Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC45256A19FA11F0AEE5D8EE6DB8BCC6.roa
File: FC45256A19FA11F0AEE5D8EE6DB8BCC6.roa (raw, json)
Hash identifier: 8CP+nARdNStRgmWeW0tL5jR68RH29J6jkMcwLdez+vY=
Subject key identifier: 1E:5F:4A:4B:5E:D3:FD:74:9E:42:D9:B4:7F:79:A5:D6:24:3E:9D:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017941
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC45256A19FA11F0AEE5D8EE6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:10:22 +0000
ROA not before: Tue 15 Apr 2025 13:10:17 +0000
ROA not after: Mon 08 Dec 2025 13:10:17 +0000
asID: 135423
IP address blocks: 154.210.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96577 (0x17941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 13:10:17 2025 GMT
Not After : Dec 8 13:10:17 2025 GMT
Subject: CN=67fe5abe-0a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:bc:d3:56:a1:44:cc:8f:fd:c9:5d:54:f5:
ae:87:10:8b:cd:09:7e:4c:ab:d8:e7:57:9f:59:c9:
bd:b0:ba:82:ea:cf:a4:f4:52:be:85:2c:5d:a9:53:
fb:85:ec:f8:fb:f1:fc:93:3f:7c:b5:e3:92:92:a5:
4c:a6:4b:21:0f:d4:0c:a9:6e:06:a3:6d:06:6a:f5:
53:66:34:19:87:10:3b:60:db:9d:50:bf:95:78:01:
ea:e5:a3:6b:db:39:c8:05:39:23:1b:6b:91:31:c3:
41:98:1c:15:10:d8:db:03:5f:c3:6e:33:52:af:32:
f1:21:b2:29:b9:a6:2f:20:74:ea:fb:92:91:0e:37:
d6:64:1b:fd:09:b5:02:c7:0c:d2:3f:58:b1:0a:1f:
bc:90:1c:d8:a8:a4:44:94:37:93:f9:06:dd:12:15:
b2:eb:fa:77:25:fb:29:94:d0:4d:7f:88:61:c7:d8:
5a:54:9e:9d:1e:36:27:7c:f9:d7:f7:11:06:7a:f2:
be:50:6d:db:ee:11:be:12:27:f3:8d:a6:a0:27:2d:
7b:c6:19:19:79:c7:06:48:76:8d:3c:62:e5:29:52:
40:10:5e:48:22:e1:ef:e1:e4:c7:9f:60:8c:36:79:
51:0d:91:d8:ad:05:3d:07:5a:9e:49:e4:03:72:e1:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:4A:4B:5E:D3:FD:74:9E:42:D9:B4:7F:79:A5:D6:24:3E:9D:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC45256A19FA11F0AEE5D8EE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:c2:bc:e7:05:d1:70:95:00:11:a9:8e:70:4d:2b:b3:67:e2:
b0:af:3f:9a:d2:d2:84:93:f1:13:62:4b:2b:86:75:28:96:ad:
9c:5b:3d:ed:27:1c:73:1f:79:7c:36:2a:b3:3e:20:80:f7:1a:
2b:7d:a8:d7:1a:79:5e:63:e6:70:df:a2:85:5d:d1:4e:9e:94:
5d:e4:29:b1:08:d1:3b:5c:a1:4d:ce:ac:94:16:94:24:0f:52:
25:06:3c:82:31:ab:18:04:0e:38:fd:ba:16:ea:e8:42:ee:b4:
45:4e:2b:75:7e:3b:e3:70:60:3f:62:08:8a:2b:12:1e:73:23:
2f:42:c6:a0:16:2e:4b:6e:9d:79:e1:1a:6b:ce:88:98:aa:04:
ee:04:38:4c:cc:37:07:c8:1f:43:73:2d:8c:47:90:71:3f:ca:
eb:0c:95:b0:ea:43:74:50:6b:8c:fb:44:87:d7:cb:06:1b:52:
f3:e0:e5:d8:5c:31:c1:36:68:b9:6e:0d:d8:2d:4f:e2:7b:b8:
52:a2:5f:d2:35:7c:1b:11:b7:f2:0d:29:1c:2c:4e:f9:ec:cf:
49:f7:fe:5e:77:77:51:69:68:19:8e:0a:6f:4d:a2:74:7f:92:
dd:09:b9:89:04:1a:51:16:c7:1c:5c:1a:41:8a:fb:d6:84:16:
86:0a:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:09 2025 by rpki-client