Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD64447E241E11F094170799DAE4EC9C.roa
File: BD64447E241E11F094170799DAE4EC9C.roa (raw, json)
Hash identifier: tFWvye12nrcVY/eSrzcnBH0K6ilMl+7eUQLrKR/jyf0=
Subject key identifier: 17:12:B8:94:71:0C:F9:1D:2E:6C:DD:04:7E:88:9D:B8:00:92:2D:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD64447E241E11F094170799DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:51:30 +0000
ROA not before: Mon 28 Apr 2025 10:51:25 +0000
ROA not after: Mon 13 Mar 2028 10:51:25 +0000
asID: 17561
IP address blocks: 154.198.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97136 (0x17b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:51:25 2025 GMT
Not After : Mar 13 10:51:25 2028 GMT
Subject: CN=680f5db2-7e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:84:88:21:67:41:8f:ee:cb:3c:b0:eb:97:
13:8d:70:e2:ad:51:66:b8:01:ca:e1:ce:07:ef:a5:
2d:b0:b7:5a:42:72:97:67:8c:5c:95:d4:ee:8b:ca:
d2:11:dc:aa:d9:5a:b2:c2:d2:f4:ab:11:d1:af:f5:
ca:84:11:08:b6:75:ac:46:3d:7d:b0:c0:f2:20:6c:
22:ae:2c:52:6d:ca:59:fe:60:f8:70:d7:f5:c8:97:
c3:d8:28:f7:43:b0:c4:eb:2b:bf:ca:7c:93:ed:7c:
f3:1b:b0:b6:bf:06:18:1b:1d:78:aa:3b:b6:45:80:
bf:5d:b1:be:67:b0:04:c9:ab:f9:39:ff:6d:7c:93:
6c:5c:68:ba:b0:34:b4:41:c7:f6:ac:a3:6a:dd:14:
a2:9d:b3:82:73:9e:77:cc:cf:90:b2:06:01:09:17:
52:4d:d0:fa:b6:fe:40:a2:46:be:5f:e2:f4:5f:38:
c0:3f:4a:a9:d6:24:4a:0e:55:65:1b:b4:8f:87:0f:
07:fb:11:a3:0c:3c:91:42:02:f4:41:46:8e:9c:6c:
7d:7d:8e:98:6f:57:8b:76:02:8a:b8:27:6f:45:35:
7f:16:11:75:c7:bf:35:93:c8:02:fd:49:19:d6:ee:
b8:bb:46:04:f0:6e:76:6e:20:13:66:41:ab:98:e5:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:B8:94:71:0C:F9:1D:2E:6C:DD:04:7E:88:9D:B8:00:92:2D:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD64447E241E11F094170799DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:60:9a:17:65:84:52:c4:3b:dd:64:7b:93:e6:84:a0:e4:e2:
b9:43:dc:91:2c:89:d9:1f:b9:21:9c:aa:21:22:a8:14:ff:59:
3f:39:b0:05:26:76:63:b1:36:1f:d7:4f:fa:9a:21:12:3d:0c:
1d:8b:39:ed:1c:79:b1:42:5f:f4:c6:e0:fc:21:a6:04:1b:40:
f9:11:c0:96:08:29:78:6c:1d:a1:23:15:c5:d6:73:b9:eb:cf:
aa:a7:58:ea:bb:cc:b0:35:90:84:9b:d9:8f:22:97:9c:7f:c2:
4e:d0:b4:4d:81:3c:3a:ef:81:5c:f0:eb:15:db:b2:5f:70:24:
ed:0b:23:ba:e3:ec:54:a3:82:8b:b7:fe:23:cd:d6:93:d0:d0:
96:07:b9:aa:8b:2b:95:ef:7c:ea:a4:16:b6:46:20:79:1a:41:
fd:09:1d:71:d6:b6:58:af:3f:3a:16:a6:ba:39:83:17:ff:e7:
64:64:a7:0c:2b:e4:71:7d:f9:0b:a4:f9:5f:a3:c1:a9:21:ea:
1e:cb:ed:c3:2e:ef:d6:ed:ab:a8:c7:0f:4a:a2:d3:08:fe:57:
ec:9c:10:6a:57:80:02:d9:03:46:44:81:f8:b4:6a:ae:ec:4d:
63:4e:f4:e2:ae:ec:08:50:ed:a9:35:64:7e:07:be:a0:2e:d1:
ca:fb:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:54:11 2025 by rpki-client