Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D8E8FD60350411F0897885A2DAE4EC9C.roa
File: D8E8FD60350411F0897885A2DAE4EC9C.roa (raw, json)
Hash identifier: mc0y5tagpi0VzxRygdWRbkqcLhucEQ0fjmPuvflY+7c=
Subject key identifier: E1:21:07:AC:48:73:4E:D2:00:B7:06:D9:93:A2:EE:75:F4:22:C7:63
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 08CC
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D8E8FD60350411F0897885A2DAE4EC9C.roa
Signing time: Mon 19 May 2025 22:58:59 +0000
ROA not before: Tue 20 May 2025 22:58:54 +0000
ROA not after: Sun 20 May 2035 22:58:54 +0000
asID: 37049
IP address blocks: 41.242.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252 (0x8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: May 20 22:58:54 2025 GMT
Not After : May 20 22:58:54 2035 GMT
Subject: CN=682bb7b3-978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:ea:35:96:1e:12:61:04:9f:31:7e:99:17:
83:05:35:3f:7d:3a:fd:79:db:71:44:71:d5:8c:56:
6d:a4:db:80:96:a6:d8:d9:4c:0d:84:84:96:8c:03:
94:ed:9e:44:41:72:32:17:c1:f1:97:41:00:7c:dc:
cb:82:f9:f4:b3:e9:d7:3e:2b:1d:19:ab:30:eb:8a:
dd:4b:3f:3d:f7:f6:90:11:57:c3:b8:bb:03:4f:13:
13:21:7e:d3:19:ee:a8:4c:b7:c8:c1:b9:36:a2:78:
1d:6e:79:7d:f9:ab:a4:aa:78:04:f0:3f:67:ea:cd:
3d:b1:ad:53:51:c2:a0:c3:f5:98:bd:d9:97:47:b8:
f7:6a:2b:b6:cc:69:ae:3e:01:25:71:04:f5:9f:b2:
ed:f0:36:5d:0e:3c:ca:3f:07:9b:f6:7b:e8:a1:00:
e5:1a:76:4f:bc:b9:a1:28:c3:f5:f8:b7:f1:f7:02:
b6:19:a3:e3:ad:ff:9f:61:17:9d:d3:54:f2:95:71:
42:61:23:14:52:ce:fb:9f:2f:fd:ec:34:0d:26:31:
12:22:d7:f1:e7:b8:e4:9a:46:27:c2:f6:93:ca:97:
df:31:03:85:52:49:cd:92:07:ad:7f:e8:20:ff:bc:
21:66:21:17:5f:5d:a4:6f:a5:5a:90:17:71:90:14:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:07:AC:48:73:4E:D2:00:B7:06:D9:93:A2:EE:75:F4:22:C7:63
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/D8E8FD60350411F0897885A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:16:bd:09:54:e1:15:8a:4e:4e:50:88:00:01:40:96:a6:09:
d5:8f:8b:9f:29:48:de:da:d2:a5:86:07:02:f0:93:7f:9d:e6:
5d:e5:0c:1b:e5:bf:f0:5e:42:ac:7e:32:37:05:bf:84:a2:47:
66:6d:4b:a8:11:63:68:28:43:e2:0d:8c:eb:6a:1e:27:5f:ba:
17:21:0b:5c:c7:0a:e2:20:f4:18:c9:0b:7e:51:c3:42:7d:10:
a1:cc:2e:91:77:e2:b1:a6:8f:c5:63:40:91:ac:33:e4:a7:52:
a6:2d:a2:bc:91:19:3c:83:04:11:71:83:d4:4f:e1:5c:cd:99:
ba:a1:17:cb:c2:3c:5d:1f:13:c6:f3:98:09:dc:9a:29:88:5d:
3e:66:37:8c:47:82:89:e6:48:49:9c:c0:5b:de:64:91:74:ed:
33:bb:bc:c5:75:fa:b8:70:44:f5:8f:6b:1a:8e:80:4b:6e:69:
1c:3f:f2:0b:c4:46:ae:89:55:e3:e6:ee:ba:4f:58:eb:ac:ea:
22:42:6e:35:a1:da:63:c5:90:34:e4:ad:4c:86:ae:a6:c7:88:
cc:bc:94:b2:b6:ba:37:4c:3a:4e:9e:f4:1c:4e:5b:33:b8:51:
31:f3:60:7d:ba:cd:dd:b7:40:58:52:e3:ac:41:0c:2a:76:4c:
60:0a:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:11 2025 by rpki-client