Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2249CF7637E811F090558CCFDAE4EC9C.roa
File: 2249CF7637E811F090558CCFDAE4EC9C.roa (raw, json)
Hash identifier: 0aEyovpEw7DbOxXfQoasL6hIiMlk07dhe9/PxAMncmI=
Subject key identifier: B2:FF:84:93:39:1B:95:9A:ED:D2:7D:AA:98:96:E0:1A:B0:BC:CD:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018221
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2249CF7637E811F090558CCFDAE4EC9C.roa
Signing time: Fri 23 May 2025 15:11:00 +0000
ROA not before: Fri 23 May 2025 15:10:55 +0000
ROA not after: Mon 30 Jun 2025 15:10:55 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98849 (0x18221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:10:55 2025 GMT
Not After : Jun 30 15:10:55 2025 GMT
Subject: CN=68309004-7d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:61:70:66:02:79:55:02:9b:b2:8a:ad:63:
d4:9c:4e:0e:bd:b1:d1:b6:59:2a:f2:7b:3e:cc:ad:
6a:0a:76:cf:f8:8d:09:cc:d9:ad:76:4b:b2:4b:72:
f4:e6:b7:14:34:b3:d7:2b:c7:89:74:30:41:fa:9b:
27:0e:ed:49:aa:53:e5:89:4e:f2:58:18:a3:62:2f:
b4:db:65:09:8b:f9:6c:e4:8c:7b:3d:10:32:d0:5c:
20:a5:77:08:36:43:8a:34:fd:53:1a:3e:cf:4b:24:
94:bc:f9:40:48:35:14:f1:86:ac:b1:15:04:8e:fc:
e9:26:54:a8:91:40:96:5f:c5:ee:64:ab:e1:63:fd:
6b:e9:2b:ba:e1:c1:97:b5:44:6d:7e:94:db:28:34:
5b:0d:32:d7:95:72:ea:75:25:ba:04:7a:7d:9e:a1:
a1:3c:3f:63:51:b5:4b:e8:fc:e3:2e:69:15:ce:39:
30:50:44:8f:a5:22:d1:9c:3f:03:a5:c6:cb:e9:13:
17:82:14:b4:ea:6f:44:b3:91:52:7b:30:3a:eb:21:
62:fe:38:20:55:4e:bc:05:45:74:a4:dd:44:8e:55:
df:8f:0c:43:4c:ba:ae:24:42:e4:b5:ad:d1:78:2c:
47:0f:5b:6b:37:ba:73:40:b3:e6:47:54:5a:9b:14:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:84:93:39:1B:95:9A:ED:D2:7D:AA:98:96:E0:1A:B0:BC:CD:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2249CF7637E811F090558CCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:fc:83:65:60:10:31:fa:cc:b4:bb:27:56:81:ce:79:55:eb:
ae:c5:44:21:f1:97:50:13:2f:76:54:e2:bc:16:b9:06:e3:b9:
a7:6c:fc:7a:81:66:c9:13:76:20:81:aa:36:d0:85:4a:da:87:
fb:be:dd:1d:78:f8:78:08:c5:bb:07:06:3b:ad:a0:b6:09:d5:
a9:89:fe:a6:2b:28:17:08:8f:ef:4f:a4:f5:5d:33:b4:2b:c4:
36:e9:69:3c:72:9b:38:80:1e:d1:ec:aa:82:a6:05:e7:d6:cb:
1b:2b:ad:c1:45:5d:3a:f0:03:68:69:1b:99:ef:79:fc:30:28:
26:77:49:48:55:26:63:c9:ca:f9:57:dc:bd:0f:e7:27:57:c2:
86:86:37:0d:6d:8f:e9:f6:bb:77:1d:67:67:f2:3c:fc:ec:35:
cf:28:f5:fc:0a:53:07:4f:a9:0d:bd:77:13:88:34:9e:21:f4:
20:f9:d5:00:f7:bf:1c:a4:c1:76:41:1d:eb:6f:f4:5f:6a:42:
de:0b:b2:3d:bc:08:d5:c4:00:b2:08:6b:fe:f8:3e:34:5d:9c:
6b:ea:4e:93:b8:e5:90:c8:c4:00:a1:dd:56:03:c5:68:04:06:
f2:e0:d5:95:3c:57:6f:c9:21:92:ac:be:14:33:57:89:8c:23:
04:64:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:12:32 2025 by rpki-client