Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5D4AC1C242F11F0BE6EF18ADAE4EC9C.roa
File: E5D4AC1C242F11F0BE6EF18ADAE4EC9C.roa (raw, json)
Hash identifier: TvbbgGdGMGxoDSFe01ZqsqNuT675MhQf1hVKjVwWEQA=
Subject key identifier: 3B:E5:24:53:4F:B5:1A:08:7F:62:9E:35:0C:D0:55:1D:A8:C1:23:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5D4AC1C242F11F0BE6EF18ADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:54:19 +0000
ROA not before: Mon 28 Apr 2025 12:54:14 +0000
ROA not after: Thu 23 Mar 2028 12:54:14 +0000
asID: 17561
IP address blocks: 154.203.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97219 (0x17bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:54:14 2025 GMT
Not After : Mar 23 12:54:14 2028 GMT
Subject: CN=680f7a7b-5c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:87:af:9f:78:ca:00:70:50:6e:bc:d8:b3:
14:fa:31:6e:07:30:fc:c4:74:77:a7:0e:58:15:0c:
35:09:9a:be:33:3d:11:f6:42:a9:ac:54:f5:03:43:
a0:03:78:14:35:fa:6c:2b:c2:ec:2a:1a:09:a4:88:
45:5d:08:42:69:dc:bd:70:57:f3:16:cb:24:90:8c:
9f:db:82:59:71:0e:0c:4d:04:8f:48:40:9e:46:21:
46:3a:01:4b:1f:d6:b7:6a:1f:79:37:58:51:dc:fc:
4e:d8:d0:e1:f9:85:b1:34:5e:9c:bb:e8:c6:8a:6f:
a4:b0:2e:e3:b6:ef:26:32:02:68:39:31:40:71:f7:
7e:67:91:96:2c:e9:2a:97:df:33:ae:e0:a5:77:13:
f5:cb:6b:74:1c:ae:bd:b1:04:9d:1f:cf:5c:62:27:
8e:b7:c7:26:ef:d4:bb:e2:58:c2:6c:42:cc:02:5c:
ba:46:86:fb:de:25:4a:f7:ec:0c:df:0c:c1:36:66:
58:a6:3f:5c:77:40:c8:f0:c2:dd:a5:df:ef:11:30:
52:b3:a6:2d:e3:a7:4d:85:95:69:15:62:cd:9b:71:
ae:74:71:40:0f:82:4a:0c:10:b1:dd:d5:a3:6b:bd:
d1:16:f7:8a:3a:9a:09:f6:5c:24:5f:4f:fb:89:8d:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:24:53:4F:B5:1A:08:7F:62:9E:35:0C:D0:55:1D:A8:C1:23:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5D4AC1C242F11F0BE6EF18ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.73.0/24
Signature Algorithm: sha256WithRSAEncryption
45:30:8d:96:fd:76:70:13:2b:2b:d3:d4:f5:40:20:a4:e8:02:
9a:de:bb:06:59:63:56:a2:63:94:a2:93:b3:cc:d8:64:ce:ad:
55:65:e6:bb:2b:60:44:da:f2:34:1e:a7:65:31:de:6a:be:f7:
35:fa:8d:94:e1:16:c4:6b:de:92:82:a5:3a:a1:88:ae:da:73:
15:3e:2a:a1:7d:a6:e1:27:2c:dd:34:9c:1c:0a:0b:2f:57:0a:
7e:db:22:81:7a:f4:78:1b:cd:34:bb:4f:07:17:84:5b:d2:e7:
3f:59:65:f7:66:4e:14:ef:e5:d3:ed:a4:02:e0:93:c1:16:4b:
36:23:71:40:fc:4b:93:10:fe:ce:49:3c:a3:1a:5e:20:86:37:
5d:ac:15:d8:d7:52:d8:72:7b:20:48:d6:27:6e:6a:d9:ac:5e:
e0:d2:34:91:50:70:90:f1:55:8a:95:ac:a0:f4:97:fa:9d:21:
83:d8:fb:a2:2e:7c:dd:8f:43:2f:fc:31:b0:ce:c2:f1:b2:05:
d5:40:94:1f:3a:9c:6a:0b:b1:47:95:33:0f:7b:c9:83:92:83:
77:02:b6:e8:68:63:ea:7d:24:19:20:f4:dd:2c:a2:9c:80:86:
71:76:8b:df:e6:fd:d4:3c:dc:fb:56:7e:8a:63:2a:72:88:8b:
2c:ad:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:58:44 2025 by rpki-client