Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79E66F543F9611F0A32339CFDAE4EC9C.roa
File: 79E66F543F9611F0A32339CFDAE4EC9C.roa (raw, json)
Hash identifier: Jr2JZ0ANprCRGHaADoctwaOIvBBxPdfv6fsztuCu3wI=
Subject key identifier: 19:34:E8:6B:40:CE:1C:77:C2:E4:F2:44:4E:15:5B:91:B8:06:49:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018454
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79E66F543F9611F0A32339CFDAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:46:37 +0000
ROA not before: Mon 02 Jun 2025 09:46:33 +0000
ROA not after: Mon 14 Jul 2025 09:46:33 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99412 (0x18454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 09:46:33 2025 GMT
Not After : Jul 14 09:46:33 2025 GMT
Subject: CN=683d72fd-cd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:71:36:a4:b3:6a:47:03:28:a0:3f:ac:8a:
d3:3a:af:a9:29:95:e5:f5:40:48:dc:27:17:8b:f1:
84:95:82:0a:40:78:f5:83:3a:69:1d:d9:1e:a8:a9:
de:fd:48:93:a4:a5:a2:59:04:36:4f:bc:67:c3:16:
04:ba:dc:64:5b:44:b5:4a:32:59:c7:75:b0:5d:0a:
3c:47:1f:c8:51:de:af:58:28:28:39:46:23:b3:0f:
ac:20:8b:15:a1:e7:3a:30:7f:68:85:27:97:e2:28:
50:52:31:05:eb:a7:9c:61:5f:bb:f7:76:5a:e7:50:
d3:03:16:60:2e:a9:b4:ba:cf:12:0f:12:b0:c1:53:
89:4e:d2:11:66:24:61:77:28:68:23:ae:53:1f:24:
8f:ad:47:30:72:a9:34:9d:3a:26:de:98:09:62:b3:
9d:77:7f:51:9f:f2:9f:9a:19:e7:b8:87:04:2d:13:
2f:31:4c:52:b1:3c:e0:bf:be:e1:38:4a:f7:71:e6:
9b:28:b0:04:11:a1:8a:46:6d:3d:82:7b:b6:da:33:
79:97:80:65:c1:6c:37:e6:d5:cc:f2:60:e4:f9:ba:
1f:78:79:27:b9:c9:9e:83:94:aa:b4:3c:f3:6d:bb:
d7:79:cc:e8:0a:c9:94:2a:f7:cd:0c:81:55:50:2b:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:E8:6B:40:CE:1C:77:C2:E4:F2:44:4E:15:5B:91:B8:06:49:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79E66F543F9611F0A32339CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a9:60:92:0a:3e:2e:d0:5b:2d:b1:c0:95:4b:f6:16:1b:2e:
77:66:01:1f:f0:61:70:7a:9c:82:7a:4a:ca:30:58:80:42:90:
f2:35:0d:46:bc:1e:a3:29:0c:57:9e:0e:1e:62:11:bd:6e:3f:
2c:4a:10:47:ff:0b:3c:5a:e0:4f:b1:28:88:aa:df:95:2c:6f:
cb:6c:87:14:a4:be:da:3e:1b:08:d8:bc:af:bd:09:7b:31:3b:
ad:84:a6:d5:e2:aa:c3:8f:35:e7:f5:00:87:94:dd:5b:95:7f:
d4:89:b2:b2:4f:88:3c:77:5a:fe:dd:95:2d:85:4f:f9:20:57:
b9:3d:a0:05:3e:4c:5c:81:df:a5:27:a2:42:66:06:48:ae:8f:
c3:ba:ea:84:88:89:0a:b0:41:a5:32:c7:f5:94:d9:e1:c1:2c:
39:07:f2:11:8a:3c:93:0d:5e:2c:10:ee:00:f1:1e:63:a7:88:
12:42:76:41:c6:f0:0f:7e:5f:80:37:8d:3d:3c:1a:23:9b:12:
1c:f2:b2:9a:6c:89:74:b7:a6:1f:b1:e8:d0:d6:1c:c3:2e:49:
e7:4b:e7:51:a6:3e:42:ff:30:7b:ef:ab:09:24:c7:46:47:af:
ae:2a:b2:47:a4:9b:3e:75:db:b3:54:76:8c:e6:01:74:b9:f7:
aa:91:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:08:58 2025 by rpki-client