Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD4BABAF47511EF8128E2B7762E951A.roa
File: 0AD4BABAF47511EF8128E2B7762E951A.roa (raw, json)
Hash identifier: tL4WSV6WqMPhyeycXCz0p2Exue4V2gu0f/EFiEntHL8=
Subject key identifier: 60:69:85:7F:43:F8:52:79:65:95:A1:58:07:F7:8C:AC:58:68:71:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01657C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD4BABAF47511EF8128E2B7762E951A.roa
Signing time: Wed 26 Feb 2025 19:08:20 +0000
ROA not before: Wed 26 Feb 2025 19:08:17 +0000
ROA not after: Sat 19 Feb 2028 19:08:17 +0000
asID: 17561
IP address blocks: 154.218.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91516 (0x1657c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:08:17 2025 GMT
Not After : Feb 19 19:08:17 2028 GMT
Subject: CN=67bf66a4-b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:dc:64:0f:95:8e:e6:d0:55:ac:e8:fd:e8:
c1:c8:84:18:34:f9:0b:fc:40:e0:4b:2f:92:53:d5:
bb:2a:3d:d2:db:f9:62:ac:21:11:8a:82:c8:3c:a8:
01:b8:7d:37:90:ae:b8:68:37:8b:04:df:65:ac:91:
fb:14:36:8c:a4:9c:7a:0a:f0:82:56:12:04:5e:d0:
72:1e:20:6c:07:1a:d7:46:06:39:ba:68:f8:75:12:
f5:86:cb:e5:6f:dd:28:51:9e:f8:da:7d:ed:2f:35:
41:6e:ec:c4:4e:4f:7e:27:f5:47:c5:ce:17:cc:69:
5d:3d:08:88:ad:cc:68:7b:7f:58:e6:4a:27:08:72:
df:f7:05:d8:c9:e4:f3:1a:2c:80:81:be:21:c6:8b:
6f:f1:96:4c:a6:b4:d5:78:d5:d0:86:5a:59:53:af:
f5:e8:12:fd:53:51:31:3a:fd:b6:f2:66:56:ef:4f:
03:e0:a7:e8:3f:4a:01:74:f9:d1:0e:bf:cd:63:89:
24:87:6a:b2:4f:10:59:63:4f:a5:e8:43:b5:e8:99:
2f:27:b9:23:71:3c:5e:e7:10:21:14:51:ca:29:b3:
ac:a5:9c:91:82:2c:43:dd:12:5a:e7:fc:cb:c0:2d:
c7:6d:e7:01:c3:e9:a6:f9:5c:6f:14:38:42:33:a1:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:85:7F:43:F8:52:79:65:95:A1:58:07:F7:8C:AC:58:68:71:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD4BABAF47511EF8128E2B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6d:01:81:ed:52:01:2f:54:5e:64:69:7f:e8:90:af:b4:21:
dc:f5:6a:02:20:1c:86:4f:f9:b0:be:27:1f:26:dd:57:bd:8a:
f0:52:07:18:b9:64:25:3a:d2:ab:2e:d4:4f:d1:46:2d:01:c0:
a2:c7:48:e1:5b:6d:24:b8:26:2b:c1:53:81:ca:dc:d4:53:f7:
44:ad:4d:db:3b:c2:24:a1:f1:e2:79:1e:e4:33:25:3a:ee:cb:
d4:82:e9:ef:00:84:64:92:a8:eb:ea:ba:02:6a:32:fc:08:43:
df:82:9a:1b:92:d7:db:b8:c8:c3:30:13:1e:20:93:8b:03:16:
f6:a5:63:ad:94:e8:e7:0d:83:8b:c2:47:8e:84:00:d2:20:c5:
84:c9:86:c5:41:b8:29:a5:f8:dd:6d:57:25:a8:cc:53:5d:93:
61:59:64:a2:58:f3:6d:29:1d:2e:d9:a5:54:13:e9:84:6e:4f:
6b:c7:67:5d:69:b5:95:c4:66:11:58:da:53:a9:89:d3:24:fe:
3e:69:55:29:57:b5:d0:73:e4:68:6c:01:20:98:f1:43:6c:41:
7d:6d:44:1c:5c:ef:08:36:de:69:91:3d:a8:e8:bb:ee:26:ad:
1b:1d:c0:98:fc:b3:80:77:76:34:b9:44:9c:1f:35:a0:44:af:
ce:08:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:35:24 2025 by rpki-client