Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2013A6E60CAF11F0ADFA0A47762E951A.roa
File: 2013A6E60CAF11F0ADFA0A47762E951A.roa (raw, json)
Hash identifier: H1qmjtk2Lr/e+OCplzE2r69SvM/mV32JRIVZr2XsVw4=
Subject key identifier: CF:50:13:7D:98:A7:3A:70:B6:E8:71:C2:D0:7B:6B:78:BA:50:72:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2013A6E60CAF11F0ADFA0A47762E951A.roa
Signing time: Sat 29 Mar 2025 15:04:35 +0000
ROA not before: Sat 29 Mar 2025 15:04:30 +0000
ROA not after: Sun 04 May 2025 15:04:30 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95915 (0x176ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 15:04:30 2025 GMT
Not After : May 4 15:04:30 2025 GMT
Subject: CN=67e80c02-70c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:f1:a7:a1:84:be:34:ad:14:3d:4f:08:2e:
a2:eb:dc:0e:86:6b:f8:40:f1:df:bb:5c:18:8e:b5:
aa:9a:26:d9:7b:87:4b:07:03:5d:9d:46:46:75:58:
55:82:4e:b5:47:1f:35:41:be:01:a7:83:a3:b4:89:
46:87:41:47:e5:c5:8a:8a:50:8e:1f:89:18:8f:95:
d8:dc:35:da:6c:d4:b2:5c:22:fb:57:1d:0c:1c:83:
84:cb:4f:7a:b4:e6:e6:2e:bf:14:60:94:9b:f6:38:
c5:e7:ea:68:34:01:b6:c8:44:8b:31:c7:7a:7d:e0:
d6:7d:dd:a2:78:fb:2c:c7:54:aa:32:71:b6:41:15:
b8:9a:e9:c3:91:aa:7f:19:fc:53:61:42:f0:f5:4e:
e2:b7:f5:a8:44:a5:4e:1a:f8:14:74:d6:09:e3:f8:
e4:a2:0c:2c:40:2a:bc:3a:e4:e6:cf:5d:b0:b9:12:
ad:c2:b3:32:ce:c0:d9:11:ea:4d:85:e0:7a:e1:42:
c5:e3:21:5b:45:7b:1f:5a:4e:7c:85:e9:82:c3:95:
55:4b:53:73:ec:75:3f:a2:7c:fa:b0:1c:45:0d:46:
6d:cb:0e:2a:91:f4:2c:90:4c:c3:46:74:12:e6:82:
25:81:0e:dd:cd:ad:4d:0d:47:f4:fd:5a:12:c8:0f:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:13:7D:98:A7:3A:70:B6:E8:71:C2:D0:7B:6B:78:BA:50:72:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2013A6E60CAF11F0ADFA0A47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:bb:fc:2e:a3:00:10:e5:92:ce:e6:80:14:e0:9b:d3:1b:f7:
7a:b7:e2:17:c4:32:5a:61:18:80:85:63:bf:d8:21:94:ab:7d:
8b:74:66:92:2d:00:33:48:01:68:ad:37:a5:c8:a0:f1:23:1a:
00:e6:52:bd:41:9f:5f:b9:5f:a6:99:ab:22:10:59:91:bc:f0:
08:93:e8:23:70:b6:ae:39:ab:b1:b2:8e:d1:c1:46:c8:0c:be:
f9:18:4d:77:1c:63:f3:d0:7e:09:ea:35:b4:98:d2:8c:d6:48:
d8:1b:8a:f7:0c:36:ae:3a:c1:c4:ec:23:91:fa:f2:2b:5d:3a:
16:20:5d:9b:d4:b3:f6:a3:17:43:80:bd:64:16:9c:29:e4:c1:
17:8d:cc:28:cc:9c:69:a1:d7:6d:54:82:6e:a5:9c:53:ce:6c:
99:b7:b6:c9:c7:9c:2b:f4:e0:2b:8a:03:f2:0e:20:4f:6c:7b:
dc:92:71:48:12:92:76:3d:1d:ed:aa:3c:1d:3a:44:9f:33:e4:
d5:07:fc:9d:50:a0:12:d9:00:25:10:ef:94:41:de:ab:d5:d6:
5a:cd:0e:c5:6d:e1:13:c9:83:7d:1f:58:8c:d5:83:67:9e:ea:
0c:77:85:03:f3:59:1b:7e:e8:a3:9e:dd:33:52:d4:af:07:de:
cd:f4:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:13 2025 by rpki-client