Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17847C20FA011F08D96A4AD762E951A.roa
File: D17847C20FA011F08D96A4AD762E951A.roa (raw, json)
Hash identifier: O6+DD/yj7ZNKv9W5Yz+8iVe1g5OzNVjEgO3qSF/W67M=
Subject key identifier: 6B:67:5A:51:6E:27:32:71:CE:B4:20:46:A5:5D:67:97:CA:62:40:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01773E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17847C20FA011F08D96A4AD762E951A.roa
Signing time: Wed 02 Apr 2025 08:59:43 +0000
ROA not before: Wed 02 Apr 2025 08:59:39 +0000
ROA not after: Fri 09 May 2025 08:59:39 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96062 (0x1773e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 08:59:39 2025 GMT
Not After : May 9 08:59:39 2025 GMT
Subject: CN=67ecfc7f-1b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:6f:88:c4:4c:13:51:74:83:4f:ec:5f:c8:
a3:c3:7f:8c:a9:5a:70:d6:4b:9f:c0:d8:49:71:ad:
91:aa:6e:da:7b:8c:e8:03:78:10:74:5c:1f:ca:a4:
ba:54:b5:80:eb:57:b9:be:68:84:49:67:b6:36:ee:
6f:72:b6:69:83:87:bb:fc:05:2a:5a:02:6b:3b:8c:
e7:d3:a8:87:7e:a5:e4:f2:89:db:a1:64:00:24:85:
5c:b4:af:ab:15:58:e6:4e:17:ba:95:23:af:8a:46:
b5:cc:5b:b5:b2:73:49:c0:76:15:47:1b:26:f7:0c:
a8:0e:85:ac:ca:7f:d4:b8:6c:f9:01:b3:9b:a9:49:
e9:3f:4a:ca:1d:67:74:96:b7:62:46:4d:74:87:1a:
b5:59:91:ab:1e:05:f0:20:47:4c:40:e0:82:f4:ec:
03:cb:80:e6:9e:e6:09:6d:d8:bd:7e:7f:c9:28:9c:
26:fd:cd:4e:e8:4d:8f:68:b3:41:9d:ca:41:a1:b8:
68:12:72:56:9f:26:be:06:f6:2a:5e:f6:70:01:4c:
58:cc:c8:3c:4f:f5:4b:62:53:17:9c:6e:47:c9:2a:
be:ff:13:d7:cb:e6:b0:f1:5c:ab:cf:4e:ab:42:4c:
01:0d:e0:71:96:bf:41:75:98:bd:13:98:c3:f7:6a:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:5A:51:6E:27:32:71:CE:B4:20:46:A5:5D:67:97:CA:62:40:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D17847C20FA011F08D96A4AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:c6:c6:27:4c:99:53:ce:90:50:e2:3e:cd:51:52:6e:68:10:
d7:36:75:04:e2:e4:5a:d1:8f:c4:a8:7e:e4:4b:34:34:1e:d5:
7f:96:2a:32:63:1d:41:a4:a2:56:f2:af:20:78:0f:3a:6b:13:
11:6b:ad:b7:0e:1c:e3:50:f2:f7:fb:20:9e:15:be:5d:b0:79:
53:cd:13:cb:91:6c:ab:46:0a:67:8a:2f:d8:8c:9a:fe:06:5a:
d2:5f:19:5d:d1:e4:c5:3a:85:fb:02:78:81:a4:ec:4d:7d:69:
cb:61:49:24:3b:19:6e:56:2f:22:cb:4d:f3:ef:98:bc:38:a8:
37:fe:3a:f5:71:94:5f:0d:b4:f2:6b:09:54:1e:78:26:2c:af:
65:7e:b1:fd:ab:36:a2:25:58:2e:9d:a7:a8:76:48:1b:49:33:
66:dc:f5:28:b1:6f:63:cb:7d:93:73:f5:e5:c8:5b:d3:57:b5:
e7:0b:28:90:1f:cd:4b:c4:52:c8:11:b0:7a:b7:a3:57:20:56:
a0:f7:46:ff:a2:62:d2:00:7c:b5:f5:18:cd:a7:56:0c:65:4f:
00:e8:71:fd:17:0b:6b:f7:c9:4a:43:08:b3:c0:40:4e:ec:6e:
0b:bf:c3:96:77:ef:90:31:50:30:4b:ca:85:26:2a:0a:00:77:
1e:d6:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:07 2025 by rpki-client