Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55FD17683C7711F0BDF1CF85DAE4EC9C.roa
File: 55FD17683C7711F0BDF1CF85DAE4EC9C.roa (raw, json)
Hash identifier: 0A3EZI6WGishuHa8csG0dcktQy1k8aSH4NCBek1U+6E=
Subject key identifier: FC:79:97:8B:88:2F:F1:60:7E:D2:5F:E4:9F:B5:36:54:6D:48:E4:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55FD17683C7711F0BDF1CF85DAE4EC9C.roa
Signing time: Thu 29 May 2025 10:26:09 +0000
ROA not before: Thu 29 May 2025 10:26:04 +0000
ROA not after: Wed 02 Jul 2025 10:26:04 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99252 (0x183b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 10:26:04 2025 GMT
Not After : Jul 2 10:26:04 2025 GMT
Subject: CN=68383641-8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:47:36:75:02:41:7a:ec:4e:64:bd:1f:1c:
d7:a1:8e:8b:ac:23:a5:3e:97:27:b3:14:eb:fe:c4:
8f:ce:45:b8:f4:53:32:cf:8c:a6:3f:fd:43:c2:5b:
7c:06:78:e1:57:90:fd:fc:e4:b1:a9:18:ae:7d:f2:
d7:d4:54:45:4b:42:37:7f:c4:c3:b0:f8:5f:38:7b:
f4:b8:4b:51:06:e8:b1:9b:84:19:60:30:2b:78:45:
fd:09:48:65:7d:d9:13:0f:39:2f:93:41:f3:a5:d1:
20:98:a5:c2:18:08:6c:b5:b4:da:45:0b:4c:83:66:
e2:d3:5b:5a:46:b3:5b:b7:8c:f0:74:9c:0d:85:53:
90:f0:41:75:e2:fa:a7:9b:36:a0:b8:68:cf:59:74:
f7:b5:a5:3c:cb:68:80:d0:4b:59:37:89:aa:9d:7f:
4f:5b:d8:1d:1a:cf:eb:5f:5f:0d:7c:19:ac:7e:e3:
95:8c:00:ad:f7:bd:53:d0:0a:ce:24:59:6e:59:5b:
ef:c0:33:4f:69:ef:26:aa:d7:1c:82:5d:c4:29:c3:
63:1d:ed:03:b2:c7:db:6b:e9:ac:14:db:da:12:37:
20:f0:2d:a6:93:ba:2f:ce:c6:47:b0:01:86:40:1a:
01:b6:5b:35:51:33:80:13:23:ea:b9:10:f2:1a:10:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:97:8B:88:2F:F1:60:7E:D2:5F:E4:9F:B5:36:54:6D:48:E4:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55FD17683C7711F0BDF1CF85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
22:47:71:46:78:88:95:86:5f:df:4a:62:92:32:51:3e:d3:8e:
ce:8f:a2:21:e7:7c:5a:24:0a:61:75:e2:17:06:88:ac:c3:a6:
48:e5:82:7c:e5:22:90:e4:ee:16:c4:60:5a:3e:80:65:79:cf:
e4:8d:7e:65:17:81:e1:7b:bd:7e:46:a8:16:4a:d1:ee:5b:45:
f0:99:94:60:a9:d2:40:66:ed:30:53:d4:d9:e6:a5:8a:47:03:
7e:d1:ab:4b:a8:bb:ca:e9:17:3e:5b:e6:50:d7:26:d1:22:58:
c4:c6:df:37:14:8e:a9:67:95:60:19:a9:ff:97:73:ee:4b:bb:
33:af:eb:9b:dc:43:9b:b1:7b:1a:34:58:6a:25:0d:5b:1d:ed:
00:4f:52:05:ff:53:31:be:34:b9:70:12:8c:94:ed:0a:7b:59:
ec:7e:b1:95:90:e0:f1:43:79:f7:9f:6d:74:57:c1:3b:9b:52:
c1:ed:c3:8a:1a:5d:c5:ba:0c:5e:f1:ab:d4:61:e3:ef:f8:75:
3d:a7:8c:94:3e:35:72:6f:e7:07:85:e3:59:3b:06:15:84:85:
52:70:3a:6e:36:9d:ff:f3:b6:4a:44:7f:e4:58:e9:4a:a1:aa:
18:e7:8d:d8:56:c5:a4:57:01:d7:c1:ad:2c:e7:76:ce:8f:2e:
f4:0d:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:47:42 2025 by rpki-client