Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DDE855E0EA711F08DA47347762E951A.roa
File: 1DDE855E0EA711F08DA47347762E951A.roa (raw, json)
Hash identifier: wDRFQTqFtBdemMMAKA90E3a/lIFU972XxGM73kk3AXI=
Subject key identifier: E7:04:15:C8:8E:D1:AB:E8:0A:EB:05:67:91:A5:97:CE:AF:08:AF:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017729
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DDE855E0EA711F08DA47347762E951A.roa
Signing time: Tue 01 Apr 2025 03:12:17 +0000
ROA not before: Tue 01 Apr 2025 03:12:13 +0000
ROA not after: Mon 21 Apr 2025 03:12:13 +0000
asID: 48529
IP address blocks: 154.206.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96041 (0x17729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 1 03:12:13 2025 GMT
Not After : Apr 21 03:12:13 2025 GMT
Subject: CN=67eb5991-e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:74:1a:68:62:1b:cc:ea:ad:47:af:54:47:
ad:68:db:ef:5b:95:91:31:a1:4c:8a:6f:a9:20:c4:
11:b8:9d:29:ae:e4:d4:96:57:75:50:e8:d1:f8:10:
25:9b:71:60:c6:f2:6a:20:38:63:12:35:db:c7:be:
5c:e1:ad:0b:12:13:c6:80:cb:5c:b4:95:5a:b6:e3:
97:1b:33:7f:26:3c:38:b7:69:19:a3:e1:f7:28:8a:
d8:87:71:0b:28:b7:bb:9b:47:3f:52:2a:42:6d:25:
80:05:fb:ad:2b:7b:aa:cb:5a:8d:37:9d:9d:66:73:
a6:6d:fb:dd:40:39:a2:f5:47:fa:6d:7c:52:f6:81:
20:d1:97:57:ff:22:1a:dd:b5:76:8e:ff:77:52:1d:
c7:ab:75:7c:dc:d4:ba:76:c5:ad:1c:ce:d2:23:54:
5f:e7:f2:92:64:25:a2:91:ec:b7:45:de:4a:ae:b7:
47:9c:95:8b:44:7f:f4:74:da:3c:70:27:9d:49:41:
5c:6a:92:3d:e9:10:95:13:49:8a:6a:10:2e:98:e6:
10:11:aa:8d:1d:5b:54:18:7c:6b:ba:d5:3b:c8:45:
5c:60:93:2f:d0:f3:8c:ca:02:f9:d8:88:81:ad:56:
7e:9a:62:48:f4:98:4c:9f:06:eb:93:64:d7:0d:d3:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:04:15:C8:8E:D1:AB:E8:0A:EB:05:67:91:A5:97:CE:AF:08:AF:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DDE855E0EA711F08DA47347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:41:b8:60:5f:89:5f:19:6a:a8:72:68:87:41:6f:75:a2:91:
30:4b:94:5b:db:03:ed:bc:29:96:39:40:52:1e:0f:6e:f8:0e:
bb:55:a6:f0:93:5a:04:a5:bd:1c:8c:03:dd:02:1a:8b:a7:ee:
b2:0a:6a:2d:1a:3f:28:7b:ab:3b:f7:b7:d2:83:46:cd:02:18:
e2:d2:99:9e:65:27:28:c0:50:71:fd:7b:f2:01:2a:2d:a1:b4:
fc:33:6a:73:56:06:59:5f:f9:ab:30:29:45:32:2c:7b:99:2a:
e6:49:fb:5c:e5:22:d7:c0:f4:9b:b0:65:c5:4c:be:92:a6:87:
86:86:1a:6a:fe:49:7e:53:80:88:20:3f:67:98:54:0d:36:22:
e8:a8:10:c3:93:01:b1:45:c9:73:a9:29:a1:42:9e:0c:0f:79:
14:dc:4f:3b:f0:ca:c7:94:69:3d:07:35:47:a1:84:a8:78:c4:
41:df:e5:fd:22:8e:3a:79:56:76:80:ac:ee:52:cf:3c:04:56:
39:e3:55:80:4a:f4:e9:90:69:8c:50:fb:32:87:f6:f7:b4:81:
4b:b2:ed:fe:a3:6c:57:a7:3c:c4:64:65:4b:fb:ef:86:ba:b5:
94:28:45:46:b0:53:bc:89:4d:a2:45:5f:a9:83:97:84:c8:d5:
c9:6b:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:00 2025 by rpki-client