Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7740C201C11F0AB1A19CFDAE4EC9C.roa
File: F4A7740C201C11F0AB1A19CFDAE4EC9C.roa (raw, json)
Hash identifier: huAWowidVwFR64hDSs1WBBk8fnaEhEmqMI4H/RAWSno=
Subject key identifier: DA:10:7A:21:72:0A:B9:D0:C4:EC:D7:7D:E1:95:1A:4E:76:AA:0D:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7740C201C11F0AB1A19CFDAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:28:39 +0000
ROA not before: Wed 23 Apr 2025 08:28:34 +0000
ROA not after: Thu 29 May 2025 08:28:34 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
154.200.33.0/24 maxlen: 24
154.200.35.0/24 maxlen: 24
154.200.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96947 (0x17ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:28:34 2025 GMT
Not After : May 29 08:28:34 2025 GMT
Subject: CN=6808a4b7-9d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:c9:5b:9d:a9:58:a1:a9:be:03:18:06:e5:
13:70:17:83:f8:70:a3:0e:d5:c4:87:c6:ca:6f:e8:
54:10:0b:b7:f8:6d:d2:43:16:b1:6b:29:18:43:44:
56:16:88:35:7a:ad:4c:d3:46:f3:b2:4e:d9:bb:3c:
d0:fa:78:56:eb:f0:ab:90:ed:91:f8:75:d1:82:34:
ae:ac:ce:1b:ca:f4:fc:91:b1:d8:dd:a4:b2:34:3f:
28:2c:ad:31:45:3b:70:3c:de:88:5c:f4:c7:76:36:
4b:98:70:a0:4d:40:2e:6d:b6:f1:39:7a:96:cf:23:
4a:db:d6:8b:a9:22:48:7c:bb:78:1c:d5:aa:a9:90:
ad:f3:76:82:3c:42:87:6f:04:81:d3:f2:36:46:5b:
a9:7d:dc:d2:2c:0f:d7:d4:9e:ec:cf:4a:ae:65:9b:
9b:80:00:f6:4e:2d:6f:0b:be:e5:e0:88:d8:42:03:
a9:5a:a2:50:2a:a8:2d:fd:68:e1:9f:96:44:1f:f8:
fd:77:ca:66:01:aa:4a:74:3c:52:d0:b1:21:a1:e1:
c5:b0:0f:85:c1:81:99:f7:47:03:cc:e8:af:75:a5:
ae:a9:fa:79:15:f5:5f:30:7c:13:db:40:64:67:eb:
9d:14:d0:0a:38:03:db:4f:ba:c1:0f:4b:43:a2:15:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:10:7A:21:72:0A:B9:D0:C4:EC:D7:7D:E1:95:1A:4E:76:AA:0D:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7740C201C11F0AB1A19CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
154.200.35.0-154.200.36.255
Signature Algorithm: sha256WithRSAEncryption
90:60:7d:12:8e:79:e1:df:31:00:2d:46:0c:13:a3:db:da:c4:
87:92:e2:1d:0d:59:31:d7:3e:ca:ee:dd:77:ed:1f:26:53:78:
ea:1d:06:f7:98:33:71:01:31:71:ac:46:e9:54:c1:06:0d:24:
9b:d4:9c:ed:c5:3d:c5:52:11:94:7b:aa:bf:7f:ea:bb:d9:13:
6d:34:29:01:95:1e:a5:c0:ee:36:1e:73:bd:4b:9c:02:8e:c4:
4c:c8:08:42:a1:8f:3c:73:7c:45:86:bf:55:fc:b6:53:c0:23:
de:81:3a:d8:9f:b7:55:10:af:55:36:d0:43:4d:d6:19:79:67:
ce:77:0b:4f:eb:af:f1:56:05:a6:1c:5e:5a:e2:ef:c7:70:14:
1e:2a:c3:17:b2:cc:20:c8:4a:e3:b4:c6:4f:a7:a3:ff:34:3b:
37:9e:31:63:03:ae:84:bf:f4:56:3a:b9:06:d5:a2:dc:12:d0:
44:66:7e:78:0c:16:8b:9d:8f:f5:20:d5:ff:37:08:3b:19:8a:
65:c0:60:c6:b8:cd:59:e3:b8:1d:53:fc:d6:d6:4a:d2:63:5b:
47:f0:07:ac:24:1f:cb:b9:8b:f5:d1:50:39:c2:56:a1:14:b8:
c2:78:80:db:6f:f0:ad:66:ca:d3:e9:be:80:df:b2:8e:ea:5a:
ca:dc:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:22 2025 by rpki-client