Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3E12EA62AFE11F0969784A4DAE4EC9C.roa
File: D3E12EA62AFE11F0969784A4DAE4EC9C.roa (raw, json)
Hash identifier: fapRZxHjf8iXf0sHWbRZmu1qo3Cz77UdNc98zAiM8vM=
Subject key identifier: B7:1F:AD:BD:15:49:6E:00:03:D0:19:8F:CA:20:39:34:E9:F7:9A:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3E12EA62AFE11F0969784A4DAE4EC9C.roa
Signing time: Wed 07 May 2025 04:50:42 +0000
ROA not before: Wed 07 May 2025 04:50:37 +0000
ROA not after: Tue 27 May 2025 04:50:37 +0000
asID: 54600
IP address blocks: 154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98102 (0x17f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:50:37 2025 GMT
Not After : May 27 04:50:37 2025 GMT
Subject: CN=681ae6a2-51ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:c9:d9:24:11:c0:36:bb:67:ee:4d:b7:fb:
e5:0b:0b:af:66:f2:85:a2:68:90:db:c6:3d:1a:7e:
9a:af:96:f0:64:8d:f6:e6:10:76:f2:c1:29:2c:9c:
74:bc:ec:48:03:4f:65:d3:30:f7:cb:5c:8e:65:ab:
b9:2a:c7:ad:fe:4e:db:e8:e1:61:ab:18:ef:4e:69:
04:98:a2:30:a0:0e:6e:c5:c7:bc:27:8b:d0:ee:13:
cf:cc:77:71:1d:69:52:1a:90:20:6a:db:77:f5:18:
2b:5f:fa:3c:e4:12:1c:b0:b6:23:95:cc:71:55:b9:
39:3c:a5:15:eb:79:2b:2d:ed:92:2e:7f:7f:eb:ad:
8b:75:99:43:2d:e4:9d:2f:56:f5:61:87:e4:37:01:
76:28:1d:f2:4b:69:70:28:6f:e4:e6:7e:3c:7d:8a:
87:5f:58:6f:1d:37:aa:54:a2:4e:c6:a2:9b:a0:60:
cf:bf:16:d7:cf:4b:09:ed:7b:e9:ec:f2:f6:be:7c:
d2:62:0b:bb:c3:cb:08:bf:33:8a:43:9e:e5:01:cd:
c9:c8:9e:cb:84:13:b5:6d:ce:ee:5c:4f:38:ce:d6:
07:6a:55:01:0b:ec:f6:86:82:cc:e4:43:56:63:4b:
8c:b8:ff:83:8f:89:c5:98:df:28:7e:78:14:e9:3b:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:AD:BD:15:49:6E:00:03:D0:19:8F:CA:20:39:34:E9:F7:9A:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3E12EA62AFE11F0969784A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d5:b5:1a:2e:65:ca:ce:92:8a:a2:8c:78:3a:67:3b:6e:56:b0:
98:02:a5:5c:8d:4d:20:57:86:a6:f4:e7:0c:59:f1:36:00:ff:
81:5a:6a:4d:2c:22:f2:1e:52:c5:2d:e1:7e:67:16:df:4d:7a:
8c:c8:39:c7:ae:44:fa:32:3f:95:e1:51:81:10:34:6f:9e:f9:
be:75:e7:c9:9c:08:b6:8b:96:cc:43:8b:09:3e:48:76:fb:c6:
23:b2:b1:fa:c6:bf:7d:64:7d:cf:6c:93:65:fe:9e:ff:b4:27:
fe:3f:e9:e2:61:96:67:62:7d:6d:3c:0a:fd:70:f6:d2:ec:0e:
48:4f:bf:e0:e6:e7:ae:33:a5:79:a7:37:ee:46:2f:7e:f3:c1:
e5:69:0f:9e:61:cd:f8:22:f2:80:bf:ac:2e:cb:f7:a2:d9:d5:
2e:a8:22:50:76:c2:25:02:f7:cc:77:b6:33:42:28:7c:e8:e0:
53:b4:9c:47:c0:16:12:39:15:77:f8:45:1b:d9:f0:0e:83:cb:
27:15:8f:fa:40:18:c9:75:d3:20:57:f5:37:48:48:c3:91:2b:
3f:04:31:42:fa:68:0b:68:d3:b7:bf:e1:d3:b1:21:64:bc:f9:
ba:ed:b0:f4:75:7f:30:1d:82:ba:14:6d:fc:12:0e:0d:ed:2d:
d6:29:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:10 2025 by rpki-client