Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12F09C7EF66811EFACD728A4762E951A.roa
File: 12F09C7EF66811EFACD728A4762E951A.roa (raw, json)
Hash identifier: By6SnD38rJjCh/usIbTR3u6AeQn7H7weFQ4D7SObP+Q=
Subject key identifier: 49:34:55:83:94:44:8A:B3:FA:68:54:82:88:4F:0B:E4:D5:20:3E:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12F09C7EF66811EFACD728A4762E951A.roa
Signing time: Sat 01 Mar 2025 06:40:33 +0000
ROA not before: Sat 01 Mar 2025 06:40:29 +0000
ROA not after: Wed 01 Mar 2028 06:40:29 +0000
asID: 17561
IP address blocks: 154.81.48.0/24 maxlen: 24
154.83.157.0/24 maxlen: 24
154.86.93.0/24 maxlen: 24
154.86.94.0/24 maxlen: 24
154.86.95.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
154.86.115.0/24 maxlen: 24
154.86.116.0/24 maxlen: 24
154.86.119.0/24 maxlen: 24
154.86.123.0/24 maxlen: 24
154.86.125.0/24 maxlen: 24
154.89.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93502 (0x16d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 06:40:29 2025 GMT
Not After : Mar 1 06:40:29 2028 GMT
Subject: CN=67c2abe1-2eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:c0:7a:62:2b:c8:3b:e1:6a:e5:ff:a3:d2:
31:a7:86:f5:02:64:bb:64:b2:29:01:1f:32:5c:83:
aa:61:dd:51:0c:c7:c6:12:97:02:0d:52:fb:8c:fc:
5d:e5:b8:58:95:ef:69:6c:b8:be:f9:0d:2b:0d:da:
21:f3:b0:d7:3e:db:48:e0:4c:7c:0c:05:ee:8c:18:
bf:65:8b:e1:d2:91:e6:4a:46:00:ec:ef:c5:b6:7d:
0f:bc:54:a0:13:d9:97:63:d6:b9:7b:bf:cb:44:5c:
fb:b0:26:a1:46:ac:42:df:f1:2a:04:f2:8f:5b:e4:
2d:e0:9b:9d:98:33:1c:4a:f2:3a:23:f6:06:de:18:
da:ef:fa:e0:8c:79:95:0e:57:62:c7:b1:e6:e7:69:
66:c9:f1:dc:85:3d:06:5a:41:56:03:91:b0:96:4b:
53:a3:91:1d:f9:e1:70:10:63:40:52:39:a7:a1:33:
a4:cb:17:9c:46:d1:83:11:0a:fe:34:d9:19:89:15:
7e:35:2f:a7:1c:93:a6:3a:5d:60:47:e4:52:1e:da:
bb:cf:c3:ee:52:43:14:00:41:65:ea:b6:b7:06:00:
4b:5b:20:c4:69:2a:d0:c2:6f:85:9d:43:b2:16:3a:
d1:6a:ce:fd:26:50:06:b5:55:b1:c2:9d:b6:66:eb:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:55:83:94:44:8A:B3:FA:68:54:82:88:4F:0B:E4:D5:20:3E:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12F09C7EF66811EFACD728A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.48.0/24
154.83.157.0/24
154.86.93.0-154.86.95.255
154.86.114.0-154.86.116.255
154.86.119.0/24
154.86.123.0/24
154.86.125.0/24
154.89.129.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ea:45:f5:09:15:53:c8:b5:63:ae:02:d7:09:f1:7a:cd:4e:
ca:07:57:54:54:c9:61:ee:68:dd:91:92:2e:38:3c:de:7c:84:
18:77:1f:52:89:3b:48:49:1b:ef:37:0a:59:0f:59:b7:bb:9b:
4f:8f:86:bc:a5:ae:fe:d3:28:a3:d4:f8:0e:8d:b4:c0:29:e8:
f9:ed:fd:73:43:22:2e:6e:ec:0f:98:9f:28:bc:70:b6:9b:32:
84:37:74:29:7c:0b:c0:ce:0f:9e:ce:2f:41:74:89:35:5e:58:
44:f0:5e:bb:34:2b:f5:62:89:0c:b2:9c:98:2a:26:0f:51:5c:
5d:ed:bf:f1:85:d4:e2:8a:5a:dd:24:a8:07:4f:50:7b:47:a1:
40:0e:e3:f6:5b:e7:a8:d6:fd:da:1e:a5:b8:75:84:48:69:6f:
0f:58:da:aa:6d:7f:b3:bf:2a:84:12:df:e3:f8:62:1f:b3:87:
b8:6f:55:24:66:d7:34:59:37:1a:ae:47:75:43:f2:0d:51:ff:
1a:08:38:fd:9a:97:1a:d5:9d:ac:14:da:73:69:dd:bc:3c:da:
41:ae:f3:1b:c1:a7:31:c4:37:bf:7b:01:1a:c4:de:c2:23:d9:
30:86:c6:bc:5c:2b:c3:eb:2b:e6:75:38:fc:84:73:88:3b:d0:
af:40:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:07 2025 by rpki-client