Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9405A0393811F0BA5DAEE6DAE4EC9C.roa
File: 8A9405A0393811F0BA5DAEE6DAE4EC9C.roa (raw, json)
Hash identifier: v/a1z734KWxQuxC8+C3z/TFY6EeUbosWuh0s+YJYNrc=
Subject key identifier: 98:58:AE:12:29:C1:C8:5B:F6:F1:10:82:F8:93:64:17:FB:58:8E:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9405A0393811F0BA5DAEE6DAE4EC9C.roa
Signing time: Sun 25 May 2025 07:19:06 +0000
ROA not before: Sun 25 May 2025 07:19:01 +0000
ROA not after: Tue 01 Jul 2025 07:19:01 +0000
asID: 5068
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98986 (0x182aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 07:19:01 2025 GMT
Not After : Jul 1 07:19:01 2025 GMT
Subject: CN=6832c46a-1008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:09:0d:11:07:3c:b6:b3:b2:cf:5f:b5:9a:
c4:d8:a5:2c:40:ab:4e:7d:77:ec:c5:c8:27:ba:1b:
0b:4c:1d:62:1d:45:b7:a3:30:8a:f3:13:80:5a:86:
75:5d:56:dd:4b:04:92:09:c9:52:5b:a2:92:af:a7:
7a:27:f2:75:b5:8f:f8:3d:76:e7:f0:c0:d5:8d:5b:
7c:07:77:78:9a:f6:96:d8:94:81:88:fd:4b:00:a2:
ad:0c:d5:de:74:fc:11:28:23:61:c3:fe:b2:f2:05:
45:63:e0:10:3f:1f:23:32:ae:31:f0:d2:58:af:b7:
2f:37:cd:5c:6c:ab:33:03:15:c4:1a:5e:3b:17:71:
32:31:bc:93:10:55:8b:4d:93:72:ad:8d:dd:77:4f:
f3:18:0c:c4:9b:dc:31:b7:1d:a2:1a:6a:25:1c:f6:
86:3d:29:cf:cc:57:07:a3:c9:ef:ca:75:6c:b3:30:
c1:b6:7a:bb:89:2e:f6:84:4f:60:a9:71:3e:08:4c:
99:7e:21:56:6c:ec:eb:69:5d:c7:0d:39:97:56:ce:
66:0a:62:7e:4a:44:98:28:13:04:30:0a:39:e5:bb:
94:97:ca:f3:31:f9:06:73:98:ac:5a:93:32:c4:46:
70:18:67:3b:ac:e1:68:ea:6e:c2:e6:e6:4b:79:ed:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:AE:12:29:C1:C8:5B:F6:F1:10:82:F8:93:64:17:FB:58:8E:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9405A0393811F0BA5DAEE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:75:52:44:9b:24:f6:3a:4a:55:61:3f:9a:b7:57:77:16:fa:
61:6b:d1:5e:8b:4c:1d:f2:ff:e5:8a:a0:fe:0b:e5:2c:a7:48:
5a:ca:07:97:06:89:3f:06:f3:ec:e9:2b:62:b6:59:0b:17:45:
1c:57:4e:38:f0:9d:3b:1b:1b:b8:a6:b5:fb:22:e4:6d:89:39:
fb:6b:0d:4d:72:af:30:98:14:5d:a0:26:1e:15:ec:1f:49:b3:
e4:01:01:a2:21:6b:71:97:81:75:b0:f1:dd:59:3c:8a:3c:c9:
2a:9d:28:54:3b:06:dc:b1:1e:dc:29:e3:6b:f5:3e:5c:aa:36:
51:9c:5a:88:62:c1:71:1a:65:96:7f:12:ff:92:d0:76:2c:86:
a4:c7:2f:56:b8:d0:de:5a:e1:2e:f1:e8:86:ce:49:a6:08:4e:
25:92:a2:4e:a7:44:54:31:34:d6:34:aa:3c:ba:fc:1b:3a:82:
d2:b5:02:70:d8:63:4a:ca:23:81:ed:90:8f:3d:f0:4b:ef:b7:
3d:55:1b:67:ae:78:7e:14:b2:3b:b5:26:40:44:a6:02:f4:46:
75:fe:a6:b4:5f:a2:90:d0:32:c0:69:ab:7d:36:92:f9:91:20:
8f:98:7c:15:80:42:1b:8c:97:00:fe:7f:ee:da:4a:3f:87:90:
68:b3:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:03 2025 by rpki-client