Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF46098478D11F0AC595893DAE4EC9C.roa
File: 2DF46098478D11F0AC595893DAE4EC9C.roa (raw, json)
Hash identifier: M94wgVXAwpXHungsjO5QoNxrxJqEFGHUSvrl6pIGGLE=
Subject key identifier: 06:B4:9A:5D:9A:E1:E8:DD:FA:21:B0:6F:C9:7D:47:84:C4:4F:04:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF46098478D11F0AC595893DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:00:14 +0000
ROA not before: Thu 12 Jun 2025 13:00:09 +0000
ROA not after: Mon 16 Jun 2025 13:00:09 +0000
asID: 152849
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99880 (0x18628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 13:00:09 2025 GMT
Not After : Jun 16 13:00:09 2025 GMT
Subject: CN=684acf5e-d641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:08:e9:c7:41:1a:5a:ea:0c:69:6d:3b:99:
44:5e:12:50:ed:36:5d:c5:d0:92:d8:0d:3c:16:e2:
60:1e:10:44:30:ce:1b:33:44:f0:f1:0a:25:a0:76:
ee:4d:8a:52:97:96:c6:fc:de:83:1b:af:04:97:39:
28:5b:63:bc:74:b3:6b:7e:44:b6:96:c0:54:f7:65:
8f:1a:27:19:7c:c8:bb:86:05:0e:f2:86:d1:4e:bb:
bd:f6:4d:a1:17:69:33:42:e0:bc:43:4c:3b:68:40:
73:e3:57:85:bc:4a:36:95:bc:7a:a1:86:2c:3e:3e:
21:2c:37:63:a5:a1:04:53:3a:ea:39:45:22:73:10:
ac:cc:34:47:69:7e:8a:fa:af:be:22:b2:b8:c3:76:
5b:da:11:ec:75:7c:7c:9f:31:2c:b5:68:70:56:d3:
71:04:e6:4b:62:85:a0:31:7d:69:6d:13:b1:98:f2:
a8:99:89:5c:b3:b3:82:d5:0f:a2:7d:2a:0b:25:04:
cd:cc:c3:d2:b8:ea:80:3d:3a:4a:7f:42:37:5b:20:
c4:33:2a:2c:55:9b:05:c0:9c:54:89:8a:44:e4:50:
fd:28:3c:5f:33:ba:24:50:80:17:c5:63:78:cf:73:
5a:d3:09:9b:79:ba:d6:9a:b2:91:d2:40:1c:5b:95:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:9A:5D:9A:E1:E8:DD:FA:21:B0:6F:C9:7D:47:84:C4:4F:04:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DF46098478D11F0AC595893DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
98:fd:61:3e:10:d9:b3:74:43:dc:67:0b:f7:0e:85:58:5f:cf:
ff:ac:f8:c6:66:fb:20:3d:2d:34:8d:d1:73:c9:da:19:47:c0:
02:54:f0:2b:6e:75:78:24:05:6b:b5:d6:14:04:83:c4:fb:f2:
bb:0b:63:68:42:4b:99:ba:c9:25:6b:26:6a:eb:83:d4:42:23:
67:32:88:eb:ec:61:2b:30:d5:f5:8d:78:cf:d7:e7:87:83:29:
9e:98:29:84:b1:65:f6:2a:f5:4c:2a:15:d0:ba:b6:07:b5:08:
3e:f2:3a:14:39:e4:d6:e2:cf:2c:cb:e0:1d:f7:41:f4:9b:c2:
7f:ba:e1:ea:08:9f:26:cd:8e:4f:53:6b:f8:bb:28:da:4d:7f:
07:d0:c6:9e:26:42:4f:d0:6f:0a:d5:13:b8:60:63:c9:76:28:
1f:e2:0d:b8:16:c4:69:de:fa:c3:86:4c:03:ab:8d:24:2a:40:
21:0d:4b:bf:13:8e:85:86:ff:35:38:db:ef:4d:ed:9f:47:ce:
c6:4c:06:c8:2f:45:a3:a7:bf:f9:db:42:0d:22:84:41:3f:c2:
99:72:28:62:0b:2f:96:2a:27:f1:cd:89:8e:93:1c:16:2d:ba:
0f:4a:2b:9a:00:76:e8:30:97:6c:7a:ca:34:fc:a3:b9:98:14:
a4:16:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:08:39 2025 by rpki-client