Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC2D0F21F6311F0959D5CF6DAE4EC9C.roa
File: 9BC2D0F21F6311F0959D5CF6DAE4EC9C.roa (raw, json)
Hash identifier: xXuhdqUya2QRk1xdkLpsOhmPe+E+zTtj2+uY7nct2ww=
Subject key identifier: 4C:F7:42:A0:80:B6:BC:54:F8:D1:6B:0A:6A:D8:FA:AD:02:1F:93:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC2D0F21F6311F0959D5CF6DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:21:53 +0000
ROA not before: Tue 22 Apr 2025 10:21:48 +0000
ROA not after: Wed 28 May 2025 10:21:48 +0000
asID: 57043
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96914 (0x17a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 10:21:48 2025 GMT
Not After : May 28 10:21:48 2025 GMT
Subject: CN=68076dc1-ecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:62:58:a5:d9:c9:73:e2:69:bf:ec:fc:10:
e3:d4:69:db:d2:6a:5b:9a:b3:6e:2b:5a:20:59:30:
ad:6a:94:62:82:a2:9a:5c:69:65:eb:8b:2b:36:d0:
9e:b5:97:50:35:e8:64:79:53:7e:ec:3d:e3:a2:55:
27:65:0d:e4:ac:ac:60:eb:91:5d:e8:d7:69:32:01:
26:35:66:67:6a:1f:d8:dc:b1:25:a8:b2:2b:c0:fd:
04:ac:40:ec:b0:35:2f:57:94:c1:cf:72:54:14:bc:
01:3f:60:56:e5:63:91:04:5b:88:56:4e:2a:bd:bd:
28:29:60:1b:dc:4d:f3:a5:ea:e5:69:55:a0:20:c6:
cf:cf:a1:68:f9:45:4d:92:53:3a:3e:be:49:7a:63:
ed:1b:74:a0:9f:05:d6:4e:85:c0:57:c8:8a:97:93:
4d:0c:e7:79:75:84:3c:b1:d9:26:19:2c:c6:78:69:
62:a7:a0:c1:a3:61:65:dc:04:73:ff:22:3e:d8:18:
53:0b:d3:0b:fe:5a:23:23:c4:4c:e6:0e:77:bd:e4:
ba:4a:a9:d4:7c:1f:27:41:65:54:74:a5:b5:93:ff:
cb:f6:ae:d1:a4:fc:6c:5e:13:52:6a:1e:cb:14:b1:
bc:9c:8c:e9:e8:a1:f4:5e:f2:ef:e9:48:22:17:54:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:42:A0:80:B6:BC:54:F8:D1:6B:0A:6A:D8:FA:AD:02:1F:93:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC2D0F21F6311F0959D5CF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
41:dd:c1:82:53:46:8a:3d:f4:e6:0e:53:36:e1:0d:bf:68:ed:
b0:bc:5c:24:16:fa:ec:d6:28:5e:e1:6f:16:8b:b8:13:94:74:
bb:4b:e9:99:31:f1:8a:be:d9:a3:42:52:cb:bb:9a:72:8a:0f:
4f:f3:09:44:7c:6e:38:76:86:b7:ca:0a:20:cf:8d:40:2c:97:
71:69:f4:1e:73:3c:31:3d:92:03:ff:d3:23:3a:8d:64:e8:3b:
70:38:47:84:82:fb:e0:11:65:6f:15:b3:ff:89:e0:be:fe:e1:
2a:61:80:6e:fd:d3:49:ec:6e:73:a0:9c:1b:8e:00:71:b0:69:
56:fb:e9:cb:c5:58:4c:a0:bf:12:7b:a3:8a:56:a8:41:e8:66:
45:7f:6f:87:34:51:a4:e7:81:f1:54:73:9e:6c:20:5f:47:33:
5b:a9:5d:ae:af:19:3c:96:ae:93:d9:0f:2b:8f:2d:1a:69:9b:
81:1f:d7:4f:43:70:e9:23:83:af:d3:0c:28:bd:c6:ac:ba:46:
d4:c3:dc:b6:7c:8a:78:b2:2c:a4:dc:2c:d8:b3:ea:a2:45:8d:
ea:48:55:8b:5f:fd:cb:ea:96:70:9c:3e:43:d2:77:3d:c4:50:
51:fc:66:22:2b:1a:d7:0b:8f:bb:1b:e0:44:4d:55:d5:17:8e:
df:f7:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:12 2025 by rpki-client on console.sobornost.net