Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C99AFF41C5D11F0A4991CB7DAE4EC9C.roa
File: 9C99AFF41C5D11F0A4991CB7DAE4EC9C.roa (raw, json)
Hash identifier: XCbMZeay+MW2p3mI2FdMh0toi1m3O5ig27g6TgmkRSY=
Subject key identifier: 20:2C:A0:AE:AF:D7:94:7D:26:9B:97:FE:B0:92:82:BE:EC:6C:C9:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C99AFF41C5D11F0A4991CB7DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:01:24 +0000
ROA not before: Fri 18 Apr 2025 14:01:19 +0000
ROA not after: Thu 22 May 2025 14:01:19 +0000
asID: 44486
IP address blocks: 154.193.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96673 (0x179a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:01:19 2025 GMT
Not After : May 22 14:01:19 2025 GMT
Subject: CN=68025b34-a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:46:03:0b:08:c1:72:f1:08:7b:2c:9e:19:
5a:dd:08:e1:ab:b4:31:42:e5:6a:aa:2d:6f:d7:97:
4f:70:9c:e3:bf:98:a2:94:c8:0a:ae:fe:2b:e1:80:
9a:72:2e:2d:58:c9:22:02:c9:f3:63:80:13:e2:5c:
69:72:47:35:39:51:ee:94:2d:4d:80:ff:f8:9d:4c:
f1:d5:93:bf:00:0b:e2:13:8c:69:54:34:42:c0:fd:
bb:d4:4c:1a:3b:f6:8c:68:86:78:27:be:cb:0a:97:
e1:9e:08:5c:42:e6:9d:cf:e5:22:a7:76:9c:5c:fd:
d1:0e:54:a3:be:1d:d5:e7:af:00:51:a4:96:c7:81:
a3:8e:3b:fd:b5:fd:95:6d:0e:14:54:68:4f:fa:7b:
4e:b0:38:cb:fd:f7:c8:62:e4:15:be:c9:d8:6f:1d:
1f:3a:7f:60:c8:34:67:d2:25:28:57:6e:3a:07:4c:
6a:4d:4d:c6:94:9a:f0:0e:54:ca:77:9f:d1:ea:4e:
b5:81:5d:c3:0a:69:b3:36:84:ed:7c:95:40:7c:7e:
a3:e4:6c:3c:9d:70:84:14:c0:d9:c8:cd:9e:f8:ca:
4e:a2:a1:d0:cc:be:d2:08:90:13:3c:16:d9:5a:f5:
8c:06:9e:39:93:96:11:5d:9e:a7:0e:51:0c:7b:06:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:A0:AE:AF:D7:94:7D:26:9B:97:FE:B0:92:82:BE:EC:6C:C9:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C99AFF41C5D11F0A4991CB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:29:64:be:b8:aa:03:81:b3:ad:f8:82:31:58:47:3c:85:61:
cd:88:38:76:57:1d:db:7d:55:14:0b:3d:0f:0b:f6:ec:68:de:
b5:4d:b2:18:fb:ae:dd:75:ae:85:cf:54:06:0f:e0:77:14:17:
78:59:dd:6d:8a:37:e6:68:f5:d8:94:b5:03:7d:5b:5f:32:5d:
0c:fd:a4:1c:8c:73:04:6f:13:ad:37:12:10:10:51:6f:75:c2:
8b:1c:aa:e3:99:2a:4f:8b:f8:c8:e1:ee:65:c7:58:75:38:19:
8a:3b:66:03:ed:f4:a5:8a:41:a9:42:22:55:3e:2b:15:53:ce:
f3:ca:af:03:1e:ad:fc:bd:a2:a7:d1:82:87:f9:07:9d:38:be:
63:23:cd:83:86:1b:ef:ba:d3:84:45:34:85:f2:93:c0:68:b4:
63:13:62:e2:b9:e9:c2:ff:d3:35:b3:57:aa:f7:5c:01:b1:1c:
7f:7f:f5:c4:13:83:30:fa:37:6e:46:aa:cb:2b:3b:26:bd:ab:
65:38:52:2b:52:74:54:60:8f:53:d9:8c:47:27:8f:d6:77:e1:
93:99:fb:fd:7b:a5:f1:fc:9f:ad:45:b5:9c:d0:91:38:da:f3:
9f:0f:ed:53:e2:b8:42:b5:01:79:0e:99:ab:ed:c7:dd:14:ce:
f0:a7:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:27 2025 by rpki-client on console.sobornost.net