Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DACD6390241111F0A100D4C3DAE4EC9C.roa
File: DACD6390241111F0A100D4C3DAE4EC9C.roa (raw, json)
Hash identifier: q5flDF7WGifo+mswwsieKfTm0IlUeS34Qd3citQjFrE=
Subject key identifier: C1:C0:1E:44:6C:3C:26:01:EF:C6:9F:D2:DA:F6:2C:40:49:EC:E6:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DACD6390241111F0A100D4C3DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 09:19:16 +0000
ROA not before: Mon 28 Apr 2025 09:19:11 +0000
ROA not after: Fri 30 May 2025 09:19:11 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97104 (0x17b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 09:19:11 2025 GMT
Not After : May 30 09:19:11 2025 GMT
Subject: CN=680f4813-bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:fe:ff:2b:f3:a2:3f:37:1a:ac:26:4a:2c:
d5:cc:f0:b1:09:4c:69:72:51:eb:aa:7f:c2:87:58:
ff:98:d7:b7:a3:8a:b3:b6:c7:c2:92:f9:79:6d:9d:
15:2e:f3:12:48:1e:4a:74:ba:8e:69:64:fc:a5:a7:
f5:32:d9:34:ef:b0:5b:a4:c2:a0:84:5d:84:18:a1:
d8:3a:dc:6b:b4:55:fe:d2:4c:9a:48:36:df:97:02:
d6:8b:d2:ce:ac:5e:8b:b3:49:e5:b3:61:d8:9e:5e:
76:3f:b5:a3:66:de:9d:74:1e:c0:2a:64:09:da:67:
03:e2:e7:6e:48:2c:74:ad:ba:5c:07:35:11:49:c8:
71:48:06:4b:37:c1:16:d9:bd:cd:c2:a6:49:45:da:
d8:1f:b6:3b:65:b8:15:6f:90:e4:ab:c0:71:a7:95:
f4:33:ee:4a:c3:fd:c7:37:4f:6a:00:be:84:e4:70:
1e:18:2e:ed:2e:df:19:e5:63:18:65:8b:85:ef:b6:
40:8e:19:21:d9:ff:90:31:62:14:6a:8f:02:86:4a:
3d:79:29:69:0d:81:cb:00:a7:9a:4d:20:e3:3a:0b:
03:eb:7e:e1:81:41:12:e5:4b:2c:f3:05:0b:06:3e:
37:5b:df:30:6e:40:90:a3:da:08:5a:0d:4e:c0:b1:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:1E:44:6C:3C:26:01:EF:C6:9F:D2:DA:F6:2C:40:49:EC:E6:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DACD6390241111F0A100D4C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
c7:ba:56:de:76:a4:12:f2:92:9a:34:4e:dc:a3:4c:fa:26:c4:
3a:e3:94:42:72:e3:cb:a3:37:3d:ea:82:61:56:4f:0f:61:07:
d8:ef:f1:b2:d7:cc:d1:06:c2:28:66:09:0b:0f:79:24:d1:fa:
8a:6f:84:21:7d:69:a0:04:02:e6:c9:25:6b:60:36:74:fd:a3:
87:09:47:ce:18:89:6e:1d:98:0a:fd:51:5a:b9:fb:c5:65:99:
cb:6f:be:dd:6d:42:ec:a8:7e:31:29:17:5d:67:1f:0c:5a:6a:
7d:84:2c:47:7c:33:21:45:5d:fd:e0:b9:27:f0:6e:67:a0:40:
56:44:57:09:56:1d:dd:54:2d:07:5c:e9:30:70:f7:34:44:74:
f0:ff:47:70:d9:28:d8:4f:4c:d3:32:53:96:38:d1:12:91:43:
2e:dc:04:f0:f7:69:a1:b4:d9:ef:14:2d:11:f9:05:4d:c2:1d:
c6:c8:e6:b8:db:ce:c2:ef:fe:82:49:34:af:a1:eb:a3:d3:75:
50:c5:e1:fb:fc:16:8f:dc:d6:f0:c1:99:83:a3:19:2f:29:77:
4c:1d:11:e3:9c:69:4e:84:35:95:37:43:17:53:d6:04:20:a1:
c7:57:79:b7:cb:36:17:03:19:e9:00:de:bb:ba:62:7e:bd:8d:
d7:f1:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:53 2025 by rpki-client