Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4FEFA6201811F0819979AFDAE4EC9C.roa
File: 1D4FEFA6201811F0819979AFDAE4EC9C.roa (raw, json)
Hash identifier: Jc1qsMhMBw8m8/dedAAMrKUPFoprxuu5cLcRbqPxg5o=
Subject key identifier: C3:A9:E3:03:9D:BF:DF:02:46:CE:AB:DA:85:CB:B4:7D:15:0C:DD:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4FEFA6201811F0819979AFDAE4EC9C.roa
Signing time: Wed 23 Apr 2025 07:53:59 +0000
ROA not before: Wed 23 Apr 2025 07:53:55 +0000
ROA not after: Wed 29 Apr 2026 07:53:55 +0000
asID: 28458
IP address blocks: 154.212.5.0/24 maxlen: 24
154.212.6.0/24 maxlen: 24
154.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96933 (0x17aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:53:55 2025 GMT
Not After : Apr 29 07:53:55 2026 GMT
Subject: CN=68089c97-d9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:8e:64:c6:62:28:e2:b7:ba:d9:4a:5d:c0:
a6:71:44:b8:ae:c1:8a:99:ab:30:54:33:8f:6d:d9:
85:5e:7d:b1:25:bf:35:04:25:37:d8:5f:1b:1b:48:
0d:e6:31:4c:0f:fb:78:f9:47:90:1e:38:a6:47:0a:
e2:1b:d3:bd:17:61:9c:aa:e3:70:4a:0e:ff:6a:3c:
ca:ba:52:6f:78:1c:90:3c:4d:20:ae:92:09:7d:3a:
81:8a:42:4b:9b:77:ab:17:0e:6a:73:db:34:5a:e9:
6e:52:5a:11:56:51:9c:f8:70:50:8b:4a:bd:62:26:
34:6b:03:74:d8:48:48:fa:90:56:bc:6c:dc:ac:9b:
c4:44:1b:34:6e:ac:dd:fc:fa:c3:b6:1a:34:14:2d:
8e:5a:8f:d6:ed:8b:b4:78:58:c2:6a:9f:48:9a:79:
41:b3:a5:2d:14:b6:d5:a4:2e:f1:c3:ec:47:d7:1f:
bd:6e:d6:3a:8b:c0:8d:c6:ef:29:cb:a9:6c:f0:fe:
36:c4:2f:1c:7c:67:54:69:f4:56:35:78:ab:37:b9:
b0:e2:62:54:0a:a7:a2:17:42:e3:d1:61:fa:6e:0f:
71:13:e6:73:9d:e6:ee:63:12:b1:82:a9:33:13:b7:
4c:e7:7e:86:54:80:ab:3c:90:c7:e7:05:c0:ad:d5:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:E3:03:9D:BF:DF:02:46:CE:AB:DA:85:CB:B4:7D:15:0C:DD:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4FEFA6201811F0819979AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.5.0-154.212.7.255
Signature Algorithm: sha256WithRSAEncryption
bd:fd:40:a5:dd:10:14:0f:f8:39:8e:95:cb:b0:99:f1:a9:46:
c3:76:c8:ef:b6:93:d9:1b:55:cd:7d:96:02:19:3c:54:1b:74:
75:4a:58:51:2f:fc:47:8c:fe:8b:c3:e2:c9:df:e8:35:2d:74:
29:b7:d9:68:30:21:89:27:ab:d0:da:e7:e6:d4:61:1f:50:7e:
44:a6:5a:9e:72:5e:a0:e0:58:a7:49:eb:12:7e:c3:4e:16:20:
9b:aa:d1:04:70:7d:0b:5e:84:85:3c:19:01:22:19:15:77:21:
67:1c:a4:4c:e5:97:29:9a:ac:cf:74:e3:7f:01:02:89:ac:dd:
bd:1f:ee:29:89:bd:a0:33:a2:5f:3f:e6:22:83:b4:0e:b6:57:
a0:09:7e:db:c5:ec:26:ec:f8:25:9a:95:95:a4:04:fb:3a:9a:
62:1d:e6:b3:32:45:29:62:e7:8a:d6:ea:19:c4:7a:70:e0:b2:
5c:1a:70:b6:32:4d:24:f8:f8:fa:62:cd:ff:37:ad:21:82:2e:
9d:03:e0:67:98:3f:c1:8c:fc:dd:36:cc:0c:7b:88:9b:f1:7c:
7b:5d:a5:fe:5a:17:c3:0f:42:37:3d:08:9f:d2:c6:09:de:3c:
21:fd:00:e4:78:7b:d0:a2:29:1b:15:2a:cd:c4:fe:53:bd:76:
19:15:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:43 2025 by rpki-client on console.sobornost.net