Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A397774408411F0ADEBA8D3DAE4EC9C.roa
File: 1A397774408411F0ADEBA8D3DAE4EC9C.roa (raw, json)
Hash identifier: lVHtpROt1LHgWz/N+QIxH5abGarPgFwGcM9GfCUnqbc=
Subject key identifier: F8:99:3E:FF:F0:00:66:B3:B4:17:25:2F:CE:A4:19:1D:F6:E4:FE:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018491
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A397774408411F0ADEBA8D3DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:07:37 +0000
ROA not before: Tue 03 Jun 2025 14:07:32 +0000
ROA not after: Sun 03 Aug 2025 14:07:32 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99473 (0x18491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 14:07:32 2025 GMT
Not After : Aug 3 14:07:32 2025 GMT
Subject: CN=683f01a9-8eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:c1:ab:f7:de:4e:82:5a:ea:c6:e6:ed:56:
a8:79:07:56:4d:a4:cf:8b:58:84:6a:70:be:3d:1d:
0f:88:82:ff:e2:42:4c:09:f8:23:16:58:8d:2c:46:
21:66:9e:6d:06:76:ca:51:45:4c:ac:43:7e:f4:68:
c7:28:cb:a5:42:5a:8b:a5:9d:ed:50:15:3a:e0:43:
38:b8:c4:df:51:28:db:4d:08:f7:12:48:88:b1:a5:
de:b0:47:28:4c:3b:46:b8:29:a8:b5:50:78:7b:42:
34:52:cf:fe:ff:de:cf:5c:71:49:66:9e:1c:58:45:
ee:91:1f:0d:ed:2b:59:62:5e:4c:6d:fa:f1:83:9b:
a2:aa:21:73:fd:dd:27:a0:99:9b:0b:0f:cf:f4:03:
1d:c0:f6:51:b7:9a:84:77:6d:f6:84:09:1f:e5:2b:
6d:d4:ee:a2:ff:d3:21:3f:7c:74:2f:cc:48:b8:55:
0f:95:16:02:f2:c7:43:f4:c1:3f:7d:ee:be:71:d9:
74:ff:80:47:9c:1e:fc:bb:d6:dd:87:66:0d:a9:15:
c1:4c:0e:5f:09:85:4b:ca:b4:9c:5e:8d:79:07:34:
65:2f:cb:8d:bc:75:06:55:ed:d9:09:df:67:53:fd:
e4:8c:03:b2:41:03:7f:ee:c7:b9:c7:6e:8b:bb:64:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:3E:FF:F0:00:66:B3:B4:17:25:2F:CE:A4:19:1D:F6:E4:FE:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A397774408411F0ADEBA8D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a3:03:2b:ea:e0:89:38:54:54:bb:3f:78:55:ca:03:e0:52:
7c:de:23:98:93:5a:ae:80:da:34:b4:24:e2:13:97:5d:19:93:
7f:c1:c3:df:56:cf:73:b8:d9:df:2e:6f:5f:8a:a9:ac:a5:73:
99:83:15:db:d6:5d:19:00:90:61:27:43:96:53:fe:a2:c9:b9:
d8:d4:df:ae:de:13:6b:50:04:be:7f:4a:60:d7:00:a8:41:1a:
6d:ad:df:6e:f2:ae:20:95:69:bd:99:b7:05:55:1e:a9:d1:93:
05:5c:8d:68:86:84:69:c4:87:8a:e8:dd:27:9b:b4:90:b6:52:
1d:fc:64:5b:63:5c:24:84:17:82:3b:4d:2a:01:37:64:1f:48:
92:e1:0a:a6:36:27:de:05:e4:3c:e1:d8:c8:2a:27:06:0e:8c:
91:54:66:fc:68:5b:fd:da:b6:e4:e9:09:19:97:c1:df:15:58:
e6:97:ac:17:c6:32:5d:c7:af:ed:35:04:a3:43:41:28:e9:67:
01:95:0e:4f:45:ab:8c:1f:bf:ef:78:f0:ac:68:66:87:f9:c8:
17:83:86:9b:65:0f:40:02:ef:af:42:55:08:4a:18:f0:81:93:
33:02:48:21:83:e7:f7:db:47:af:0e:bf:91:51:46:88:92:0b:
d8:e9:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:59 2025 by rpki-client