Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253FDDBEC90811EF94074571762E951A.roa
File: 253FDDBEC90811EF94074571762E951A.roa (raw, json)
Hash identifier: nWIt4QlYIIIfsa7i4bPVnun3+aVACQk8d/jMawXKIKM=
Subject key identifier: 1A:DA:E1:E0:44:4E:EE:F7:B9:CB:4A:D1:32:F7:91:64:26:8F:92:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01327B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253FDDBEC90811EF94074571762E951A.roa
Signing time: Thu 02 Jan 2025 12:50:29 +0000
ROA not before: Thu 02 Jan 2025 12:50:26 +0000
ROA not after: Mon 13 Dec 2027 12:50:26 +0000
asID: 17561
IP address blocks: 154.221.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78459 (0x1327b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 12:50:26 2025 GMT
Not After : Dec 13 12:50:26 2027 GMT
Subject: CN=67768b95-3421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:92:97:39:f8:0a:c1:20:9c:e1:91:87:f8:
3f:db:7f:8a:bf:13:4a:a7:55:4e:c3:23:0d:61:88:
71:08:59:8b:08:1c:09:1b:4b:02:97:fa:0f:88:c1:
6c:79:4f:2c:80:c6:a1:62:cb:c9:c1:e6:94:51:e7:
2b:b2:89:82:11:9b:bb:c1:1a:67:bf:d8:7e:e9:c0:
78:ad:0a:2d:59:ea:ae:cb:90:07:39:e7:a9:56:11:
a1:5d:9f:aa:79:8b:65:33:8c:da:05:01:6e:be:d5:
b8:92:bc:56:23:29:5c:21:0c:dd:46:35:99:3b:f0:
4d:e1:2d:fa:81:22:ae:cf:fb:74:68:b3:ad:58:83:
1c:86:ab:c1:e4:29:46:d6:27:0b:51:19:b3:06:fb:
b0:62:1e:6a:d1:d2:75:d8:d3:ee:de:97:e5:7b:bb:
f1:e2:93:9a:d6:5c:ba:07:34:de:8d:73:f4:76:8b:
70:be:c9:8c:e7:16:64:90:d2:e8:32:61:74:97:75:
cd:98:c4:d7:57:ec:9f:ea:6d:03:4e:c8:1f:de:b4:
c7:e0:ef:5c:f1:16:26:05:82:28:f0:11:9f:e5:2a:
70:c6:5b:23:43:4b:0a:50:a6:19:de:1c:41:a6:1d:
8c:f6:81:b9:75:55:fe:92:4a:b5:9c:f7:6b:e5:a3:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:E1:E0:44:4E:EE:F7:B9:CB:4A:D1:32:F7:91:64:26:8F:92:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253FDDBEC90811EF94074571762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.202.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:ae:14:5f:a9:3f:d8:01:b8:ec:e1:14:6f:f0:80:3f:9b:
9a:1c:c9:23:b7:3d:40:6c:0e:50:cd:8f:55:03:53:d3:d0:5e:
aa:8e:a8:66:de:fa:f0:35:e9:93:3a:03:fe:da:95:ac:f9:67:
6c:74:7a:c3:11:87:50:1b:02:9a:a5:0c:84:b9:21:8d:ef:22:
16:10:27:b8:4e:a4:49:b7:65:c4:93:48:f3:4a:df:dd:79:08:
0e:19:69:a8:f3:20:62:02:99:82:dc:b9:49:7a:be:e0:46:2c:
81:d3:9d:55:e4:07:3b:02:aa:c8:8b:7e:fa:ad:36:07:cf:a4:
76:64:c0:d1:c6:0d:e6:0d:a8:06:14:e6:34:3c:ba:8a:2a:b1:
20:50:b0:50:45:22:35:55:a2:e5:31:ed:24:b5:3e:a0:a5:7c:
70:7a:28:eb:90:6a:e3:85:52:fc:a3:70:a8:4a:04:7c:cd:48:
c8:0c:7b:0c:71:93:d5:90:f8:6e:ce:27:54:45:f3:0b:2f:31:
19:ce:8d:01:6a:8d:2d:fb:04:eb:35:47:8f:7c:78:f7:50:2d:
de:f0:6e:b6:79:3d:28:3d:20:32:d1:4b:a5:0b:86:74:88:54:
65:a9:51:82:af:d5:e0:d9:f3:85:71:7d:5c:a5:96:eb:17:d4:
e3:bf:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:11 2025 by rpki-client