Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA405E5A28B411F0B42BF8D2DAE4EC9C.roa
File: BA405E5A28B411F0B42BF8D2DAE4EC9C.roa (raw, json)
Hash identifier: gyLvIPze4L7uh/pXpkgwO70aAA51mjl1NHlWpdTUbVk=
Subject key identifier: DE:8F:DA:CA:C0:03:D5:5B:00:7A:01:D1:12:3C:B1:C5:8F:CA:FA:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA405E5A28B411F0B42BF8D2DAE4EC9C.roa
Signing time: Sun 04 May 2025 06:55:14 +0000
ROA not before: Sun 04 May 2025 06:55:09 +0000
ROA not after: Tue 05 Aug 2025 06:55:09 +0000
asID: 9294
IP address blocks: 154.203.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97962 (0x17eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 06:55:09 2025 GMT
Not After : Aug 5 06:55:09 2025 GMT
Subject: CN=68170f52-5eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:fb:0b:f9:0a:0c:9b:ae:80:ae:c3:db:05:
7d:56:44:7d:7d:d7:f8:ad:51:a2:db:29:d4:dd:e5:
bb:61:9f:bd:11:c2:86:fe:e4:b4:3a:f9:4e:2d:8a:
44:a2:97:8c:c5:28:3d:12:40:09:0c:46:41:01:1c:
1f:eb:1b:89:e4:be:be:1a:4f:29:b8:a6:de:e8:fb:
58:fa:0a:e5:bf:12:87:a6:e7:80:e3:3d:9c:b7:b3:
3e:28:8e:59:3e:97:07:d8:b6:b4:b7:3b:2b:0b:de:
bf:1e:75:f4:68:00:20:6d:1a:71:d5:5b:6e:36:6b:
05:0b:76:3e:70:4c:89:75:07:3e:87:46:a8:ab:5c:
6a:c6:5f:20:91:65:f0:5c:77:fa:08:b0:9a:18:0d:
cf:ef:f9:c5:62:3d:7e:33:f0:c4:ea:04:51:43:e2:
47:c8:f9:51:f5:c3:e0:e0:0d:dc:0f:9f:ae:85:67:
a2:e1:76:7a:69:76:32:82:e2:10:2a:44:aa:8b:0a:
71:23:b4:6c:06:d0:87:eb:04:95:16:b9:b3:9f:13:
d2:cb:3d:08:43:6f:4a:f8:16:63:c2:50:3a:26:98:
d0:93:4f:8d:a5:d2:7e:e9:f7:6b:ea:71:05:2f:44:
c2:c3:1c:08:53:a8:df:89:87:a9:38:71:3b:b8:a3:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:DA:CA:C0:03:D5:5B:00:7A:01:D1:12:3C:B1:C5:8F:CA:FA:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA405E5A28B411F0B42BF8D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.96.0/19
Signature Algorithm: sha256WithRSAEncryption
06:ec:5a:8e:4f:82:b5:a6:a9:88:45:5d:bc:3f:bb:13:e7:ae:
1b:d7:fc:bf:4f:0c:a0:23:aa:77:8e:50:3f:55:b3:22:4c:ef:
c4:4a:ff:04:13:a2:1d:2e:e7:4e:ae:3f:47:bd:09:02:de:fd:
21:d9:4b:d0:ed:ec:97:12:57:23:46:63:64:25:75:b2:ae:e7:
d5:1c:6b:f5:0a:8f:36:5d:cc:84:33:fc:e9:b5:25:98:21:b3:
20:1f:c8:ab:4e:fa:31:cd:bc:33:5c:9b:02:e8:c0:fb:cd:19:
0c:e2:cf:26:46:1f:9b:15:02:fc:e3:71:be:6a:c0:58:2a:b2:
26:ac:1e:1e:df:9b:0d:5f:26:b4:8b:6c:89:01:ef:db:76:58:
60:fa:f0:f2:e7:48:13:ae:a7:ba:89:71:e5:58:70:00:73:66:
bf:39:57:90:53:f9:2b:20:42:a7:cc:cd:e5:90:29:8a:d0:88:
60:d1:6c:17:b2:c1:08:65:93:f8:c8:1f:cb:c0:4e:5f:96:62:
59:a9:03:25:ab:18:65:1f:f5:5a:96:20:82:f8:b5:b4:9e:5a:
e0:ab:cf:d6:7b:a5:ac:a7:16:cb:72:23:6a:5e:e1:a1:5f:36:
69:da:4a:f9:64:a7:95:ad:e5:79:67:51:98:4e:30:5a:17:10:
cd:39:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:27 2025 by rpki-client