A3:18:06:53:27:D9:C7:31:3C:0B:EF:92:37:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C06FA34241D11F097B3DB91DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:43:24 +0000
ROA not before: Mon 28 Apr 2025 10:43:20 +0000
ROA not after: Mon 13 Mar 2028 10:43:20 +0000
asID: 17561
IP address blocks: 154.92.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97126 (0x17b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:43:20 2025 GMT
Not After : Mar 13 10:43:20 2028 GMT
Subject: CN=680f5bcc-8976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:1b:10:9a:8c:49:6f:5f:bf:17:7c:25:40:
1f:e9:ae:76:41:49:fb:ba:08:66:24:96:c9:20:83:
bb:b3:e8:9c:01:2b:5e:53:5f:83:ee:29:52:6e:21:
95:b7:93:41:b6:79:b8:f6:9e:91:02:75:76:77:e5:
3b:c6:73:1b:3e:34:78:34:fd:48:04:11:4f:33:e3:
8e:fa:20:19:0e:ec:1d:77:15:be:8f:65:a2:ea:f8:
41:73:1b:e3:cc:be:4d:e8:f2:cd:ee:d1:60:b2:57:
87:93:99:02:fa:c5:65:77:74:1b:5b:28:80:c3:8c:
f2:49:8c:5b:f3:f0:62:80:f6:2f:a8:3f:25:03:03:
78:02:f1:14:6b:98:1b:5f:9d:e4:09:c4:32:40:dd:
74:9e:fb:17:a3:8b:bb:df:56:11:b8:b0:cf:09:3c:
68:34:b4:c5:f8:9f:cf:bb:4b:1b:55:c2:37:ce:5b:
87:36:9a:9d:eb:1e:a1:63:0b:81:ea:bf:51:25:e0:
ea:6d:c3:75:2d:ab:fe:3e:43:19:30:67:c2:c0:98:
aa:66:33:b2:03:09:2f:4d:a4:34:6f:f9:0d:cb:5e:
6b:09:6b:1f:69:fb:e4:7e:8c:30:ae:59:83:b2:34:
68:f4:0d:94:13:09:88:65:d3:4d:58:04:21:f4:57:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:95:A9:B3:E5:7F:A3:18:06:53:27:D9:C7:31:3C:0B:EF:92:37:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C06FA34241D11F097B3DB91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:66:39:71:17:04:3c:12:bd:f2:e2:46:1f:53:9f:d1:30:74:
e1:e4:2f:73:d3:6c:ed:ca:a7:fc:44:e6:b4:35:11:d6:50:e3:
03:74:b2:f4:ba:b6:3e:47:5c:cb:91:c9:cd:cc:0e:d2:7e:14:
1e:6d:68:11:f3:3d:7e:02:ec:f3:e8:b6:b9:05:2e:7f:d0:46:
94:f1:4f:5e:98:4b:22:02:df:e8:e3:5e:9b:43:4e:17:5f:b7:
40:8b:7f:ff:63:64:38:42:3d:7a:e0:ac:11:7b:e2:10:05:ae:
d7:0a:44:82:91:ef:d7:ed:32:66:b3:6b:d0:17:ff:0d:f6:86:
f5:35:e4:b5:f8:13:f0:e4:23:9f:9d:e6:58:5b:88:d0:11:0c:
4a:e8:48:d6:f7:d2:e2:22:eb:4f:4d:19:5a:39:b7:b3:ea:29:
68:7a:08:4e:5d:f2:22:bc:b9:35:f5:13:7a:e0:72:8d:a0:89:
c1:b8:52:52:d5:69:62:f3:41:51:90:57:c5:a5:40:44:81:8c:
2c:ae:71:12:bd:a6:ed:56:b7:17:8d:29:60:96:79:10:d1:c7:
c6:ca:01:78:95:38:0c:4b:02:b3:78:bc:bf:6c:4c:c0:5f:00:
6c:62:54:51:39:46:cd:fb:20:eb:61:80:a5:4b:00:d4:f6:b1:
2f:84:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:38:52 2025 by rpki-client