Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD73EE36247B11F0A8510482DAE4EC9C.roa
File: FD73EE36247B11F0A8510482DAE4EC9C.roa (raw, json)
Hash identifier: knI0R0cI0coWye6tbTBaeNlmB4xAJuBHvO0ShyWE5n4=
Subject key identifier: 14:A9:A5:B5:3B:71:D8:62:14:CD:4A:E3:4C:40:11:7B:0D:B3:11:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD73EE36247B11F0A8510482DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 21:59:00 +0000
ROA not before: Mon 28 Apr 2025 21:58:56 +0000
ROA not after: Fri 13 Jun 2025 21:58:56 +0000
asID: 138915
IP address blocks: 154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.95.0/24 maxlen: 24
154.95.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97409 (0x17c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 21:58:56 2025 GMT
Not After : Jun 13 21:58:56 2025 GMT
Subject: CN=680ffa24-f84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:3b:7f:64:9a:76:49:70:2c:15:7b:11:52:
a5:8f:0f:4c:03:57:70:c0:71:e8:2b:97:b4:2d:06:
70:dd:ed:12:6a:1a:f3:57:9a:73:b2:92:41:d6:85:
06:c8:29:8d:24:f1:80:54:dd:89:4b:71:22:ae:9f:
5e:83:91:1f:8d:12:d1:f8:1e:6c:47:ca:96:a2:bb:
8e:57:33:00:36:3d:64:38:75:3a:21:61:e7:77:75:
44:cc:e5:5d:07:4f:bd:d3:47:9c:f1:14:bc:4b:3d:
3d:b6:ad:c5:b7:3c:02:d0:16:2f:ff:4e:84:81:7a:
9a:15:8f:2c:a8:49:3b:19:35:df:d9:dc:cb:70:36:
c1:37:79:6f:50:04:ea:dd:37:c6:f3:3f:e8:7f:49:
92:01:a8:e2:57:77:21:06:f1:22:f0:58:e0:65:db:
73:31:54:26:25:aa:91:71:38:d5:83:99:55:57:89:
87:02:16:10:9c:39:57:28:87:a6:3e:d3:24:a8:d7:
66:35:b6:93:95:af:33:8f:59:09:cc:bc:2c:29:a0:
30:ff:86:a6:1d:41:98:7e:45:16:ce:0b:b6:40:d2:
fe:80:b9:d3:c7:6d:fe:ac:1a:79:a9:1b:64:95:c6:
d8:a1:03:0f:cc:ea:9f:91:7b:f3:6a:3a:42:ca:99:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:A5:B5:3B:71:D8:62:14:CD:4A:E3:4C:40:11:7B:0D:B3:11:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD73EE36247B11F0A8510482DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.86.0-154.95.127.255
Signature Algorithm: sha256WithRSAEncryption
34:e1:cd:7b:09:ac:d3:d5:a9:04:c5:a6:7b:14:91:68:12:e3:
67:c5:8c:f5:70:96:03:b4:36:0d:58:3a:9e:bf:8c:2d:89:b1:
f6:ad:87:f1:17:c0:26:73:70:e3:69:16:06:ab:80:f1:d3:24:
1a:91:8c:14:3d:e3:83:45:9d:88:36:22:15:4e:38:bc:47:5a:
6f:eb:05:74:83:ae:91:ff:b1:1a:7b:b0:56:df:f8:14:05:09:
9c:73:7c:80:51:43:57:4f:60:22:dd:8a:da:b7:0b:b1:a6:e9:
05:67:8a:29:43:70:ac:9d:d8:27:ba:7a:0a:1a:bd:85:3c:1d:
ae:22:06:10:86:e5:37:31:ab:33:6c:63:19:7d:35:51:74:e2:
54:7f:5b:9f:95:44:93:66:0c:50:94:d6:b1:ec:2d:aa:ca:5a:
d5:ee:be:c3:5c:c1:d6:75:94:83:00:ae:f8:6e:9f:6e:2b:14:
b3:52:0f:d4:9a:92:dd:bf:85:2f:e4:f9:84:a4:fe:6e:ae:be:
98:f2:be:db:b1:f9:96:23:82:9c:3c:a5:11:99:af:66:63:e9:
11:9b:57:31:d5:5d:68:85:14:57:9d:3d:94:7d:e9:3c:b5:80:
48:61:a0:a8:50:a2:1e:31:b9:e8:5d:5b:c5:aa:48:c5:1a:70:
4e:9f:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:03:45 2025 by rpki-client