Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F882732424E511F0B5CC43D5DAE4EC9C.roa
File: F882732424E511F0B5CC43D5DAE4EC9C.roa (raw, json)
Hash identifier: 6iYnV6wsviEvs2t290lSMCYiewG3P60X2SEHdMeuw1A=
Subject key identifier: 86:C0:DB:E4:E5:A3:88:2E:E1:99:F0:7D:73:6B:58:65:28:8D:4A:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F882732424E511F0B5CC43D5DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 10:37:39 +0000
ROA not before: Tue 29 Apr 2025 10:37:33 +0000
ROA not after: Wed 03 Sep 2025 10:37:33 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
154.197.3.0/24 maxlen: 24
154.197.4.0/24 maxlen: 24
154.197.5.0/24 maxlen: 24
154.197.6.0/24 maxlen: 24
154.197.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97497 (0x17cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:37:33 2025 GMT
Not After : Sep 3 10:37:33 2025 GMT
Subject: CN=6810abf3-b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:82:e7:92:8d:f8:26:e3:a1:38:57:ff:d3:
ec:cc:9a:1a:54:35:2e:83:8e:be:62:a2:da:e5:55:
b8:12:9c:7d:48:3c:e6:83:5b:05:03:b0:3e:c3:55:
15:e9:93:41:83:8e:fa:00:69:83:98:8a:09:f6:4d:
90:87:a6:d3:de:30:19:df:e4:5e:e6:21:91:11:0a:
01:04:d6:85:5c:2c:fa:a1:4d:30:e7:43:e8:16:7b:
a8:80:bd:57:0a:8f:25:96:90:79:4a:34:eb:bc:69:
46:63:c1:c2:57:90:90:4c:69:47:fe:c7:3e:99:9d:
70:99:74:b8:76:64:84:03:ff:be:48:63:7f:38:8a:
b7:91:45:5b:3e:ca:4d:80:20:00:64:1e:30:d3:b9:
44:33:79:71:d7:28:6b:47:0c:94:fa:69:00:16:bc:
1e:50:04:8f:b5:2b:6a:79:c3:7f:82:5e:fa:43:44:
eb:d3:85:f4:77:65:9e:1d:9b:0e:d1:e0:30:39:f7:
e9:7a:34:bb:a1:a5:e8:a2:70:84:95:63:86:79:fa:
10:26:08:11:e6:a0:13:f0:d6:e9:8b:b4:44:bb:5a:
4f:a9:ad:33:6f:1a:35:04:b0:de:bf:ff:76:73:71:
f8:ba:db:9d:cb:55:4d:86:da:0f:cf:2a:8f:15:61:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:DB:E4:E5:A3:88:2E:E1:99:F0:7D:73:6B:58:65:28:8D:4A:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F882732424E511F0B5CC43D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0-154.197.7.255
Signature Algorithm: sha256WithRSAEncryption
d3:17:c9:0f:14:83:82:e8:e7:e4:81:c3:8e:39:66:dc:2a:c7:
a8:02:6b:9d:8a:ad:2f:d0:6a:c2:cf:80:bb:2d:bc:1f:07:d5:
4c:c1:ba:b0:a1:33:45:bd:4e:ce:a6:e4:df:5f:ae:97:cc:fb:
08:18:1e:b5:d2:c8:1a:1e:5d:3c:ed:01:89:9a:83:24:01:cb:
fc:a1:d9:c3:64:a1:9b:44:39:b6:33:21:a7:7d:0f:6c:93:39:
01:62:b3:69:cc:33:27:b4:9e:50:9a:a9:cc:c9:27:0d:33:33:
dd:49:41:09:9c:82:db:b1:a3:ea:3a:e0:53:ce:e4:eb:25:c5:
57:4a:8b:f0:64:90:2c:1f:b2:5d:9d:96:c8:1b:a9:47:af:46:
b1:6a:4f:c8:68:b1:0a:f2:e9:75:aa:c5:a3:4a:a7:05:5b:02:
5d:d4:66:10:c4:2b:73:cf:a4:8e:81:28:ca:3b:26:7d:7b:4f:
b6:46:c1:08:34:44:84:09:34:c8:1f:b8:36:bb:97:fe:50:97:
0e:24:ef:cc:5d:93:bd:6d:1f:54:e2:8e:ad:81:3a:a7:07:28:
29:88:32:eb:95:a3:95:56:84:73:ea:54:e9:ff:8d:a6:0e:b0:
fa:4c:72:5b:87:28:4e:a1:1b:1f:c3:f8:3e:6c:e4:ef:15:d8:
68:0e:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:18:31 2025 by rpki-client