Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BE1C7A13D711F0A786899D762E951A.roa
File: 05BE1C7A13D711F0A786899D762E951A.roa (raw, json)
Hash identifier: 2Qn5qVpoPbX6XkDA2dv/M+EzNyisG3u3rYKtlgNFiaU=
Subject key identifier: 8A:46:4E:A8:F6:6A:AB:5B:E6:C8:AB:DC:11:6E:BB:50:4A:6E:3B:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017816
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BE1C7A13D711F0A786899D762E951A.roa
Signing time: Mon 07 Apr 2025 17:37:48 +0000
ROA not before: Mon 07 Apr 2025 17:37:44 +0000
ROA not after: Tue 13 May 2025 17:37:44 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Apr 2025 05:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96278 (0x17816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 17:37:44 2025 GMT
Not After : May 13 17:37:44 2025 GMT
Subject: CN=67f40d6c-2ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:0b:79:d8:5c:d4:cf:ed:2b:c5:21:bb:eb:
ed:46:c9:0f:a5:65:2c:4f:1f:d8:eb:4d:57:09:8d:
3d:25:d7:dc:c7:bc:5e:66:fa:c1:ef:64:11:47:58:
80:0a:a1:6f:71:37:58:59:e4:5e:c9:40:99:70:0a:
44:59:98:51:f0:f1:b2:78:5b:86:aa:49:21:89:1f:
cf:03:d4:d8:91:be:d1:28:53:76:27:ab:94:e5:49:
4d:ce:f1:67:65:5d:07:bb:37:0e:98:5a:7e:03:43:
c4:70:b6:cb:ad:37:e8:26:ca:15:d5:75:dd:ca:61:
2f:59:04:c0:d0:c2:4f:f3:d1:59:a6:86:bb:2f:24:
fb:6a:3c:ac:9e:de:bf:49:f5:59:c7:9b:1b:54:7a:
18:df:c5:34:39:e5:b4:0e:68:0d:33:02:7c:f5:4d:
33:ae:3d:9e:98:21:68:28:4e:0b:93:b0:f8:59:49:
8a:d1:9d:b9:be:ac:39:17:4e:f4:5d:a3:24:53:c6:
60:7e:b3:15:23:12:c0:b1:11:ec:53:72:1f:90:fc:
dc:49:9b:c8:00:d1:a9:0a:85:f3:8f:8b:b4:cf:49:
2b:71:e1:45:52:e8:51:d7:d3:a9:60:c6:46:55:8a:
55:8a:05:e9:28:90:7f:6e:5a:4c:93:75:21:9e:87:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:4E:A8:F6:6A:AB:5B:E6:C8:AB:DC:11:6E:BB:50:4A:6E:3B:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BE1C7A13D711F0A786899D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:1e:02:be:46:22:8a:5b:6f:dc:83:43:38:b8:c2:1f:2c:77:
d6:33:af:99:f6:cd:1d:92:15:3a:2a:be:fc:53:36:78:18:77:
8c:45:f3:bd:dd:72:dc:34:c5:f4:da:d3:fa:63:19:50:8a:05:
ae:99:60:50:3d:05:a4:2b:f6:53:a7:b0:25:b7:65:94:bf:c8:
9a:2d:96:91:8d:6f:f2:40:ee:28:fd:00:f4:ab:0e:ef:19:93:
e0:c6:b9:65:9a:ea:d1:57:2f:86:6a:34:7c:bd:99:e7:02:84:
ff:df:87:d4:dc:c6:2d:24:48:5b:f2:fa:95:13:1d:a3:7d:ee:
aa:4e:d6:cc:78:af:34:22:f8:17:b0:4c:01:20:55:56:78:3c:
68:19:29:91:ac:0d:b4:34:ae:61:68:9e:83:d2:d6:d8:a4:1b:
e2:6f:8a:47:01:9a:40:d5:06:3c:40:42:80:07:14:d8:40:dd:
42:4a:a9:27:db:6a:40:8d:c2:07:59:da:83:6e:9e:bf:7b:c8:
66:e3:c1:72:68:c8:17:6e:7e:10:08:f7:ab:e7:da:ec:e9:20:
5f:e0:79:9d:e1:72:74:4d:83:6e:da:98:93:e9:a8:67:44:2c:
24:b9:22:f5:eb:3d:18:45:d3:a6:5e:43:fc:af:2f:84:85:2c:
a8:3a:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:38:57 2025 by rpki-client