Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEBECC0242F11F08AF6CD8ADAE4EC9C.roa
File: 9EEBECC0242F11F08AF6CD8ADAE4EC9C.roa (raw, json)
Hash identifier: E7UD4owDr+Z9cx91Z3Uf7AaIA4BHIasSBksPNmOZUYg=
Subject key identifier: 3A:76:B1:00:AE:B1:96:71:7D:02:36:F6:35:B2:6A:46:48:59:17:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEBECC0242F11F08AF6CD8ADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:52:20 +0000
ROA not before: Mon 28 Apr 2025 12:52:15 +0000
ROA not after: Thu 23 Mar 2028 12:52:15 +0000
asID: 17561
IP address blocks: 154.203.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97217 (0x17bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:52:15 2025 GMT
Not After : Mar 23 12:52:15 2028 GMT
Subject: CN=680f7a04-30a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:5c:6c:d9:f9:b4:0c:3c:38:a3:ca:cc:57:
37:df:b1:1a:bd:2d:1d:fd:3a:e3:96:fa:f0:3b:77:
cb:e7:25:ba:43:f1:aa:62:1d:28:dd:09:0b:88:e3:
02:e1:d5:e4:06:02:1a:a5:0b:0a:e6:80:82:cd:d4:
28:a1:04:08:71:5e:0d:15:0d:b9:09:14:36:d9:48:
84:55:11:c7:f1:96:2e:67:95:a4:49:5b:72:57:58:
11:ab:a8:d1:ed:c4:b1:4e:5e:e9:2e:a8:10:4a:49:
2e:28:94:5d:2c:a4:ba:38:6d:6d:a3:f1:5a:d5:78:
a6:92:82:09:d7:89:42:ae:c0:a5:99:4e:f1:4e:4d:
f1:ac:07:0e:47:77:13:c3:af:83:3a:68:62:f4:9a:
69:67:c5:72:97:26:7a:ae:0e:5f:45:62:67:1e:fb:
4e:a6:8e:a8:e9:e6:21:e8:4a:c5:58:f0:13:3f:f2:
1a:e1:05:67:cb:f5:36:3d:d4:f1:34:84:8f:5a:84:
c3:59:6e:c0:95:a6:a3:49:22:c1:ec:3b:46:7a:7c:
8a:a6:73:61:fe:74:f6:7d:f3:5c:37:c0:c9:33:ae:
6b:d5:86:c2:13:b2:8e:89:c4:8f:8a:29:c8:cc:04:
e7:63:57:0d:f1:8b:67:24:81:67:1c:ad:dc:72:79:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:B1:00:AE:B1:96:71:7D:02:36:F6:35:B2:6A:46:48:59:17:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEBECC0242F11F08AF6CD8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.72.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e3:f6:85:48:39:a9:82:ea:4e:b0:82:10:36:48:2f:1e:8a:
7f:3e:50:d3:52:d5:4b:c7:01:f4:65:a1:6b:f4:e8:3e:52:81:
40:eb:eb:2f:02:03:5e:82:d3:33:72:91:85:a9:93:24:42:4c:
53:6a:8d:db:23:ea:fd:9d:4e:db:a3:e0:6b:2f:ec:62:d6:7e:
06:92:a3:55:0d:25:a8:d2:13:95:69:dd:b5:bd:e9:5e:2e:d9:
4a:a0:7d:64:e9:e3:1d:df:b3:d4:7e:4d:be:5e:31:1f:62:85:
d6:51:d7:44:5c:9d:fa:23:a4:1f:a7:e0:84:c3:8a:63:98:3c:
39:33:3a:16:f2:26:25:61:08:28:10:44:71:49:6b:ba:28:2e:
4e:0f:43:6d:86:a1:1f:7c:de:4e:f2:99:93:b8:09:8c:db:73:
62:04:45:ae:95:17:9b:7b:c0:c8:68:8c:13:ff:44:04:6d:fa:
56:76:c7:64:b1:c8:42:d1:51:d0:41:49:20:20:13:9d:b8:2f:
28:92:8d:5f:a1:ab:0b:3d:2d:dc:76:fa:b2:08:dd:86:23:af:
ce:c4:d2:ce:d6:20:94:db:b1:5d:91:86:7e:e1:00:ed:74:98:
13:58:2a:54:84:a4:d2:25:7b:ae:93:49:dc:64:35:19:f7:83:
25:7c:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:35:08 2025 by rpki-client