Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52199966380111F08F298BF0DAE4EC9C.roa
File: 52199966380111F08F298BF0DAE4EC9C.roa (raw, json)
Hash identifier: fItmhLoqEdr0Uos6hWUSGtP5ZFSbaEuY6KR+nzknQXw=
Subject key identifier: 46:5B:9D:65:52:E3:0C:68:86:F1:8C:1A:3D:75:BD:98:03:F3:E3:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01824D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52199966380111F08F298BF0DAE4EC9C.roa
Signing time: Fri 23 May 2025 18:11:18 +0000
ROA not before: Fri 23 May 2025 18:11:12 +0000
ROA not after: Thu 03 Jul 2025 18:11:12 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98893 (0x1824d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:11:12 2025 GMT
Not After : Jul 3 18:11:12 2025 GMT
Subject: CN=6830ba45-86d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:ab:4c:69:18:53:55:47:bb:8b:5c:a0:2c:
c3:7a:7c:8b:8b:aa:a7:b3:f8:b8:d8:24:53:12:28:
a8:18:1d:80:73:e3:c9:67:ed:20:a2:78:1a:b8:21:
65:55:d9:69:ea:1a:b1:13:b9:78:e1:96:91:0a:72:
ee:3f:d4:10:14:b6:73:64:6c:48:cf:56:04:9d:93:
23:91:bd:49:e5:60:eb:6d:12:ad:8b:5c:b5:60:58:
ce:cc:3a:83:45:05:7b:32:d1:53:3c:a2:d3:ba:a6:
87:f0:cc:e2:60:8f:7e:fe:e6:87:0b:51:c4:0c:da:
cf:93:d5:79:b8:56:6d:47:d9:22:ca:a1:05:51:e5:
c9:87:94:29:d9:57:cf:97:9d:a0:ce:21:a8:d0:d5:
40:0e:c0:1c:5d:02:ca:31:2c:eb:c9:a0:c3:98:e9:
03:11:3d:bd:4c:ba:d7:c7:77:b2:4b:19:75:f5:fe:
4e:8f:a4:f0:46:92:3f:66:bf:57:2c:66:95:b9:2c:
f1:bc:67:89:c5:36:ee:5d:3c:fc:6e:1a:32:b2:b7:
98:c6:df:5b:ca:7b:88:f6:10:77:0c:20:da:f5:85:
5f:3c:54:48:b7:9e:7d:fc:c5:6b:ae:c1:59:45:ba:
44:15:2c:cb:4c:81:5f:fd:d3:bd:de:72:59:5d:72:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:9D:65:52:E3:0C:68:86:F1:8C:1A:3D:75:BD:98:03:F3:E3:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52199966380111F08F298BF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
49:5c:4b:d0:76:54:7f:2b:bb:bc:0d:2e:3c:b9:58:ca:23:07:
21:ce:2a:e0:45:74:a0:13:c3:36:ca:fb:4c:9e:28:66:c1:46:
7e:61:d7:8e:05:73:6a:6a:06:aa:f2:1f:83:fd:c6:2f:a5:63:
93:87:b2:be:a5:0f:ce:18:ea:ab:2e:38:33:f3:ba:12:48:8d:
94:53:e1:ba:5b:79:a6:b4:50:1d:30:27:68:7f:a9:ce:83:00:
73:16:26:1a:d6:60:0e:c1:03:7b:9a:b1:6f:97:91:b0:7b:28:
99:55:91:e2:cd:e5:d6:fa:de:d0:d2:05:c5:70:1e:24:73:c1:
75:2c:1d:62:e6:68:8d:87:5f:66:4e:95:36:18:90:05:05:d3:
4f:8e:a4:f1:8a:66:ec:b3:f3:c6:35:b6:6e:20:90:68:96:e0:
05:a4:cc:99:a6:3e:5e:80:ca:e9:2e:bd:18:c0:02:ea:72:d4:
cc:f5:4e:d5:33:5a:c9:95:ed:19:f2:e8:16:e5:a7:a3:a3:8c:
2a:1a:34:fb:7c:bd:d0:c4:3f:6c:da:78:00:a8:e9:da:84:e0:
08:da:12:4b:f7:1b:e8:03:07:b9:bd:36:0b:80:8b:32:2f:23:
c6:22:4e:85:1c:2a:eb:33:12:da:a2:84:f5:ee:0e:92:ba:ba:
12:03:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:04:50 2025 by rpki-client