Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F7327E42DC11F084DB3396DAE4EC9C.roa
File: D2F7327E42DC11F084DB3396DAE4EC9C.roa (raw, json)
Hash identifier: p7DaFxwja/KiAor8nFyHuIK+Jundlxa7mN6LuSR8O+s=
Subject key identifier: CD:70:94:50:28:80:54:F4:80:FE:A6:94:15:F8:EA:6F:CB:F7:49:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01852E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F7327E42DC11F084DB3396DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:47:45 +0000
ROA not before: Fri 06 Jun 2025 13:47:41 +0000
ROA not after: Wed 16 Jul 2025 13:47:41 +0000
asID: 57043
IP address blocks: 154.193.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99630 (0x1852e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 13:47:41 2025 GMT
Not After : Jul 16 13:47:41 2025 GMT
Subject: CN=6842f181-b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:4e:29:05:d9:21:3d:d2:aa:07:d5:e7:87:
ea:62:5c:13:78:b9:f6:8a:aa:0b:ad:48:a8:72:42:
82:03:b1:f9:d9:e4:39:05:42:9a:60:f3:f6:e5:b6:
e8:f7:bc:b1:bc:18:d3:57:c8:2a:70:ff:cf:62:16:
eb:ea:e9:c9:ea:bc:d4:54:a7:18:15:00:79:d1:ff:
24:08:c8:e0:13:1b:7c:58:15:e4:4d:3a:9e:04:c2:
5d:c1:ad:39:1d:ab:47:ee:e1:08:73:c7:91:ff:c1:
9e:91:e3:d1:36:3a:d6:aa:55:54:6b:e2:a2:4c:8e:
fa:19:e1:28:95:40:c2:1d:bf:28:39:59:2b:31:cc:
8a:aa:7e:a2:f9:ce:75:58:db:f2:a5:86:97:0a:ff:
bc:2e:6c:0d:de:87:8f:60:78:72:6e:44:25:22:9a:
8d:0d:6d:0f:df:0e:94:35:2f:c3:5a:1c:1e:1f:df:
a8:4f:16:ec:eb:30:78:d6:fc:5e:1b:7b:87:0f:a6:
89:aa:85:6a:fd:46:a7:96:a6:77:dd:0c:e6:b5:9a:
0b:8a:47:34:14:9e:f5:19:5b:e9:ce:b7:fa:ea:07:
be:99:f2:1f:7d:35:ee:d7:65:53:ea:ae:e4:54:a6:
ed:82:26:d6:7c:cf:6e:88:07:a3:98:f9:e2:54:b7:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:94:50:28:80:54:F4:80:FE:A6:94:15:F8:EA:6F:CB:F7:49:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F7327E42DC11F084DB3396DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.184.0/23
Signature Algorithm: sha256WithRSAEncryption
57:2f:ac:0e:06:0b:09:2f:be:a0:ae:23:12:1e:ec:54:35:4a:
ab:2d:a1:d6:e1:8f:3a:ae:92:66:cb:7b:ce:d0:b9:32:9d:ec:
1b:ab:74:b7:4b:02:8b:0e:0a:5e:be:ed:a6:d5:04:a1:c2:88:
1b:27:11:f0:2b:b6:28:b9:69:58:47:0b:6e:49:ce:f2:72:c8:
ee:82:71:88:a0:56:ce:25:df:ad:eb:da:bc:5d:4e:3a:95:f2:
00:9a:ea:a8:86:37:60:39:35:d9:dc:6a:4e:5c:51:08:0e:ae:
1d:18:88:f0:2a:35:85:f4:9c:af:a5:82:53:88:cd:42:1f:72:
a5:d1:6d:73:17:e5:37:36:1b:00:8f:4f:e8:a9:5b:ad:6f:a8:
af:f6:17:d3:3f:89:02:0b:21:51:4f:34:38:92:19:be:88:a4:
22:15:0d:1d:dc:8a:70:75:4f:d1:f2:f0:5b:ab:6a:83:ba:69:
3b:4e:cb:23:21:1d:bd:be:4b:44:57:dd:49:99:a7:d5:d0:ab:
08:82:e6:d2:39:f1:bd:62:3c:96:67:be:71:8f:d5:50:de:8c:
4d:2b:5f:65:97:52:46:94:22:79:04:21:75:c3:57:dd:55:5a:
2c:be:ed:dd:f0:06:bd:2b:6b:c1:9b:6e:6f:d5:60:ad:64:f0:
c7:e5:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:24:20 2025 by rpki-client