Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F55C8C37E811F0849F06D4DAE4EC9C.roa
File: E1F55C8C37E811F0849F06D4DAE4EC9C.roa (raw, json)
Hash identifier: TRcFXLflShqw/J+TeaLsLGBcJFyNNXtZkO1dtPyhZ7w=
Subject key identifier: F3:96:01:15:1C:B8:6E:CA:F5:AC:D0:8C:E3:0B:BE:6D:E6:4F:4B:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018223
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F55C8C37E811F0849F06D4DAE4EC9C.roa
Signing time: Fri 23 May 2025 15:16:21 +0000
ROA not before: Fri 23 May 2025 15:16:17 +0000
ROA not after: Mon 30 Jun 2025 15:16:17 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98851 (0x18223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:16:17 2025 GMT
Not After : Jun 30 15:16:17 2025 GMT
Subject: CN=68309145-9070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:ec:c9:ad:31:f9:3e:f4:9a:7c:08:ae:61:
2b:3d:8f:71:ce:2d:3f:6c:24:fd:26:46:ba:de:81:
b9:c2:25:57:bb:dd:25:ae:14:82:58:c4:2e:28:af:
42:78:7b:06:f1:8e:1b:3f:d6:ad:9d:7d:9a:63:fe:
87:98:76:f3:38:cd:ba:cf:42:98:ce:1b:d2:be:d3:
f2:e3:9e:66:a0:34:85:d3:83:b0:32:b0:14:9d:19:
41:09:62:67:fb:9c:d7:1e:5a:9c:61:0f:c9:50:39:
c9:66:8c:cd:70:57:b1:59:f6:6e:f1:47:ae:a7:b2:
5e:94:fa:98:e2:c9:f8:ad:27:68:40:51:21:75:14:
4c:06:17:3b:45:cf:d0:9b:01:e6:14:5a:65:1e:0a:
2b:5b:38:96:16:6a:55:2f:2a:dd:1a:29:a1:c4:f4:
16:2a:de:14:19:f7:4c:51:ee:e6:fd:4c:9b:59:3e:
f4:d0:36:80:96:d6:4b:ce:6d:29:7f:93:81:58:13:
84:ae:b1:bb:76:10:56:25:b4:12:1a:be:31:06:1e:
9e:d4:f3:4b:5c:c0:63:46:4f:58:e3:82:3f:11:8c:
71:39:3f:17:89:ad:ba:37:0b:49:46:2b:e1:65:e8:
6e:17:4b:fb:52:a3:9a:e6:5a:e7:13:fd:97:b8:6c:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:01:15:1C:B8:6E:CA:F5:AC:D0:8C:E3:0B:BE:6D:E6:4F:4B:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F55C8C37E811F0849F06D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:bf:c3:9e:c0:39:49:c0:06:7f:5d:40:44:28:2e:aa:d5:b0:
79:15:46:a2:34:0f:a6:f7:a3:5a:d3:70:c1:e0:2c:a9:45:07:
55:41:a4:86:31:0a:94:46:49:91:70:ff:76:d3:0c:28:6b:d8:
dd:a8:67:05:94:35:1a:54:61:cf:14:a9:24:09:eb:cf:40:18:
ae:0b:8d:65:19:d5:e1:8e:a5:1d:92:84:41:cd:8e:fc:36:ce:
44:48:18:ef:19:8f:2f:06:03:db:1c:bf:b4:d4:27:e9:d0:d0:
02:dd:ab:17:cf:74:8c:4a:4f:64:77:ab:93:bd:18:f0:ea:da:
9f:ee:36:82:f1:eb:a2:18:76:5d:41:bb:99:60:f4:d1:76:4a:
38:95:3c:08:7b:a0:95:38:f6:5a:cf:cc:6b:e2:82:16:a8:93:
14:7e:70:12:53:07:f1:4e:d4:a9:3a:d7:0d:38:04:7b:7a:cd:
33:3d:98:b7:e0:af:d7:0a:01:b0:ea:93:59:f6:16:c0:16:40:
42:2a:68:c0:c0:aa:c4:14:ba:47:c9:5c:54:51:84:df:7e:81:
2b:c9:e2:a9:d6:d8:1e:7a:c0:65:78:38:b5:8a:19:4d:1b:4f:
6f:2f:cf:8d:90:f5:58:f5:92:93:a3:74:f5:ce:6a:59:dd:30:
30:20:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:09 2025 by rpki-client