Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B6FE06E2D811EF97158D60762E951A.roa
File: 01B6FE06E2D811EF97158D60762E951A.roa (raw, json)
Hash identifier: e8L1TZ4XB1e5glHfZaTwL8HBOUKuubI3TwZ5c4/K/Yg=
Subject key identifier: 56:22:66:DF:2C:95:A9:63:55:AA:7B:13:C1:B8:5D:42:A9:79:A5:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B6FE06E2D811EF97158D60762E951A.roa
Signing time: Tue 04 Feb 2025 09:11:24 +0000
ROA not before: Tue 04 Feb 2025 09:11:20 +0000
ROA not after: Wed 30 Apr 2025 09:11:20 +0000
asID: 18229
IP address blocks: 154.210.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86216 (0x150c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:11:20 2025 GMT
Not After : Apr 30 09:11:20 2025 GMT
Subject: CN=67a1d9bc-c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:af:8b:d3:59:c1:c3:1c:ef:bc:4a:07:1e:
2c:24:0b:86:43:c3:e5:f4:9b:c4:d7:c3:a2:b9:ce:
d2:77:bf:a9:d7:fa:53:34:64:8b:9e:90:3e:2c:d8:
f0:e1:55:f2:ae:d4:8c:96:b2:72:ed:7e:18:27:49:
2f:66:c4:36:5c:31:c3:99:58:82:a5:37:72:89:60:
8e:74:ea:06:37:c5:a4:41:20:34:23:7e:66:cd:64:
26:b5:33:58:1b:a6:6b:53:48:32:90:63:79:73:d3:
32:a0:c3:b4:65:6a:c5:c9:c7:54:77:f0:77:1a:22:
3e:42:c0:45:c4:91:c0:17:7c:b6:4a:02:c3:4d:3e:
ef:f0:6e:d6:61:f7:5e:5e:df:0b:88:17:7e:f2:9b:
c9:42:79:80:37:b9:40:52:cf:c0:a6:e2:fb:6c:da:
7c:59:7e:2e:68:81:81:8b:a6:43:e5:75:d1:c4:93:
56:70:63:a3:39:b3:43:52:07:ae:46:c8:cc:4b:63:
dc:ff:f7:6b:70:88:ef:d9:05:84:1c:4b:1b:fe:b9:
a3:a9:41:9b:a3:92:33:1a:42:e8:52:bd:09:9f:52:
4f:0e:8e:ed:9e:92:27:3c:70:72:15:cb:c8:cd:d3:
ea:e6:a2:b6:62:8a:14:da:45:3f:78:e8:10:de:1c:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:66:DF:2C:95:A9:63:55:AA:7B:13:C1:B8:5D:42:A9:79:A5:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B6FE06E2D811EF97158D60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:75:6a:3d:8e:39:d4:c9:a8:dc:84:7c:e6:0c:7d:5d:2c:7e:
ef:18:c5:84:79:04:41:c6:e6:dc:be:d9:e4:71:f7:69:b3:e2:
ad:41:87:a4:2b:23:60:88:07:5f:9f:06:10:6c:79:70:f2:d0:
c9:4b:5c:bd:ee:1e:8b:b8:92:bb:b0:eb:4b:a3:76:79:47:e4:
da:9a:a0:53:d6:44:de:46:34:da:9f:d7:e2:0b:db:b7:41:21:
cd:e7:89:e1:9a:5d:4a:fd:82:14:b3:a4:a0:6c:1f:8b:b5:5e:
e3:7f:fb:f0:67:19:52:f9:92:6c:ae:d2:3c:e4:cc:e4:e5:8b:
5b:bf:83:ad:7b:e7:66:51:8b:e7:43:e0:7e:32:2e:88:41:63:
ed:66:cc:1b:fe:d5:ad:d7:cc:e6:52:ef:20:d5:57:1b:56:79:
ad:b6:af:f9:5b:38:6f:9f:ef:b2:56:43:a0:fb:d3:ca:ad:f3:
a2:59:95:f4:92:2f:ea:bd:bb:55:f4:8c:8c:76:e8:dd:fd:90:
31:7f:88:19:6e:49:93:8e:9f:ac:51:51:2f:12:fb:5b:41:b5:
9b:de:65:39:85:ae:7a:73:16:44:5d:47:7d:8f:fa:87:82:7f:
b1:a3:d0:64:36:b4:4b:5c:7f:db:c8:5c:a7:5a:33:8a:a2:92:
47:3a:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:38 2025 by rpki-client