Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B7796E37AC11F09D7FEED1DAE4EC9C.roa
File: 35B7796E37AC11F09D7FEED1DAE4EC9C.roa (raw, json)
Hash identifier: OulpkCPVoQsnTeaTPccDPQnA8NE2j812El3heBYxy7o=
Subject key identifier: 09:B8:75:3E:1D:26:B0:00:6C:E1:4E:FA:0E:6E:12:BC:14:BD:75:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B7796E37AC11F09D7FEED1DAE4EC9C.roa
Signing time: Fri 23 May 2025 08:02:03 +0000
ROA not before: Fri 23 May 2025 08:01:57 +0000
ROA not after: Sun 22 Jun 2025 08:01:57 +0000
asID: 213495
IP address blocks: 154.222.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98800 (0x181f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 08:01:57 2025 GMT
Not After : Jun 22 08:01:57 2025 GMT
Subject: CN=68302b7b-e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:43:d4:e8:d4:c0:9c:7e:61:bc:64:b9:c3:
7e:ca:32:8e:4f:6b:e8:82:ed:f4:17:4b:c3:3e:c6:
6b:d9:23:55:9f:c5:a0:23:48:14:46:05:9b:a0:5d:
f7:43:60:c3:a8:26:1b:29:94:58:3c:e4:48:16:b9:
9f:4b:20:0c:4f:8f:a8:04:ab:c8:f6:1a:e5:10:cc:
8b:36:d4:62:58:8a:31:4d:b1:02:09:11:2b:4b:0c:
21:8f:47:4f:41:3a:e7:18:18:78:28:0c:1b:49:db:
60:54:f3:96:d2:8e:ba:77:ee:0e:0c:60:35:e2:28:
4c:82:b8:a6:35:25:3a:9f:47:19:90:2b:09:01:23:
a7:90:58:b9:ad:df:f1:1a:b0:c5:26:8a:6e:a5:e3:
6e:78:f1:05:a9:6d:0d:ba:17:71:31:94:72:ee:60:
01:2c:62:1b:a8:86:f8:05:5b:de:cb:bb:14:72:b0:
cb:e6:36:0e:22:42:f7:63:3a:23:ab:91:10:fe:20:
63:d0:36:64:15:c7:c0:05:0e:9d:9e:10:9c:32:59:
0f:73:cc:25:58:c1:6e:e8:83:2e:e6:11:1d:ae:ad:
82:20:0e:a0:00:ad:a2:83:f0:3a:e9:b5:9b:6a:dc:
69:07:a1:b2:b0:21:39:ba:9e:c2:b0:b7:a4:2f:2b:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:75:3E:1D:26:B0:00:6C:E1:4E:FA:0E:6E:12:BC:14:BD:75:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B7796E37AC11F09D7FEED1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:f3:f8:6b:14:19:4a:d1:b7:96:3e:66:28:ca:c7:82:e1:a4:
23:f3:29:06:39:92:33:2d:46:ba:f4:d7:ec:d7:28:54:25:fe:
95:4e:21:81:49:d5:83:e8:28:18:e2:4a:67:f9:eb:37:ae:16:
83:f4:a5:8f:56:9a:d0:6e:cf:23:22:01:26:77:85:da:ef:ff:
00:01:b4:2d:f5:da:1d:55:e6:98:33:62:1d:54:cf:4d:eb:50:
6e:1c:63:32:09:a7:ee:92:0a:20:63:f1:2f:1a:36:e3:98:92:
e7:a3:e4:96:d5:74:ad:f9:75:b7:98:e0:e1:5d:56:68:06:6a:
e6:b6:3d:6d:d3:98:87:a2:a0:58:30:c0:44:6b:0d:1a:79:58:
30:82:a5:05:7d:72:51:b5:8f:d5:d3:69:e5:ff:3d:84:76:e6:
dd:5d:95:1e:b7:6f:e8:34:87:90:6c:08:d3:2b:31:06:cf:44:
99:d7:76:cc:8f:8d:6b:18:54:3e:2e:1e:87:f3:da:47:bf:5e:
aa:bd:f0:71:5c:d5:9f:95:65:e6:70:96:e2:30:fc:e8:89:71:
5c:a5:a9:63:c6:ab:29:f4:67:fb:0a:e5:a9:67:cd:25:b0:76:
2c:81:04:5e:ba:e0:cd:4d:bc:ea:0f:3a:5d:35:79:35:22:0f:
59:13:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:30 2025 by rpki-client