Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC8D258E2D211EF92B4F7B7762E951A.roa
File: 0BC8D258E2D211EF92B4F7B7762E951A.roa (raw, json)
Hash identifier: DPjlnUoWxDYLo7X2yCxOH4eGuv68fgnMhu2uQUJ7Drg=
Subject key identifier: 7A:0D:24:82:B8:DE:31:43:80:89:A3:3D:60:49:E1:EB:41:DA:FC:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC8D258E2D211EF92B4F7B7762E951A.roa
Signing time: Tue 04 Feb 2025 08:28:44 +0000
ROA not before: Tue 04 Feb 2025 08:28:40 +0000
ROA not after: Wed 30 Apr 2025 08:28:40 +0000
asID: 18229
IP address blocks: 154.210.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86182 (0x150a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:28:40 2025 GMT
Not After : Apr 30 08:28:40 2025 GMT
Subject: CN=67a1cfbc-8af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:1c:7e:5d:99:44:ce:0d:7f:4e:b5:61:e8:
c8:89:66:db:44:b0:22:88:1d:9d:e2:e0:e3:e6:07:
4e:bd:7b:34:04:ab:32:2f:e5:70:75:ee:c3:d1:e9:
85:bf:1e:1f:5f:6d:4c:04:25:59:4c:1d:73:ae:4e:
67:f1:19:25:b5:6e:6a:7a:51:5e:fb:a9:28:11:68:
ef:fb:06:0b:15:93:7b:5f:d4:96:a9:89:b4:55:56:
2d:88:0b:78:d2:45:a8:87:b8:b2:0f:36:41:c3:91:
a9:42:2f:f9:55:28:03:e6:8e:df:7c:eb:36:2e:ee:
9f:be:d3:99:d2:58:24:f9:a1:1e:97:a4:c9:00:75:
ab:f0:8d:cb:c5:85:2d:6a:01:61:76:0d:0f:9c:fa:
00:19:ad:eb:a1:12:ad:26:7f:a7:f4:9f:64:96:12:
2c:ff:8d:14:13:6d:ae:f8:2a:a5:b5:7c:cd:14:20:
92:36:6a:df:47:3b:bb:87:7f:83:5d:04:17:6f:4c:
e5:58:ce:ae:3c:c4:36:8c:04:f6:92:a5:30:3e:7f:
20:53:62:3c:1a:52:b5:0e:2e:3e:20:85:91:30:c0:
3f:34:52:fa:ef:68:d2:af:70:d8:f8:70:b5:6d:d8:
19:2c:f2:6f:cf:ef:c6:85:c9:cd:0c:f9:a2:46:1e:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:24:82:B8:DE:31:43:80:89:A3:3D:60:49:E1:EB:41:DA:FC:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC8D258E2D211EF92B4F7B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.203.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4c:93:5c:ed:51:20:00:3e:90:c2:02:23:93:6a:33:d7:bd:
b4:e6:ec:64:37:02:b7:22:0f:de:b4:60:44:07:45:3a:ae:09:
43:e3:57:fb:24:ac:10:4e:e9:d4:7c:78:57:93:1a:5c:f5:ad:
bf:aa:48:27:b3:5e:f1:93:d4:77:55:d1:f0:69:7c:72:33:99:
3b:9a:0d:3a:5b:a8:5c:53:ad:ae:f5:95:4a:7d:6b:ee:2a:5b:
ea:57:4f:96:2a:40:94:fb:19:1f:48:44:6c:e8:b8:53:9d:ac:
05:df:f0:35:b4:b6:20:8a:b8:a1:6e:cd:a9:87:97:26:3d:ac:
be:78:ab:fe:a6:74:fe:84:69:6d:a4:e4:c7:21:cf:92:2e:6a:
2e:1d:ff:01:05:3c:38:c5:ed:fa:3b:6b:d3:d8:6b:04:6c:9f:
42:dc:d5:1d:aa:0d:f3:52:51:2b:fc:99:a6:5e:af:66:f0:a8:
e1:ee:d3:47:b9:fa:c9:5e:04:0b:4b:e9:0f:31:0f:01:f7:74:
1b:d9:f8:44:99:9b:a6:2b:30:c8:5c:ee:69:47:d7:6e:99:c2:
81:9e:40:14:b1:a2:c0:ce:db:6d:0d:1e:82:01:4e:8b:83:d8:
e3:52:ec:74:f2:b1:3a:2d:cc:69:23:f1:27:ad:6b:22:ba:8e:
66:c6:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:33 2025 by rpki-client