Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF04E76F5C411EF81F8D4BC762E951A.roa
File: 0DF04E76F5C411EF81F8D4BC762E951A.roa (raw, json)
Hash identifier: yBPFLap4ecMbYvNq4aMIMByvODoxniZKxZP6vkHrxAk=
Subject key identifier: C0:D8:5E:61:D3:A8:2A:47:18:A0:B4:F3:EF:59:7E:7E:FE:7A:97:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016ACC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF04E76F5C411EF81F8D4BC762E951A.roa
Signing time: Fri 28 Feb 2025 11:06:27 +0000
ROA not before: Fri 28 Feb 2025 11:06:23 +0000
ROA not after: Fri 11 Apr 2025 11:06:23 +0000
asID: 63139
IP address blocks: 154.203.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92876 (0x16acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:06:23 2025 GMT
Not After : Apr 11 11:06:23 2025 GMT
Subject: CN=67c198b3-b94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:bf:f4:28:d7:bf:fe:e4:68:bc:e3:dc:42:
d3:01:7c:1d:92:89:00:1e:ba:5b:5f:b4:3f:02:ed:
cb:e6:0d:77:3a:e9:c6:06:69:56:b7:24:05:3b:93:
5f:e5:ed:a5:78:73:cc:89:76:fc:29:4d:b7:2b:97:
94:ab:10:a4:6b:59:22:86:4c:ea:64:50:c8:2e:31:
b3:6a:a1:4e:4a:85:20:0b:ea:4a:56:5d:63:50:fe:
b2:ea:99:79:85:47:51:2f:8d:4f:94:e6:0c:f5:dc:
db:86:06:1a:9d:a5:0f:1e:dd:1f:89:ab:e9:11:69:
3c:87:91:9e:95:39:5d:0b:94:12:d6:ad:0e:4c:6b:
db:65:f1:03:a5:0e:2b:6c:6c:0f:85:48:f3:e1:94:
90:87:5f:01:42:5f:9c:4b:b1:5f:aa:da:23:b0:ad:
2b:54:f1:f0:ed:57:c7:1c:08:30:55:44:ba:dc:9c:
86:e9:a3:fa:7d:b6:71:f9:ba:a9:ed:33:59:a4:f4:
33:41:46:d0:f9:0e:55:f8:2b:b6:5a:24:51:95:c2:
a4:99:39:dc:c0:84:8f:2c:84:65:e7:53:50:f2:86:
cb:5f:f9:f9:e2:37:03:a3:35:c2:c6:08:e9:d5:2f:
9c:2c:77:87:35:ed:d5:a9:6d:07:60:06:e7:07:2d:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:5E:61:D3:A8:2A:47:18:A0:B4:F3:EF:59:7E:7E:FE:7A:97:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DF04E76F5C411EF81F8D4BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.170.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c6:73:57:f2:d2:77:f3:29:2b:d4:73:44:f5:bf:2d:3e:9f:
0c:85:b0:dd:ad:ac:8b:ab:6a:98:83:21:4b:84:75:3f:a2:1a:
1a:32:5a:bf:7f:8e:aa:25:4a:c9:26:b0:d2:83:a7:1a:41:62:
7e:a3:45:44:9c:01:f8:6e:73:b8:5f:7c:4d:77:8e:7d:64:d8:
74:b3:a6:93:41:57:c2:6d:1d:0d:ea:48:14:57:2e:6d:51:07:
1a:e5:fc:54:0a:be:bb:76:53:8c:de:a3:74:f2:67:ae:52:91:
b1:37:a9:a4:c0:36:77:38:45:83:bc:06:0b:00:42:d4:5f:9c:
13:32:e4:b6:1d:dc:4d:b6:6a:da:32:5b:39:0c:42:84:1c:12:
93:5d:f3:8b:0b:03:c3:69:c8:44:e0:f9:e7:ee:06:2f:a4:be:
61:07:78:fe:6b:c2:db:8a:e0:2f:de:e7:8b:c8:0a:e0:f7:e4:
7c:59:94:d5:08:19:1a:a3:fb:37:e8:1a:91:3a:41:37:68:e1:
1c:c7:7b:b6:d4:51:19:b0:43:02:93:9b:e1:1d:e8:a0:aa:d8:
a0:cb:30:d3:ee:c4:f3:eb:f1:5b:5a:64:87:94:27:ca:a6:ce:
4d:9d:6e:62:e3:49:62:b5:b4:36:7e:d3:cf:61:6a:59:60:f6:
a7:cd:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:40 2025 by rpki-client