Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1D19DF41C5511F0B40B7B85DAE4EC9C.roa
File: F1D19DF41C5511F0B40B7B85DAE4EC9C.roa (raw, json)
Hash identifier: xo2NradwOZtcZIZiH87AxP9xMQ8/NhgNAjb8QGcx6Tg=
Subject key identifier: 94:88:60:D4:32:A9:93:91:3D:76:41:EF:C7:C6:C1:CD:14:FC:61:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017989
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1D19DF41C5511F0B40B7B85DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:06:31 +0000
ROA not before: Fri 18 Apr 2025 13:06:26 +0000
ROA not after: Thu 22 May 2025 13:06:26 +0000
asID: 57043
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96649 (0x17989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:06:26 2025 GMT
Not After : May 22 13:06:26 2025 GMT
Subject: CN=68024e57-ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:03:a0:36:e1:2f:cb:99:21:41:8d:7d:37:
ca:a9:01:ef:91:7c:d5:b0:b7:00:d1:94:b7:c6:db:
2a:22:6b:70:d9:2d:96:16:de:5b:b6:ba:97:67:78:
99:d6:84:cb:28:99:44:36:b7:89:67:30:46:1f:7e:
47:ab:0f:6c:83:7b:89:ba:13:75:29:79:e0:46:45:
55:83:15:05:ab:4c:fa:b1:25:40:7a:45:83:8f:9a:
29:6d:ff:4a:21:05:e3:d4:fc:37:f1:a3:d3:b1:fc:
e9:c5:ac:f0:7b:70:9c:91:95:be:e7:e7:9b:be:4a:
5c:a8:b0:30:d4:7e:c7:0d:c5:09:99:6b:b8:9d:dc:
29:b3:fb:20:db:5f:b6:bf:9b:d0:ad:2b:55:2f:9b:
8f:e3:2d:0e:44:3a:29:b8:94:1b:4a:bb:86:bc:b0:
aa:e4:c7:62:87:57:c4:45:aa:1d:56:70:37:66:39:
29:4f:55:11:74:cf:93:aa:a7:43:fd:23:63:75:d1:
ad:0b:df:22:72:2f:8c:e0:b1:45:38:02:e5:02:11:
6d:64:cc:52:b6:cc:3f:bb:b2:af:0f:48:74:16:0e:
ee:5e:47:fa:41:fb:fb:08:68:9f:7d:62:ea:92:a3:
a9:87:e7:a2:7d:e9:8e:6b:f2:b4:ed:73:5a:ea:da:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:60:D4:32:A9:93:91:3D:76:41:EF:C7:C6:C1:CD:14:FC:61:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1D19DF41C5511F0B40B7B85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ec:94:7b:2a:e3:39:c7:1f:7b:09:21:d9:1a:a3:49:8d:55:
5c:47:9c:b5:76:d9:d9:28:6e:ea:29:fa:d6:80:14:47:8b:38:
f7:52:6a:e7:b8:56:3d:3c:b5:c5:f7:f7:f1:30:d5:da:e2:25:
92:d0:ca:6d:86:8f:24:21:fd:3f:c4:57:e6:54:b0:40:19:3b:
b3:85:6a:6f:cc:33:7f:45:d6:b3:49:1d:c4:ef:4e:21:50:69:
3b:7a:8c:19:df:97:9e:34:ed:a5:12:ec:ec:87:b6:25:e1:2a:
b1:05:20:40:4e:41:39:be:a7:a5:ae:d3:22:6d:9a:c5:7f:55:
5c:df:57:0d:90:0c:dc:84:b6:4c:ab:26:7e:43:09:5b:c2:03:
2a:0e:15:0a:8c:29:52:9f:13:2e:8a:e3:d3:4d:03:00:24:52:
e2:c5:b7:b7:e2:21:e2:b6:31:61:0e:2a:a2:a9:d7:b8:d4:46:
c6:a1:92:20:95:5c:4e:5f:cb:cd:d1:88:77:b8:16:9f:1c:0c:
56:ae:c6:5f:fe:15:01:e7:88:62:a7:93:7c:56:2d:52:f5:c7:
ac:e0:65:0d:ab:ed:0d:8a:ee:de:a0:67:9a:7f:8c:74:a9:d1:
73:10:e5:9d:1a:4c:ce:d3:d7:8d:c5:cd:bf:2f:c7:80:2a:9e:
a3:c3:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:55 2025 by rpki-client on console.sobornost.net