Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B69137CF45211EFBF13B446762E951A.roa
File: 0B69137CF45211EFBF13B446762E951A.roa (raw, json)
Hash identifier: xdcPMyEu47VRYhLec0joBgcD+6P9DRnsRq9R27OdT68=
Subject key identifier: CA:89:8A:1B:CE:A1:33:B4:BF:FC:3A:C4:EA:C8:91:69:84:91:EC:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016491
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B69137CF45211EFBF13B446762E951A.roa
Signing time: Wed 26 Feb 2025 14:57:49 +0000
ROA not before: Wed 26 Feb 2025 14:57:45 +0000
ROA not after: Sat 19 Feb 2028 14:57:45 +0000
asID: 17561
IP address blocks: 154.82.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91281 (0x16491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:57:45 2025 GMT
Not After : Feb 19 14:57:45 2028 GMT
Subject: CN=67bf2bed-73c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:1b:d3:2a:cb:1d:7e:72:de:22:56:af:c4:
ac:01:b0:31:d7:2c:45:79:06:49:41:b7:dc:01:9e:
89:25:89:34:38:63:e5:5e:ab:38:99:d9:db:d9:9b:
d0:db:31:d4:f6:47:76:b9:dc:c3:9d:3a:99:2a:ec:
2a:34:37:62:0b:07:d5:95:c7:46:8d:2b:ac:89:7f:
62:81:d3:63:1a:f0:83:90:2a:4b:be:b8:9c:d4:f5:
b0:fe:dc:9a:eb:d3:48:34:17:85:f6:cc:81:c1:e3:
48:00:4f:84:9b:5d:12:5d:b8:37:33:cf:19:19:6a:
44:77:02:f1:37:bf:1c:5e:d8:de:7f:5a:9f:c5:32:
8e:bb:fe:cf:ae:87:80:af:a0:dc:66:4a:39:cb:ba:
5d:5a:b7:d6:80:68:20:9e:47:0c:51:5e:51:a2:12:
b1:22:b1:de:8e:10:d9:66:03:9d:ae:9c:9e:d1:29:
c2:8a:3f:39:ad:70:b5:e9:88:1c:29:59:8f:ac:b6:
e8:01:1c:17:21:cb:71:50:ba:91:0c:bc:99:54:43:
af:d9:06:1e:9b:29:82:97:a5:ce:0f:e9:d7:40:d5:
2c:4c:79:2d:61:69:37:02:8c:d0:f6:80:51:fc:0e:
bb:38:42:66:3d:c8:da:15:21:b3:3d:f0:6d:18:c3:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:8A:1B:CE:A1:33:B4:BF:FC:3A:C4:EA:C8:91:69:84:91:EC:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B69137CF45211EFBF13B446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.222.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6f:32:90:ef:37:cf:b8:76:70:8e:b1:d6:ac:17:ae:cb:56:
02:95:3b:6e:be:f9:53:14:80:19:c8:13:17:8d:d1:d0:9e:15:
65:ab:4e:bb:be:f2:48:33:f1:da:7d:b1:14:f4:7f:cf:cc:3e:
91:11:ee:3a:9f:07:4e:0a:83:a4:87:d2:b9:d8:fb:22:a6:3c:
61:a3:5d:aa:19:73:39:7d:17:71:bf:17:63:ac:19:8a:71:dd:
86:44:0b:94:50:f7:fc:77:bf:b0:29:88:fd:d6:17:e0:d6:8d:
16:b3:ad:44:29:ec:e5:0d:b8:0e:52:bd:09:7d:69:4f:1e:8a:
37:50:ba:06:6b:00:f5:bd:e9:9a:21:63:d2:19:db:34:d4:53:
10:83:56:44:b1:8d:6a:9e:87:2a:d2:80:74:c9:74:cc:e9:fe:
a5:74:f4:d1:de:49:88:5b:8f:5b:19:4a:5a:0c:30:7a:d7:0c:
60:31:86:47:62:d9:41:fd:66:f2:97:06:36:64:1a:28:5e:45:
62:19:d6:42:0f:b7:55:48:ec:1f:dc:e3:61:cd:44:09:32:b9:
df:43:27:de:2b:a7:2f:43:d7:29:53:a6:1c:92:26:b2:6f:28:
fc:a6:f8:e7:59:c3:d2:fc:c8:58:86:74:0d:7a:c9:bb:e5:e2:
0d:52:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:30 2025 by rpki-client