Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/923EF68E3BB311F0BA92FF8BDAE4EC9C.roa
File: 923EF68E3BB311F0BA92FF8BDAE4EC9C.roa (raw, json)
Hash identifier: xsD60tptFbLL17iRoamG7IZRs2L7FOoI2Kg9dk9oiJ0=
Subject key identifier: 2F:9F:26:25:5B:F5:7D:66:14:AA:8D:D5:F6:72:00:4C:A6:A7:70:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01834A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/923EF68E3BB311F0BA92FF8BDAE4EC9C.roa
Signing time: Wed 28 May 2025 11:04:49 +0000
ROA not before: Wed 28 May 2025 11:04:44 +0000
ROA not after: Sat 05 Jul 2025 11:04:44 +0000
asID: 57043
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99146 (0x1834a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:04:44 2025 GMT
Not After : Jul 5 11:04:44 2025 GMT
Subject: CN=6836edd1-e2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:47:4f:43:7c:57:df:95:87:31:0c:07:af:41:
6e:d8:4b:cf:f7:58:8e:b8:40:81:53:cb:51:5c:f6:
b1:80:19:ab:32:ba:15:7a:07:6c:7b:18:a1:f4:80:
c7:43:0c:58:08:b0:4e:9c:f4:66:28:32:e7:70:e7:
c3:a8:fb:cb:35:ee:d9:2d:45:8f:b6:ec:f2:80:a3:
74:b6:c1:37:a5:46:24:47:f3:94:91:d0:7a:38:5d:
bd:c5:0b:7f:6c:53:81:93:53:63:6c:21:63:8b:5f:
a7:07:a7:9f:6d:a5:4d:0a:ac:65:05:bc:65:a8:69:
37:6d:50:41:c1:b3:4f:c0:96:1b:e9:5d:bf:4d:39:
4b:39:50:b2:73:89:7c:d0:3f:d0:ab:04:92:31:2d:
eb:b2:59:bc:62:55:0d:99:3c:ba:a7:0f:9c:8d:2a:
22:8d:b0:db:4c:4c:40:73:26:b8:f9:2c:7b:ed:91:
25:26:d6:dc:1a:e8:62:a9:29:58:9b:80:c7:a3:25:
17:c8:07:ae:3a:62:22:97:b2:f7:e4:40:5e:c2:7c:
95:ff:78:85:89:77:63:9d:f0:89:bc:74:9a:93:62:
6c:17:38:b2:ec:8b:bd:a5:f7:4e:ef:a4:5c:d5:9b:
1b:18:6a:06:9e:06:67:2d:c2:31:7c:18:52:62:a3:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:26:25:5B:F5:7D:66:14:AA:8D:D5:F6:72:00:4C:A6:A7:70:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/923EF68E3BB311F0BA92FF8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:59:34:83:4b:7c:f0:9f:0e:f9:b5:a3:ce:c6:18:47:6e:07:
9b:1b:b1:82:f5:bf:01:d9:97:8a:ca:ca:62:f2:70:05:a1:f4:
56:eb:b9:29:c9:5a:58:7a:30:33:fe:d7:a7:12:78:59:7b:9c:
26:18:9b:14:9b:3b:91:65:a3:b4:00:33:df:f7:9b:c8:b9:26:
76:3e:60:23:26:14:04:49:b5:ec:fa:df:d4:3e:35:52:e9:dc:
a3:7b:f4:57:53:78:80:33:97:46:30:eb:9f:97:cc:be:e1:d5:
cb:db:f0:56:e4:9b:c5:4e:98:2c:33:1a:92:5a:4e:23:da:26:
f9:ca:a6:8e:14:5c:cb:01:c2:91:26:1e:c4:95:36:1a:81:f9:
06:0f:ee:52:5b:bd:c1:6c:29:f2:a7:18:0b:40:29:c8:fc:85:
1d:ec:be:dc:c5:dc:49:18:84:da:5b:b4:d7:ac:f6:f2:47:67:
57:9f:85:94:38:31:40:02:73:09:e3:f9:0f:8b:7c:9f:b9:b6:
6b:ac:2a:45:95:dd:bb:59:9d:9f:23:b5:1a:36:e1:2a:9d:5c:
d5:51:88:47:25:83:4e:8b:2c:bf:fa:37:09:b2:57:81:29:27:
61:6c:77:d7:49:0f:c4:b1:57:a4:7f:b7:6d:30:69:0a:0c:cc:
b6:39:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:01:10 2025 by rpki-client