Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03662AA1DCD11F0BD1289DBDAE4EC9C.roa
File: D03662AA1DCD11F0BD1289DBDAE4EC9C.roa (raw, json)
Hash identifier: RnGWFiS38k5F0kq+u5WXghK3PbZskK6DKXfhgSP8quM=
Subject key identifier: 03:C1:E8:3A:D1:0C:8F:59:AD:5D:12:E8:0F:8C:5B:52:14:1B:D7:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03662AA1DCD11F0BD1289DBDAE4EC9C.roa
Signing time: Sun 20 Apr 2025 09:57:05 +0000
ROA not before: Sun 20 Apr 2025 09:57:00 +0000
ROA not after: Mon 26 May 2025 09:57:00 +0000
asID: 134489
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96796 (0x17a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 09:57:00 2025 GMT
Not After : May 26 09:57:00 2025 GMT
Subject: CN=6804c4f1-de84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:dc:ea:c2:6b:97:aa:1f:66:cc:eb:b8:35:
68:0f:09:da:e2:6d:52:70:7a:7b:6f:90:ce:00:49:
6d:69:dc:02:4b:8a:1d:ff:d8:3f:d6:e2:13:45:b7:
fd:4b:ba:c4:38:d4:ee:e9:26:7b:36:60:d3:d8:26:
2c:83:a8:bc:24:5b:2e:a3:6f:58:82:fc:2f:39:aa:
d0:9a:82:77:bc:99:f4:51:a1:cf:14:01:0d:8f:4e:
45:02:b2:9f:e5:08:23:39:b7:e7:66:6b:63:dd:1b:
ac:4c:34:20:cd:78:f5:57:15:a1:c6:3d:b8:5f:4b:
85:f9:29:f0:0c:d0:ab:08:6c:3f:38:69:06:ea:58:
19:29:2d:98:ea:5c:af:26:94:5c:c6:4e:5d:0b:e3:
18:19:46:48:88:f8:35:a3:96:7d:de:12:ba:c3:0c:
10:9f:8b:ab:b7:0e:1a:75:4c:41:5a:b8:91:dd:fe:
3e:6a:18:8d:e2:91:46:36:63:6f:3f:ef:da:23:06:
a8:30:45:d6:37:9d:51:61:de:a5:ce:48:13:61:73:
af:6d:0e:00:d4:6a:36:bc:32:02:28:20:fc:7e:85:
51:34:89:29:c1:45:68:bc:25:ab:17:fd:d8:78:a4:
65:b9:a2:1a:c6:1e:93:07:6c:8f:36:49:f1:68:b2:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:E8:3A:D1:0C:8F:59:AD:5D:12:E8:0F:8C:5B:52:14:1B:D7:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03662AA1DCD11F0BD1289DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
80:95:a1:01:be:04:02:40:b0:6c:1c:7e:0c:21:74:30:ea:a2:
4e:a3:32:a0:ac:28:81:20:30:89:d4:82:e9:51:04:cd:af:08:
85:4a:73:bc:a3:6e:d8:11:04:2e:12:8e:8f:62:7b:4a:ac:95:
ff:86:cb:10:d4:86:ce:8d:5d:51:d6:b6:45:bd:09:07:74:a5:
e5:76:aa:81:bd:79:98:29:d6:36:0d:49:a7:f1:85:de:05:f9:
97:0a:5f:b0:72:fc:8b:7e:f0:15:02:64:14:5e:66:51:eb:8a:
e2:d2:75:46:5a:a5:18:37:fa:84:3f:9c:44:31:04:6e:3d:95:
0d:60:9f:85:56:16:c7:d6:98:91:91:85:c4:22:93:d1:fe:24:
7a:5b:de:94:d1:33:5d:cb:03:1f:4e:26:68:49:9a:8f:33:03:
eb:f1:ec:c0:76:39:20:49:46:1b:f0:41:2e:0e:e8:30:37:48:
3e:01:5b:2e:c2:7b:8b:ed:d6:ff:ce:6e:1a:d1:ff:9b:44:65:
ee:b3:f5:24:18:29:57:8b:66:8f:d3:f2:cc:28:f5:1f:32:89:
4a:2c:ce:79:2a:9e:4a:f9:32:60:a1:7b:45:2a:67:12:b8:4e:
27:b3:e3:21:8c:ef:fe:6f:c6:ae:d9:d0:93:0f:78:27:b8:30:
80:c3:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:11 2025 by rpki-client