Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082EECF8F8E011EF93C5EB69762E951A.roa
File: 082EECF8F8E011EF93C5EB69762E951A.roa (raw, json)
Hash identifier: 6Yqsiw3AVG3fzc02gH8aNZEV22tmVhCLHQdVyi29rr0=
Subject key identifier: FC:75:93:8A:4C:D6:58:6E:EF:E8:00:E4:52:99:CC:47:78:07:D8:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082EECF8F8E011EF93C5EB69762E951A.roa
Signing time: Tue 04 Mar 2025 10:04:17 +0000
ROA not before: Tue 04 Mar 2025 10:04:12 +0000
ROA not after: Wed 30 Apr 2025 10:04:12 +0000
asID: 63139
IP address blocks: 154.93.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94632 (0x171a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 10:04:12 2025 GMT
Not After : Apr 30 10:04:12 2025 GMT
Subject: CN=67c6d020-5781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:12:5e:fd:11:38:92:1a:b0:8f:24:76:95:
21:04:6f:42:cf:6b:09:b0:c3:72:20:14:25:65:b7:
7f:5c:1f:35:76:ac:f1:97:09:6b:1b:46:ee:80:55:
92:f3:81:c4:e8:25:dc:8e:03:9c:c1:81:c5:68:8b:
5b:8e:d8:7f:fb:c2:76:18:43:7c:9f:a6:35:15:57:
28:44:5f:e6:eb:98:e3:a8:46:24:5c:fe:5e:da:13:
3f:f7:12:4d:cc:e9:36:84:ae:f7:9d:10:f1:c2:23:
82:fc:96:d7:1d:39:b0:23:ea:12:8d:fb:05:c6:96:
16:6c:3a:ca:03:17:bf:f7:ea:5a:74:c9:ce:6c:36:
54:4b:52:65:e1:0e:45:65:4e:fd:14:56:97:b6:7e:
6d:18:ac:89:14:c7:0c:24:42:9f:7f:13:d4:5c:6f:
48:41:76:df:5b:fb:0d:2b:cb:be:92:36:02:b6:65:
51:c3:fd:06:44:d2:6f:8e:dd:5f:e7:08:5b:9e:7c:
46:46:20:4e:4e:66:3e:01:8b:27:9d:bd:61:64:a2:
b9:07:05:fe:60:73:f9:1a:51:e3:76:75:25:2c:e3:
6e:b6:b9:c5:8f:b6:42:d1:17:c4:34:71:33:8f:2a:
97:dd:2d:28:b1:1f:1e:d5:ba:f5:ab:f6:6e:91:b8:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:93:8A:4C:D6:58:6E:EF:E8:00:E4:52:99:CC:47:78:07:D8:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082EECF8F8E011EF93C5EB69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:89:11:f8:d1:af:ae:da:52:2e:f5:8e:bc:e2:37:c6:75:
10:0f:5d:54:a0:bd:e7:0b:ee:a6:71:dc:c1:9b:80:fb:98:e1:
34:72:10:3a:97:18:66:5a:b7:8e:cb:16:ea:9a:b8:18:90:0f:
34:40:ab:d1:b5:c8:c4:bd:94:f1:21:c9:84:e7:5f:b9:26:0f:
c3:fd:00:54:b9:0c:47:da:87:1f:09:a9:8f:94:88:a8:e7:b8:
2a:15:a6:5b:f2:b4:ea:63:75:e9:bb:6a:57:ff:5b:7f:1a:fb:
ce:44:9f:7c:81:3e:e5:35:15:7e:68:10:35:2d:e7:a1:9f:bd:
83:c6:8f:72:56:23:31:d7:fa:a2:9e:cd:7d:59:bd:d6:a8:96:
30:60:79:02:70:34:d7:6b:c3:c8:a2:8d:ce:dd:84:3d:56:3b:
db:8d:dd:2c:34:f2:d7:8f:94:32:aa:ac:a3:81:d4:df:93:73:
0f:dc:91:a8:39:8e:ab:ec:9f:4e:5b:ff:f3:26:19:01:08:4f:
6b:2b:20:f8:61:e2:d9:38:58:b0:4f:b9:74:df:6c:5e:09:30:
ec:55:ed:e5:4e:35:e8:e2:5e:0a:00:7b:d8:95:bc:84:ef:dd:
ed:b3:06:e4:b3:78:9b:61:cb:60:bf:c2:a4:8d:5e:e9:27:e8:
dd:ac:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client