Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B794A1F5B11F0AB3CEFC2DAE4EC9C.roa
File: D44B794A1F5B11F0AB3CEFC2DAE4EC9C.roa (raw, json)
Hash identifier: Z0R2Y7jzgpb3sYKLeVr3jSysqGRhuV0iiM2ltQV5kr4=
Subject key identifier: 32:3D:B8:07:2D:6E:FE:23:B8:F2:66:2E:3F:2C:98:36:79:FC:06:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B794A1F5B11F0AB3CEFC2DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 09:26:12 +0000
ROA not before: Tue 22 Apr 2025 09:26:07 +0000
ROA not after: Sun 08 Jun 2025 09:26:07 +0000
asID: 5068
IP address blocks: 154.83.71.0/24 maxlen: 24
154.83.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96904 (0x17a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 09:26:07 2025 GMT
Not After : Jun 8 09:26:07 2025 GMT
Subject: CN=680760b4-b600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:71:b8:45:ac:28:16:b8:48:6a:93:54:b3:
88:e8:50:23:1a:e9:80:0c:b8:2d:46:5e:2f:74:32:
5e:5e:25:2b:7b:5a:3b:18:ca:1a:a5:77:b6:4b:d5:
c6:2b:c9:6c:b6:bd:f4:13:5e:2d:87:a6:95:52:61:
d1:fa:7e:fc:03:57:f0:3f:5e:60:ec:6f:0d:ff:3a:
98:36:a6:b7:4e:38:e0:45:d1:80:2f:72:e3:f6:d6:
55:65:3d:ba:0d:b0:b6:d7:29:a1:58:2a:09:03:53:
e0:ce:60:9f:25:f0:2e:bd:06:d2:af:86:16:f4:61:
95:c4:b3:8d:24:b0:d9:e4:b7:8e:e7:ad:78:36:b9:
59:bd:29:d9:47:4e:77:58:60:0e:95:fe:b2:bd:85:
8a:02:11:44:f7:72:c8:98:0d:de:6c:57:ec:91:a1:
42:00:a1:f5:8d:6a:3d:21:fe:60:60:79:f3:3e:84:
bf:0e:65:0f:a0:84:f5:4c:34:2c:66:b9:e0:7c:ed:
62:f9:2d:b2:54:47:f2:39:a8:eb:66:fb:49:cc:7c:
57:5e:02:02:81:b7:13:c9:ce:b8:42:1c:67:3d:12:
87:8d:e5:9f:41:5a:fd:72:13:19:cc:a0:e5:a9:62:
13:9c:dc:22:43:8e:93:5a:7c:c1:f0:77:51:c4:28:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:B8:07:2D:6E:FE:23:B8:F2:66:2E:3F:2C:98:36:79:FC:06:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B794A1F5B11F0AB3CEFC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:0e:44:79:40:f2:59:01:79:61:4e:6e:a1:91:73:ff:71:a1:
b4:8c:9e:32:86:f8:40:dd:f5:81:cd:dc:d4:32:57:ec:0a:45:
cf:e9:35:9d:bb:5d:82:69:77:2c:5a:09:fc:03:52:94:98:39:
60:49:7c:50:4d:ae:b2:26:78:19:22:d9:65:6d:3c:f8:9d:04:
10:00:7b:87:dc:0f:d0:e0:d1:fe:a4:2a:2f:72:7f:6b:e7:bc:
39:e6:b8:03:f2:e9:8f:6f:1b:bf:d3:04:c3:ef:e2:e9:24:ab:
a8:af:21:2a:94:92:5b:34:66:27:68:95:af:80:0b:ba:fc:fb:
0c:f5:cd:24:51:64:3c:1a:9f:5e:41:ee:9b:1c:aa:bb:f3:43:
c8:fa:e0:2a:ba:e1:7a:35:72:46:ac:7d:d6:fd:2f:b0:5c:71:
c9:1a:04:b3:56:44:43:63:0e:4a:60:b9:a2:ea:ef:c6:0b:49:
c6:b5:68:ea:3b:35:37:74:c0:36:bc:ab:5a:b0:a3:42:28:e2:
1b:15:8d:58:1e:8a:35:74:49:dc:a5:9e:94:03:09:20:e7:fb:
df:89:cb:81:2a:c1:a8:ba:9e:19:ff:53:13:c8:e1:e7:34:8e:
b1:34:bf:f8:f6:3c:a4:47:81:a6:3b:45:14:d6:93:08:07:ad:
6a:27:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:39 2025 by rpki-client on console.sobornost.net