Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF414BC21B711F090B5B388DAE4EC9C.roa
File: 3DF414BC21B711F090B5B388DAE4EC9C.roa (raw, json)
Hash identifier: u+mV33iRRPwUvKAgbqm2c5MQajBGB0ctVgk67l0QZUg=
Subject key identifier: F5:36:19:55:73:38:5F:AE:DB:6F:CB:A5:96:45:F8:8F:4A:C8:F5:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF414BC21B711F090B5B388DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 09:25:36 +0000
ROA not before: Fri 25 Apr 2025 09:25:30 +0000
ROA not after: Fri 04 Jul 2025 09:25:30 +0000
asID: 138915
IP address blocks: 154.93.92.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97033 (0x17b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 09:25:30 2025 GMT
Not After : Jul 4 09:25:30 2025 GMT
Subject: CN=680b550f-5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:8d:ff:6a:7d:40:bd:ec:5a:9f:68:d5:fa:
58:74:8f:1a:b8:7c:22:ad:8b:56:00:a5:bd:1a:c3:
fe:ad:9b:73:c3:fc:dc:df:a3:59:0a:1c:c0:0e:0e:
9e:3b:ab:cf:73:d9:4c:5b:be:60:07:20:fe:e8:f5:
af:cd:17:b1:f4:01:55:17:ed:93:9b:a9:92:0d:c6:
57:31:d3:ac:34:a1:b0:ed:6b:a6:32:84:4a:cd:2b:
70:f9:f8:23:d6:e5:0b:22:ac:be:c5:00:ba:7d:54:
d6:e0:a2:b2:91:69:8a:50:3f:dc:d5:ea:76:ed:af:
79:aa:a1:be:60:71:fe:86:c7:18:2a:09:a5:18:98:
fa:bb:93:de:07:2f:a0:b2:de:37:61:b0:f1:07:3d:
2e:21:9b:04:52:ed:d9:05:f7:3f:97:83:37:2e:39:
af:87:a2:60:28:5a:d2:18:8f:a0:14:55:4f:a5:a8:
f0:51:ac:98:f3:bb:13:b7:69:f0:95:63:ed:c7:be:
59:94:78:c5:0f:a9:6a:8a:0e:6a:68:a2:72:b9:88:
50:07:41:2b:eb:c9:c1:f9:54:55:f2:fa:9a:6b:ff:
3d:ee:0e:d0:47:2d:bd:a0:78:34:18:06:03:ed:16:
a2:90:63:07:65:fe:dd:e9:d5:8a:98:b7:1b:04:5a:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:19:55:73:38:5F:AE:DB:6F:CB:A5:96:45:F8:8F:4A:C8:F5:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF414BC21B711F090B5B388DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.92.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:1a:1b:ae:92:81:98:53:f1:a1:68:eb:ec:7d:6e:22:39:c5:
af:ef:4f:20:11:3c:56:56:3d:bc:66:8f:e6:2e:29:7d:b7:61:
26:05:5c:9a:03:43:70:7c:58:c2:d9:f1:84:09:00:8e:a5:7d:
3d:04:71:9b:92:e9:de:df:66:de:b1:60:4c:66:6e:ca:f7:85:
61:3c:46:e1:7e:b2:b7:3a:67:c9:36:61:0b:df:cc:15:83:bf:
d2:6a:a3:51:a0:2c:1d:4b:b1:ae:07:13:3a:39:ae:85:66:d9:
76:1a:b0:65:b7:07:86:10:0f:f7:69:d7:94:4b:06:72:8f:4a:
a4:bc:98:a8:56:95:95:d9:1e:92:92:90:d3:8d:37:9b:4d:20:
5a:2b:2c:b9:1e:f4:8f:bf:00:4d:e4:16:65:59:85:c4:81:fc:
d7:9f:e0:bc:1b:c6:9b:b9:e1:f0:10:de:6b:45:38:50:25:0f:
86:38:66:90:68:de:c0:c6:59:28:2e:f1:1b:76:7e:ed:2d:ae:
93:32:2c:eb:3e:1c:39:c6:a5:39:0c:e3:85:a7:17:d7:ce:54:
e8:0f:0e:51:27:99:6b:9b:2f:0d:c0:31:87:90:05:06:96:7e:
06:aa:56:6a:a3:c8:07:14:50:0a:59:19:87:38:c2:c0:e5:b0:
66:67:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:08 2025 by rpki-client