Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17DEDA02BFA11F0B107A1B5DAE4EC9C.roa
File: D17DEDA02BFA11F0B107A1B5DAE4EC9C.roa (raw, json)
Hash identifier: 2Ud50XrC3MCFwHN//gdV99I+ecseYkSZM5k+4ns3/d0=
Subject key identifier: 27:5C:EA:8F:97:F6:27:DD:B5:80:B1:38:65:AE:90:7F:BC:7C:43:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17DEDA02BFA11F0B107A1B5DAE4EC9C.roa
Signing time: Thu 08 May 2025 10:54:31 +0000
ROA not before: Thu 08 May 2025 10:54:26 +0000
ROA not after: Fri 08 Aug 2025 10:54:26 +0000
asID: 9294
IP address blocks: 154.92.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98192 (0x17f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 10:54:26 2025 GMT
Not After : Aug 8 10:54:26 2025 GMT
Subject: CN=681c8d67-3bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:26:08:0c:64:b7:a9:7d:73:e0:7e:7d:e9:
c4:f5:95:5d:98:0e:07:9d:3c:7a:69:f2:fd:46:c8:
54:92:6c:d6:38:ff:b4:a3:c2:fc:91:e4:0d:f5:e3:
cc:9a:35:a2:c0:42:eb:b6:56:84:99:ba:31:26:00:
b5:5b:1e:34:1b:4d:df:77:46:e8:12:c5:9c:0d:85:
7c:fc:11:8f:ce:9f:8c:af:f8:60:5c:38:8e:fa:c6:
32:f1:f6:b5:e4:77:9c:f6:ff:eb:5c:de:4f:46:89:
0a:03:9f:0b:32:78:23:41:b9:47:60:ab:55:00:83:
14:fc:b6:53:75:ff:02:2b:10:28:e8:c7:9e:bf:14:
09:a6:a5:1f:21:67:9f:7d:78:b9:7f:46:cb:8b:fd:
a9:92:78:02:a9:d1:ca:ac:b8:47:1c:6c:93:77:17:
b1:83:39:07:41:9b:e2:70:30:5c:d5:cd:84:28:89:
36:86:ce:0b:1e:37:e6:01:21:44:3b:ee:5d:f3:13:
64:d5:48:fe:5c:2a:26:22:0f:7e:f7:df:91:bf:74:
af:39:45:3b:8d:91:31:9d:56:6a:df:e5:45:67:e6:
f1:df:8c:4f:4e:48:cf:a2:ec:d7:5f:3c:59:19:36:
f5:62:22:d8:b4:19:f0:9b:57:dc:c3:db:44:2a:ef:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:EA:8F:97:F6:27:DD:B5:80:B1:38:65:AE:90:7F:BC:7C:43:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17DEDA02BFA11F0B107A1B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:e5:c3:99:8a:73:1d:60:70:9f:7e:c2:68:e7:c7:f1:d8:bc:
66:7f:83:d8:83:12:94:9a:95:f2:f2:01:a4:b2:e8:02:e2:ec:
23:fd:ef:db:de:a8:11:fb:83:c3:a2:bf:4c:23:00:38:2d:55:
82:2b:c6:f7:ce:ab:d0:4a:71:60:55:4c:63:4f:7f:bf:80:a1:
fa:cc:7c:57:89:54:3b:74:91:bc:cb:0c:d0:8b:8a:b1:c1:e1:
d5:e7:75:1f:1d:33:8c:6e:a9:74:3b:20:ce:fe:9c:68:58:f9:
07:aa:6c:19:76:64:72:a4:4c:54:fb:85:99:45:8a:27:d1:3d:
24:92:75:1c:91:78:ea:24:78:8f:11:47:25:e2:74:20:58:43:
9e:3a:77:1d:8a:4f:45:37:53:73:61:ab:1b:aa:2a:68:2f:62:
fa:ae:1e:72:89:f8:0d:55:53:72:d4:83:0e:59:b3:d5:f8:4e:
7f:93:de:47:a5:e2:b3:4a:43:2c:6b:0f:1e:9c:9f:10:ff:a4:
ed:4a:50:09:b3:7b:bf:dd:1a:8e:1d:d3:1e:86:2f:87:02:aa:
5c:87:71:de:06:0a:bd:72:e4:50:0b:6c:32:0f:ac:c7:02:50:
0e:b8:72:97:7d:d6:51:2e:c7:3b:64:8e:91:f2:48:f9:73:07:
eb:94:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:09 2025 by rpki-client