Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68ED9642F2511F086E20EE2DAE4EC9C.roa
File: A68ED9642F2511F086E20EE2DAE4EC9C.roa (raw, json)
Hash identifier: EOtkAxrz/fD6JzNsJZ3s9lCnaRFMWcjeqmCQhYByg+Y=
Subject key identifier: B6:30:90:CC:F2:29:A8:8F:CF:50:79:30:D1:56:93:6A:F3:72:A9:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68ED9642F2511F086E20EE2DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:38:41 +0000
ROA not before: Mon 12 May 2025 11:38:25 +0000
ROA not after: Thu 24 Jul 2025 11:38:25 +0000
asID: 142267
IP address blocks: 154.91.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98291 (0x17ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:38:25 2025 GMT
Not After : Jul 24 11:38:25 2025 GMT
Subject: CN=6821ddc1-3351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:5a:24:a8:40:b8:72:ca:c7:32:6b:ff:e2:
af:a4:c2:65:94:e1:51:9e:4d:29:aa:92:bb:3c:8f:
67:e6:2e:c3:2f:c9:63:35:cd:57:0a:a1:b3:4e:dc:
4e:db:f6:42:02:ac:ff:77:66:9e:34:39:2b:40:9c:
89:08:7f:ed:62:6c:f2:e5:6b:3e:d4:30:c4:05:28:
b3:43:c4:18:97:11:e0:00:c6:5e:f7:21:24:0a:e0:
72:ad:77:b1:b6:3e:0c:f6:d0:f7:f1:a2:ea:c7:08:
23:67:06:2b:07:6b:47:4f:01:74:bd:06:4c:11:10:
da:3f:cd:95:4d:6c:ae:15:8e:64:75:ea:07:48:eb:
c3:30:c9:03:08:67:82:bf:37:4d:b6:f6:c9:c8:0c:
99:e3:d5:31:08:6b:0e:22:7b:24:ef:dc:e7:af:5d:
52:31:1c:26:99:30:6d:24:45:58:d2:fe:a0:35:e3:
df:21:c6:7d:6a:be:f6:d5:27:7a:dd:d6:d0:3f:19:
84:be:da:8c:63:52:1c:cc:73:a1:df:f2:53:fa:0c:
36:96:85:2b:38:15:eb:4c:59:07:b2:93:54:44:81:
bc:19:3c:f7:78:38:1b:74:fb:0d:63:32:2b:64:8c:
1a:b8:7a:d5:ae:6e:e2:1f:79:92:15:1f:0f:40:17:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:30:90:CC:F2:29:A8:8F:CF:50:79:30:D1:56:93:6A:F3:72:A9:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A68ED9642F2511F086E20EE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
98:89:c7:b9:78:a3:a6:9f:c7:df:1a:a5:7a:0f:31:9e:cb:0a:
7a:e2:31:cf:ce:29:b7:f8:a0:82:61:c3:e3:3d:17:a5:a6:c3:
c3:a1:53:68:47:cb:63:98:31:5c:58:bb:1e:79:54:e4:1e:cf:
b7:bf:19:72:9c:b5:d5:00:50:eb:ce:3f:51:5a:c0:fe:38:dd:
f8:70:b5:46:e7:6e:9d:72:1a:06:78:5b:28:4d:02:9d:40:ce:
0c:0a:1f:3e:4b:da:3b:63:29:3f:80:d5:a0:e3:b6:00:d1:54:
72:4a:8f:73:1e:03:11:f8:87:67:7c:34:ef:b8:1d:3d:c6:9c:
2b:15:e1:fb:ad:86:86:64:84:ee:45:ea:3f:be:0c:69:61:07:
02:10:dc:2a:69:76:64:f2:1f:6d:16:54:f3:46:c6:32:3b:85:
ac:ba:97:fa:d2:ec:78:0b:a7:83:fd:d2:ac:88:2f:f8:e9:fa:
7d:2f:43:78:b6:06:13:91:0c:3a:34:82:a5:a9:a3:fa:b1:b0:
74:c7:91:07:16:eb:43:09:89:b7:dd:72:8b:da:bb:3c:0d:64:
5f:ed:51:4e:8d:54:43:ee:c9:5b:2f:36:08:1e:19:f3:ad:7d:
92:04:09:0c:27:d0:3a:fb:2c:d8:46:66:e1:19:53:3d:51:3d:
20:53:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:09 2025 by rpki-client