Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E10B70EABF11EFBE4BD26B762E951A.roa
File: 16E10B70EABF11EFBE4BD26B762E951A.roa (raw, json)
Hash identifier: DXElkgXfgYquRBM3fte3C2xA73lpHrE32vB8DycKXiU=
Subject key identifier: B6:C9:F0:23:F1:7C:31:62:46:B8:D2:E1:D8:77:96:03:39:17:8C:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015711
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E10B70EABF11EFBE4BD26B762E951A.roa
Signing time: Fri 14 Feb 2025 10:33:12 +0000
ROA not before: Fri 14 Feb 2025 10:33:08 +0000
ROA not after: Mon 12 May 2025 10:33:08 +0000
asID: 135097
IP address blocks: 154.197.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87825 (0x15711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 14 10:33:08 2025 GMT
Not After : May 12 10:33:08 2025 GMT
Subject: CN=67af1be7-b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:df:c4:2a:2e:ef:bf:3c:e5:8c:62:b8:a2:
d4:ef:ca:f1:e7:9c:59:11:3b:58:bc:17:e4:4b:57:
a5:20:c6:94:49:ab:7b:1a:e3:bf:ba:16:bd:a5:fa:
21:ee:a7:64:17:75:78:ca:4c:bc:b9:7b:b1:b5:bb:
d6:97:b2:6d:d9:8b:9c:1c:5d:e0:64:3e:82:31:d2:
f8:0a:2f:a7:63:bb:c8:84:2b:5f:86:2b:eb:73:49:
92:b5:1a:54:25:bd:be:01:74:b5:34:f8:a2:5c:57:
92:6b:da:a5:f3:71:df:c3:9e:65:a2:b6:b9:08:84:
aa:e2:c9:d6:6d:45:88:56:83:4b:9b:e8:ce:cd:3d:
0d:dc:26:fc:a9:3c:c2:19:21:9e:1e:9b:ae:1d:a5:
6a:07:a0:b8:80:2e:fa:51:f8:b7:d1:85:4c:0f:3c:
61:67:bb:1b:e2:a5:34:19:39:bb:a8:14:24:72:47:
32:33:32:ce:b8:84:fa:3e:3f:e0:db:90:82:21:13:
bd:a1:07:f8:b1:70:e0:03:e7:2f:2a:1c:c3:e6:fa:
3b:13:40:45:ac:1e:a8:2a:d1:0b:31:00:b4:f1:7f:
e6:3d:c4:29:8d:c8:b2:63:5b:32:d0:79:14:28:74:
0d:0e:d6:dc:41:fb:03:f7:ef:38:36:bf:2a:d7:8e:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:F0:23:F1:7C:31:62:46:B8:D2:E1:D8:77:96:03:39:17:8C:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E10B70EABF11EFBE4BD26B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.208.0/20
Signature Algorithm: sha256WithRSAEncryption
70:b2:d1:1b:69:1d:49:1e:19:b8:14:99:79:14:91:27:f8:53:
4b:f8:13:20:5f:54:ad:20:d2:e9:d3:e8:1f:ef:54:de:b7:d0:
fb:bc:92:e2:67:01:d4:d1:92:c3:ff:d2:f0:a9:95:e1:be:b3:
50:d4:11:33:9e:f0:22:d8:48:39:b0:57:48:51:28:e8:86:42:
c0:2b:97:46:5c:17:d1:e4:2d:89:0b:a0:ef:6a:9a:b6:20:2d:
c2:bf:34:6c:3d:41:58:70:59:bc:85:e9:2a:b4:bb:c5:0b:4e:
b8:a2:ee:73:f3:9a:61:af:65:49:70:05:8f:8e:05:a1:dd:14:
78:8c:40:e1:70:f6:8a:ee:f9:4e:b5:a6:b5:8d:81:1e:29:d7:
18:d0:d4:9c:fa:e2:90:34:9f:cd:92:7f:e4:64:da:a0:8b:76:
58:10:17:aa:e3:f9:4e:a6:ed:7f:a0:81:bf:22:15:1f:7b:24:
6e:ac:25:0f:2d:1d:e4:37:b7:92:1f:d9:ad:62:c7:70:ba:41:
36:92:21:3d:bc:cb:55:02:f7:c0:80:c7:a6:ca:a1:cb:a7:9c:
10:32:20:72:fd:2d:fa:54:52:ed:b3:56:12:bc:26:dd:9a:58:
eb:a6:f7:af:3b:c4:79:74:72:e7:1f:e3:b6:5a:53:3d:94:32:
d3:28:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:03 2025 by rpki-client