Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D465771E28B611F0B9538BE0DAE4EC9C.roa
File: D465771E28B611F0B9538BE0DAE4EC9C.roa (raw, json)
Hash identifier: LGqZY1fInMldjkPVAWglvIr+7rHJTyAbxGk20SaVYMU=
Subject key identifier: 4E:87:A6:50:60:B3:4A:88:D4:5E:A3:48:29:A2:BE:CA:46:FA:91:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D465771E28B611F0B9538BE0DAE4EC9C.roa
Signing time: Sun 04 May 2025 07:10:16 +0000
ROA not before: Sun 04 May 2025 07:10:12 +0000
ROA not after: Tue 10 Jun 2025 07:10:12 +0000
asID: 53808
IP address blocks: 154.94.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97968 (0x17eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 07:10:12 2025 GMT
Not After : Jun 10 07:10:12 2025 GMT
Subject: CN=681712d8-bd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:54:c7:5a:6b:53:53:7f:9e:96:cb:cd:09:
aa:3c:ca:97:78:c6:35:74:b8:fb:35:79:a0:f3:10:
68:a6:57:62:16:41:9f:59:22:b3:fd:88:b2:78:8a:
87:1a:7b:46:4e:c1:bb:8f:cc:1c:01:b2:dc:33:fc:
a1:4f:98:18:ba:4e:12:49:c9:9d:a1:fc:68:e6:c9:
c6:b7:fa:d0:38:42:b1:79:40:c2:6a:c5:92:2d:33:
61:75:fd:02:c6:0f:c1:14:3b:39:28:a9:ee:01:db:
fd:25:dd:2a:80:d5:11:23:2c:19:79:96:42:17:a0:
e9:e1:54:02:11:8a:d9:42:d9:a9:1b:8f:8d:d6:61:
be:e4:3c:54:a1:c7:b0:19:98:97:95:7e:3f:bd:85:
b6:c7:02:a8:b7:8c:22:6f:1d:41:58:c6:c9:d9:7e:
0c:96:4f:99:82:16:21:14:4c:8f:dc:7a:79:12:c1:
75:ea:ba:e3:f4:8e:58:11:86:9d:01:49:96:75:ae:
c8:e9:af:3a:3d:20:17:f8:a1:b4:c0:1c:47:48:53:
11:63:23:a0:02:3b:12:09:6f:80:c7:46:1a:a0:89:
ce:81:f1:fb:4f:a6:80:e6:de:eb:1e:07:59:49:ce:
13:c0:c2:fd:a7:e2:00:9c:8a:ce:fc:13:ef:56:45:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:A6:50:60:B3:4A:88:D4:5E:A3:48:29:A2:BE:CA:46:FA:91:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D465771E28B611F0B9538BE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.226.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:a7:0b:48:93:e8:b6:d9:c4:79:df:4c:f1:55:65:b0:f8:2e:
fb:88:36:29:35:a7:36:d5:3f:2d:fb:21:76:bf:b2:77:b1:72:
14:3d:26:e7:ba:eb:ee:f1:05:03:b2:80:2c:b5:e0:66:11:0c:
77:af:42:0d:2a:07:f6:65:46:61:e0:4d:1f:1b:c0:ed:ed:5c:
13:fa:de:ae:eb:91:d1:c0:be:c5:ca:25:57:43:c6:fa:4d:d8:
48:6b:64:00:54:e6:0a:0d:58:9f:60:6d:9c:58:fb:1b:ee:c7:
c7:2b:0a:0a:1e:e6:6f:a8:ca:59:cc:0f:35:87:e4:9a:16:53:
a6:62:47:0e:a5:93:db:02:7e:e8:9b:8d:c6:12:86:15:8f:da:
82:71:de:a6:7d:39:7c:24:be:67:cf:38:f9:e7:ac:2f:78:24:
ae:da:10:1c:45:85:47:2f:62:eb:26:2e:13:ec:aa:28:8c:3f:
ed:bd:98:10:c5:bb:ad:fa:10:a8:fa:3b:08:0f:78:f4:23:b8:
d7:fb:67:a8:de:db:60:41:6c:bb:c5:ef:e7:64:f1:20:db:d0:
b6:ea:07:36:6b:fe:c8:cb:f7:38:ea:05:6e:27:bd:5c:a8:2b:
32:18:ec:fc:64:c6:92:e2:f7:4a:13:18:b0:be:94:d1:e9:2c:
f3:d9:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:47 2025 by rpki-client