Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A5A783BD511F0A20897E1DAE4EC9C.roa
File: 5E8A5A783BD511F0A20897E1DAE4EC9C.roa (raw, json)
Hash identifier: gE2NyJxeS8toIUtcz40yO95hEetMVYW5ax8Riz1lkQk=
Subject key identifier: 33:98:2A:E5:59:4A:20:D9:43:DF:BE:06:30:62:D8:13:EE:BF:11:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018384
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A5A783BD511F0A20897E1DAE4EC9C.roa
Signing time: Wed 28 May 2025 15:06:45 +0000
ROA not before: Wed 28 May 2025 15:06:40 +0000
ROA not after: Sat 07 Jun 2025 15:06:40 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99204 (0x18384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 15:06:40 2025 GMT
Not After : Jun 7 15:06:40 2025 GMT
Subject: CN=68372685-cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:6f:51:77:4c:34:83:a5:9e:0b:dd:fd:33:
da:88:c3:47:a1:c6:91:59:1f:76:af:8a:bf:52:f7:
1f:6d:17:11:09:0b:f0:45:c1:10:c2:d8:d4:aa:4e:
f7:9c:ef:07:9c:53:b3:3b:cd:34:1c:a7:40:0c:e8:
10:d4:ca:4a:12:cb:f3:e6:29:40:2b:09:50:15:a1:
36:29:c0:1f:64:ab:c8:7c:42:d1:b8:70:69:70:a1:
d6:b0:28:09:49:83:61:71:06:57:79:35:95:45:81:
87:65:1e:3c:9e:2f:ea:06:d9:11:9c:2d:69:94:92:
84:f2:b2:4b:a7:3f:6b:89:b5:0e:bc:7f:45:fc:fe:
38:47:a5:f3:4c:8b:d5:71:aa:c9:96:b5:65:dd:50:
ee:98:f6:89:42:24:c7:42:43:a0:1c:b2:80:e5:33:
f8:c3:78:56:c5:4e:e4:6c:c4:d0:76:89:19:32:26:
c7:58:a6:76:56:1b:d5:60:8f:ac:93:2f:82:1c:e0:
e4:53:62:47:02:91:db:51:81:ad:e0:52:2b:00:e6:
6c:67:a1:b4:d5:2a:b0:4c:f2:5c:65:c7:95:99:12:
7f:2a:41:e6:e7:26:ef:8c:41:b7:72:86:65:19:c5:
06:95:c2:9e:2e:13:e0:26:cd:79:20:a7:94:88:f9:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:2A:E5:59:4A:20:D9:43:DF:BE:06:30:62:D8:13:EE:BF:11:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A5A783BD511F0A20897E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bd:74:5a:69:b4:e4:fc:d6:ec:0a:82:45:cc:a7:84:cf:06:e1:
bd:f2:22:d6:a2:76:e8:fc:e4:77:ec:b4:f2:0a:ce:2e:0e:ad:
40:ee:1b:24:90:bb:d2:3f:cf:e5:06:72:be:b7:bf:ae:fa:39:
a5:f1:c5:54:bb:8a:12:d6:9b:34:b9:ef:72:5b:c3:e3:48:1d:
ea:d6:30:41:a5:02:e7:d8:1f:8f:20:4e:40:39:a0:ba:b7:4f:
61:07:a9:f2:5f:35:ca:33:de:61:8c:27:e7:88:73:29:3a:fa:
f5:79:1f:f3:3b:6b:9e:e9:6c:07:11:d1:2b:1c:21:be:24:58:
7f:fe:7b:cb:25:13:6d:17:28:a2:3d:67:03:ac:c8:8e:6d:fa:
87:bc:55:fe:ac:fa:9a:98:6d:8b:9a:56:34:02:b6:30:5f:1d:
a4:51:30:d8:05:de:2c:e5:27:5c:e3:81:12:bd:34:9c:53:5f:
9c:0f:f7:62:15:21:b5:07:1e:af:c5:4e:71:d9:eb:b4:5b:05:
23:c8:a3:d7:21:0b:23:b0:1b:39:89:5b:b5:0c:d8:6e:90:c0:
cc:99:9f:a1:df:62:c3:d7:c2:c4:47:76:d3:f3:bf:d4:50:5a:
7a:77:c2:ad:bc:63:09:94:6f:5b:c1:c8:d3:7d:41:3d:b2:92:
00:51:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:43:06 2025 by rpki-client