Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D0DE41F4C11F0934FF9DCDAE4EC9C.roa
File: 693D0DE41F4C11F0934FF9DCDAE4EC9C.roa (raw, json)
Hash identifier: lQDTMWk929boIXiAxlSh0tpnyCpiFTgBAf6ZuJptHp4=
Subject key identifier: F0:AA:6C:4D:46:7B:6B:58:DB:1F:E8:7A:81:BF:32:3E:EB:32:22:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D0DE41F4C11F0934FF9DCDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:35:49 +0000
ROA not before: Tue 22 Apr 2025 07:35:45 +0000
ROA not after: Thu 01 May 2025 07:35:45 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96872 (0x17a68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:35:45 2025 GMT
Not After : May 1 07:35:45 2025 GMT
Subject: CN=680746d5-ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:cd:cb:3e:1f:25:11:fa:d4:20:e1:14:b9:
0a:46:a7:90:8d:5f:86:86:eb:fe:9a:9b:fd:78:39:
65:81:cd:61:c9:22:91:80:a1:c3:cf:37:60:d5:fc:
ff:6c:6c:8e:2a:85:c4:98:fe:17:7a:04:5e:44:97:
30:4c:20:91:8e:97:e4:93:4f:d6:0b:42:d3:12:e6:
46:cc:5f:6a:42:44:e7:30:e6:8c:e8:5b:7c:8a:4f:
59:8f:03:79:76:2c:7e:98:3a:1a:b9:d5:93:93:62:
36:ca:09:04:12:2d:df:f9:9e:73:1e:ca:bd:25:75:
65:84:87:2f:ea:68:b2:39:53:da:fa:e7:18:28:88:
98:62:6e:69:bc:12:b2:c2:b8:21:fd:e4:ff:89:eb:
ae:2c:bf:eb:64:4a:a6:aa:92:0d:3d:98:e8:b6:4c:
e0:e2:f0:77:a1:a7:a7:0e:fe:14:2d:82:cb:8b:b3:
1c:bd:7e:f3:40:48:90:49:bd:8b:94:7d:a3:d8:ef:
b7:58:32:e3:5f:1f:5e:0f:ff:7b:99:c3:1b:82:95:
8f:20:36:9d:bd:26:99:a0:8a:5a:74:93:44:88:9a:
6e:9c:99:02:f2:f0:24:9c:e0:0f:d6:5b:d6:f5:40:
24:ed:d3:af:e9:ff:b5:ff:fa:26:bb:69:a1:8e:5c:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:6C:4D:46:7B:6B:58:DB:1F:E8:7A:81:BF:32:3E:EB:32:22:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D0DE41F4C11F0934FF9DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
77:97:22:1e:dd:d2:4b:2a:9d:f8:8b:aa:81:50:f5:de:78:69:
29:df:da:9b:44:ac:89:73:ac:fd:30:84:89:d8:4e:7f:ad:5c:
4e:59:c0:29:59:05:78:2d:42:bd:f7:96:47:a8:55:8e:1a:76:
35:8d:f5:ed:ba:2a:77:e2:89:4a:7a:89:1b:dc:c8:eb:c7:8a:
7f:5a:e0:5c:ee:ba:a7:1f:af:28:b8:6f:13:9e:90:62:6f:1e:
8c:05:1b:0d:5f:32:85:70:54:27:9e:44:05:88:dc:b6:78:08:
d4:63:1c:df:6c:fa:23:af:18:3e:2b:bf:e5:20:56:7e:00:ba:
63:e3:c7:e0:90:c7:41:ca:9a:8b:e0:d3:d8:3e:8e:a3:f6:1b:
b2:bc:48:cc:73:60:ca:97:d8:6c:7d:d8:79:e2:b6:a8:68:d0:
c2:d4:d2:47:b8:39:34:52:6c:4b:c6:b8:73:86:3f:dd:d4:d2:
17:cd:5e:36:cd:af:89:6a:c4:5b:1f:f5:2e:68:a6:ea:52:f0:
7d:da:1d:51:67:d8:e6:d4:87:26:47:d2:ee:a4:2a:6c:10:99:
35:b0:fe:b2:18:c8:c3:d3:e2:80:9e:ea:71:1e:45:11:03:32:
c8:45:ec:f3:a8:1d:7b:81:31:f2:f9:4b:55:dd:ec:83:39:04:
75:f4:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:55 2025 by rpki-client on console.sobornost.net