Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/247DCACCF8F511EF8C595A75762E951A.roa
File: 247DCACCF8F511EF8C595A75762E951A.roa (raw, json)
Hash identifier: CX8rUhD2wU4IgrpXX+cLcgBXzWT5Fl4ZMzKzdoOrO2M=
Subject key identifier: 74:E9:0D:43:86:74:77:A7:08:D0:8C:FE:F2:97:A7:BE:85:B1:2A:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/247DCACCF8F511EF8C595A75762E951A.roa
Signing time: Tue 04 Mar 2025 12:35:24 +0000
ROA not before: Tue 04 Mar 2025 12:35:11 +0000
ROA not after: Mon 07 Apr 2025 12:35:11 +0000
asID: 214834
IP address blocks: 154.81.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94662 (0x171c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 12:35:11 2025 GMT
Not After : Apr 7 12:35:11 2025 GMT
Subject: CN=67c6f38c-846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:cf:14:59:12:cd:f9:c1:4d:f3:95:11:54:
8d:e7:af:35:7b:7a:c4:3d:31:b8:85:80:a0:9e:55:
a5:7b:dc:6e:96:b7:c3:5f:b0:11:67:8e:5f:0b:c0:
6f:fb:1a:d3:34:8b:ad:6c:d5:5e:ea:91:a1:81:c5:
48:07:6b:8a:02:9c:3d:22:e7:64:33:0a:27:b2:02:
ed:69:c3:a9:c5:bd:ee:a4:e1:f2:c9:a7:12:14:7c:
74:3f:18:68:7e:7d:75:90:c1:47:93:e0:fb:30:cd:
8e:fe:3e:d5:a3:58:dd:1d:87:1f:56:a3:d7:a5:9c:
cf:f5:ba:80:de:7e:70:ce:82:36:88:a4:18:e6:8c:
2b:b9:1b:4c:fb:46:42:a2:61:b5:6e:cf:d4:07:26:
ed:4e:8d:6a:ec:42:42:30:10:80:57:f5:da:ad:8d:
b6:99:be:0d:b0:cc:c8:34:06:52:93:1f:66:9e:49:
ec:4b:77:0f:9a:2f:4c:f6:07:a1:87:44:57:52:61:
00:c8:3d:b9:a2:6f:7e:e8:9c:92:1a:6a:da:b1:36:
35:13:31:c2:ec:5a:22:e6:33:92:7f:ba:3a:1b:d6:
c3:db:89:57:11:78:31:34:4d:ae:91:f4:e7:3d:ea:
8c:ce:88:29:b0:16:83:ec:3a:e1:11:b2:44:c2:ec:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:0D:43:86:74:77:A7:08:D0:8C:FE:F2:97:A7:BE:85:B1:2A:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/247DCACCF8F511EF8C595A75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8b:38:d2:f3:24:c0:f5:42:4c:99:10:bf:c7:ae:57:eb:17:
f4:21:6c:9a:91:75:e3:1a:58:67:95:29:7d:ce:fe:28:81:a5:
2a:4d:d8:19:27:c2:30:cc:71:4f:8c:c9:d4:60:3d:7c:ef:ae:
89:24:39:25:59:5c:5c:a8:0f:76:80:5b:da:49:40:47:b9:d0:
54:63:b9:54:b2:7a:d4:09:e7:25:c2:0c:56:16:56:4a:f7:0e:
9d:cb:85:6b:19:a1:b7:a2:d0:2d:46:45:a0:77:ff:d7:5d:17:
90:5d:06:b0:41:9c:a6:34:82:ac:74:4d:3b:36:4f:cb:5d:8c:
93:1a:87:dd:f0:90:c4:c5:f6:e0:5b:3e:3d:68:44:ad:b0:41:
85:da:52:98:59:e7:aa:d9:88:43:57:f8:ee:20:76:47:e7:3e:
88:8c:61:ef:e2:c4:16:b6:93:0b:2a:3e:52:15:e0:a1:03:7b:
e3:2f:29:9a:e0:47:85:e1:3c:3d:84:b2:51:fe:27:6f:b8:b5:
3f:50:d5:8e:a4:6b:1c:c6:73:2b:e7:fc:4b:09:7a:98:4a:b4:
a2:94:cc:23:05:4f:ed:d2:aa:99:d8:79:77:4e:92:2d:9d:30:
73:81:2d:09:f9:ad:f8:42:49:b0:56:42:a0:1c:93:fc:cf:cc:
14:88:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:57:44 2025 by rpki-client