Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02EEC07C490511F08579C4B3DAE4EC9C.roa
File: 02EEC07C490511F08579C4B3DAE4EC9C.roa (raw, json)
Hash identifier: rgQFre1adffSJmaMV7nuvL8m/HAd88I8MOuXXJOtkS0=
Subject key identifier: E1:4D:43:6A:46:EF:A3:B5:43:E3:D2:26:CB:61:95:85:D6:99:29:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018686
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02EEC07C490511F08579C4B3DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:50:32 +0000
ROA not before: Sat 14 Jun 2025 09:50:11 +0000
ROA not after: Mon 23 Jun 2025 09:50:11 +0000
asID: 398823
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99974 (0x18686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:50:11 2025 GMT
Not After : Jun 23 09:50:11 2025 GMT
Subject: CN=684d45e8-8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:e9:3e:d3:ae:e4:8f:fc:84:05:ab:44:74:
20:cc:a5:b9:86:1e:0a:58:a8:3d:70:50:f8:3c:38:
21:82:33:23:da:0d:db:cb:20:ae:36:ab:68:af:56:
ff:a4:d9:81:2d:9d:ea:a2:e1:19:cd:1e:e6:42:50:
38:09:27:bf:29:c1:e2:c8:c0:2d:c4:38:db:a7:ad:
98:bc:32:d6:6e:ce:5e:4c:94:2a:f8:61:02:a0:e3:
74:27:35:50:1f:af:45:1a:87:ed:b5:9a:10:3a:10:
d8:23:fe:cf:3a:8d:c4:e1:de:0a:48:21:94:1f:7b:
68:9d:74:af:19:23:a1:ec:8a:34:ca:17:6d:15:42:
4b:78:55:48:b4:39:a2:0d:be:99:2a:4a:31:cf:9a:
ad:18:61:c6:81:25:de:54:59:8c:be:aa:c3:b0:79:
f5:be:22:1f:ab:11:df:1a:9a:0a:7b:2b:2d:4e:af:
6f:24:77:2e:86:81:87:ed:3d:94:55:5b:88:21:d8:
77:47:22:42:bb:2c:74:69:3d:b3:c2:9c:14:e5:89:
d6:61:1f:c3:5c:55:27:b5:82:ba:54:c1:be:4e:11:
0b:cc:d4:88:ef:20:25:2d:b9:90:97:16:c2:1a:8d:
6f:95:a0:66:f9:b1:1f:19:17:19:34:08:27:c2:01:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:43:6A:46:EF:A3:B5:43:E3:D2:26:CB:61:95:85:D6:99:29:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02EEC07C490511F08579C4B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
55:44:65:85:37:20:67:29:6f:55:94:cc:fa:18:3d:17:ee:34:
fd:ef:ae:91:b7:49:6b:0c:8f:e5:27:a4:94:8c:1e:45:1d:75:
ea:87:17:ac:64:80:f8:1e:aa:33:e0:be:98:92:d8:e5:2c:1e:
d8:9a:c8:48:db:a8:d8:d2:00:17:8e:7c:23:f2:91:2d:72:f8:
bc:a2:61:38:27:39:41:6f:b8:35:ef:5f:46:8c:64:82:cc:07:
41:d4:89:c2:14:00:00:76:00:74:c4:ca:0e:04:76:c9:fe:c0:
50:3b:7c:0a:67:ed:0e:17:95:f7:46:04:13:66:ea:54:56:e6:
a6:0a:8a:ec:06:04:11:3f:23:fd:8d:47:ba:76:4d:31:98:11:
32:a4:99:b9:b1:4a:c4:6b:db:52:ff:5f:f1:51:34:96:7a:59:
29:ec:cd:9d:ba:02:17:db:f7:2c:9a:03:f0:32:d3:05:12:1a:
e3:62:20:d6:a7:43:fe:88:eb:4d:36:46:03:d6:f3:34:50:dd:
57:81:84:e4:51:a4:1b:86:f4:4a:81:70:91:2d:ad:eb:be:5a:
c6:88:4e:f4:ac:15:0d:c0:e7:44:c3:d8:3f:14:83:c1:56:a4:
06:bf:57:e2:d0:62:4f:8e:9e:2a:09:d6:03:63:5f:06:51:77:
b2:a0:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:47:53 2025 by rpki-client