Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD3FEBA0FA011F0B856F1A7762E951A.roa
File: 0DD3FEBA0FA011F0B856F1A7762E951A.roa (raw, json)
Hash identifier: oZmE9yW2/P+2himVm4mmCq1NleW+QQBG7oehy8INRQM=
Subject key identifier: A3:96:DF:7F:1B:8D:94:08:3C:89:41:EA:04:D2:6D:74:12:86:A5:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01773C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD3FEBA0FA011F0B856F1A7762E951A.roa
Signing time: Wed 02 Apr 2025 08:54:15 +0000
ROA not before: Wed 02 Apr 2025 08:54:11 +0000
ROA not after: Fri 09 May 2025 08:54:11 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96060 (0x1773c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 2 08:54:11 2025 GMT
Not After : May 9 08:54:11 2025 GMT
Subject: CN=67ecfb37-a1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:82:da:ca:2b:1a:da:98:71:f6:ec:52:4c:
1a:04:bf:8e:55:d2:1c:66:12:b9:26:6e:81:d8:2b:
f4:03:a7:b0:bf:1f:ad:a5:aa:2b:65:51:89:b0:32:
0b:5b:06:cd:12:47:a1:ed:62:97:a3:30:07:6d:05:
0c:b8:bb:1a:46:7e:0f:bb:69:47:5c:c0:cc:f8:28:
31:d9:d7:f2:fc:01:20:e5:13:d8:75:e4:13:9d:39:
6c:bc:5e:13:7a:d4:a6:e2:e4:82:3c:4d:6f:ea:a9:
cd:a6:4a:3e:4c:cd:85:10:08:aa:16:20:11:38:ce:
1c:11:32:5e:f9:bc:ef:45:7e:ba:ab:2d:87:17:20:
7f:95:f7:3d:1e:c8:e6:19:07:d2:11:56:96:1c:7d:
f0:c1:a6:ea:46:53:93:58:49:8e:13:31:09:af:8a:
05:09:de:3c:a8:c5:9c:b7:28:e0:6c:cb:64:74:d9:
25:e0:df:79:45:31:f3:d4:dd:d5:f3:6f:a3:de:72:
d6:46:e4:39:28:01:79:19:32:52:0f:df:b4:56:b0:
92:e5:34:f0:6a:9b:aa:82:09:1a:48:83:5e:79:8d:
a6:15:f7:47:00:ce:d2:ee:5a:7f:54:b2:8f:e8:85:
64:3f:45:05:9e:fc:fc:74:0e:39:24:8d:cf:fe:43:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:DF:7F:1B:8D:94:08:3C:89:41:EA:04:D2:6D:74:12:86:A5:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DD3FEBA0FA011F0B856F1A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:58:16:e9:9a:f9:97:e2:9f:0f:97:69:bd:47:56:cb:1f:a4:
0b:fa:54:65:3b:35:03:12:c4:ad:01:d0:f2:ef:f3:1a:f7:5f:
d9:a2:df:b5:69:39:a6:97:ea:57:17:2a:ef:e3:ab:aa:e3:dd:
ed:4f:44:95:fc:8a:d3:1a:fa:23:aa:a8:a3:29:cb:da:88:91:
30:e7:ca:b8:db:74:d5:e0:19:82:ed:cb:eb:06:2b:9f:85:17:
56:e5:18:04:25:50:39:e4:27:05:03:f6:e2:bc:79:a8:a3:7b:
ae:84:94:e9:38:19:58:7f:a2:3a:6b:62:fc:eb:b3:c7:6a:6c:
c4:50:1a:86:99:c7:c0:04:47:f7:a9:36:fb:3b:d4:9a:c0:d1:
36:95:f2:19:81:be:82:b3:15:55:95:b2:11:12:9c:90:3b:22:
7f:79:05:98:63:c1:61:58:b8:cf:8e:b3:33:6e:8a:9d:60:8c:
62:db:f0:e0:1b:93:aa:9d:b8:87:db:9c:65:0e:ce:36:ff:0b:
41:e5:38:68:cc:fb:0a:1d:8e:93:da:a2:ff:55:25:cf:7b:f1:
3f:e3:7e:c1:67:3a:6c:35:00:2d:76:fd:9e:0a:a4:8c:cc:0c:
72:8c:5f:34:32:f1:3a:d0:7a:c6:02:ee:ad:07:4d:92:6a:5f:
51:80:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:06 2025 by rpki-client