Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D8D8C0F5CB11EFA229506B762E951A.roa
File: 03D8D8C0F5CB11EFA229506B762E951A.roa (raw, json)
Hash identifier: d1JoAy06qNpodjA39iLCUOXeOeya6GH0pjNQ4cYnWaE=
Subject key identifier: 45:9E:4B:26:3D:90:3F:6C:3C:19:6F:CA:2A:E5:BE:CD:28:7B:1F:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D8D8C0F5CB11EFA229506B762E951A.roa
Signing time: Fri 28 Feb 2025 11:56:16 +0000
ROA not before: Fri 28 Feb 2025 11:56:12 +0000
ROA not after: Fri 11 Apr 2025 11:56:12 +0000
asID: 138915
IP address blocks: 154.203.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92936 (0x16b08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:56:12 2025 GMT
Not After : Apr 11 11:56:12 2025 GMT
Subject: CN=67c1a460-3c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:1b:c6:ea:31:0d:62:32:61:66:20:2e:c8:
bf:75:23:b0:ad:c8:f6:f0:3d:74:47:41:56:af:29:
6a:82:10:31:bc:1d:ce:11:7c:8b:b9:13:72:ca:dc:
36:a6:23:4d:7b:57:a8:4a:72:ae:99:fb:21:f7:99:
e3:ca:71:58:48:88:a9:39:34:38:43:de:6a:69:99:
3d:63:05:06:b0:eb:bf:8e:4b:69:5b:d8:d3:f4:91:
86:94:91:97:19:e9:9b:68:55:2a:3a:85:3e:88:2b:
89:54:d5:53:46:e3:83:52:1c:cb:90:64:16:23:28:
fa:7a:f2:f0:b2:db:d6:7e:24:8e:82:64:11:25:df:
25:55:20:b9:25:6f:01:bb:98:26:9f:ad:04:29:31:
a2:6f:03:9a:4b:19:f2:a1:2b:eb:74:cd:8d:09:27:
94:22:e8:fb:ea:1a:b0:6e:f2:e3:d7:81:10:3b:7c:
63:83:35:a2:a0:4a:5d:06:86:e4:98:1a:18:49:a3:
ca:2b:35:9c:74:1f:8a:f7:35:69:fc:d5:3f:91:4a:
26:ff:bf:0f:e0:54:8c:4c:b4:2b:1e:ad:7b:90:2c:
f7:b5:1a:a0:96:45:46:a0:62:75:8f:82:e2:20:29:
b7:1c:e2:b8:89:cc:a3:c0:2b:27:04:de:45:5a:44:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:4B:26:3D:90:3F:6C:3C:19:6F:CA:2A:E5:BE:CD:28:7B:1F:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03D8D8C0F5CB11EFA229506B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.156.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ec:c6:d2:68:12:78:f8:5d:20:f4:2b:f6:aa:57:de:32:8f:
b8:3f:c1:02:b4:56:ad:2f:50:25:85:0b:3e:52:de:64:dc:4f:
77:7f:52:b8:81:58:eb:ef:ce:fd:18:e9:78:16:2e:9b:ff:69:
a4:20:bc:94:f0:b2:1a:7f:0a:f2:cd:61:ad:0d:15:bb:61:a0:
73:85:e3:a1:bb:73:a8:6d:22:55:0b:c9:9c:23:fb:8d:0d:a4:
d6:62:b9:b3:11:62:a1:01:1a:e7:f2:da:31:90:a9:49:e5:75:
3d:fa:d0:31:46:ef:4b:e3:4a:83:6a:de:fa:89:20:af:70:17:
1f:9a:dd:ba:fe:12:bb:98:b7:f6:18:cb:ca:0b:33:89:5b:3b:
be:f2:91:1a:e0:34:59:18:eb:32:14:8a:9c:62:ba:d9:70:88:
c1:7e:4d:50:7b:fd:ed:94:72:d7:46:18:0e:7e:57:cb:1a:93:
b2:34:97:c8:c5:9f:05:c3:23:f9:fb:37:e1:93:57:33:fc:61:
57:1e:ca:fd:e5:6f:c0:cd:7f:d2:c4:74:30:3c:42:75:a4:fb:
2b:76:ff:a8:10:c5:93:1f:84:21:57:7c:5e:1c:6d:0e:14:8c:
a1:0e:6f:d4:36:0f:d1:4d:3f:ba:31:77:ab:1f:38:64:00:0c:
47:96:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:18 2025 by rpki-client