Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2875D4D4D98E11EFA54FECB4762E951A.roa
File: 2875D4D4D98E11EFA54FECB4762E951A.roa (raw, json)
Hash identifier: X/iYarbPiiUpB1cCwfZnl/oYr+gYjatTMZnLsqtfH4A=
Subject key identifier: CB:4E:EF:DF:6C:49:8F:73:A6:F7:9A:8F:50:60:58:CF:14:65:05:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014278
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2875D4D4D98E11EFA54FECB4762E951A.roa
Signing time: Thu 23 Jan 2025 13:30:06 +0000
ROA not before: Thu 23 Jan 2025 13:30:02 +0000
ROA not after: Tue 13 May 2025 13:30:02 +0000
asID: 138915
IP address blocks: 154.205.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82552 (0x14278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:30:02 2025 GMT
Not After : May 13 13:30:02 2025 GMT
Subject: CN=6792445e-efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:8b:45:9d:49:fa:bd:eb:3c:7f:1b:8f:e6:
19:05:1c:05:a7:ea:03:81:80:10:d6:bf:0c:b3:90:
37:6d:3c:10:0c:d1:18:fa:9d:ec:ec:bb:ca:04:f7:
68:0d:ff:5d:35:7f:e3:97:64:71:f5:c2:b7:70:cc:
c8:c4:bc:f6:89:75:12:17:93:21:70:de:61:c5:d8:
c2:cd:48:f6:28:a2:b1:df:90:2a:82:1d:32:d4:69:
c5:12:2b:ff:31:bd:46:75:6c:b9:95:dc:b9:aa:d8:
32:14:c4:3e:b8:5f:6f:98:0e:50:54:b4:b5:fe:64:
04:3d:99:4b:ba:a6:48:c1:64:4e:df:30:82:f9:b1:
6e:2b:7a:0a:92:ad:ab:81:82:4d:c3:0c:d5:9f:38:
45:ab:19:45:b3:58:51:72:1d:e2:27:6b:cd:ab:ff:
f5:61:9f:39:6e:5b:70:87:ba:da:06:58:f1:ba:7c:
d4:42:ad:be:17:88:25:f3:5e:67:90:b2:92:02:e9:
16:40:c7:c9:79:47:7e:ac:c9:f4:82:c7:d2:87:8a:
58:1f:d4:09:bf:67:1b:96:85:9e:8f:b7:d3:da:95:
4f:8b:7d:35:89:94:68:75:cf:f4:0d:f1:38:99:c7:
6b:7e:0b:9c:de:07:8f:2d:b6:61:94:0e:6b:b2:3a:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:EF:DF:6C:49:8F:73:A6:F7:9A:8F:50:60:58:CF:14:65:05:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2875D4D4D98E11EFA54FECB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.157.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ed:03:87:ad:07:cd:b7:45:5d:04:a1:aa:28:0a:7f:1c:d7:
a7:06:45:6f:f1:8c:f2:2d:5e:09:1b:df:99:09:2b:eb:76:d0:
60:8d:6e:6d:c0:9c:7e:47:d7:4a:8c:38:cd:e6:fb:3f:f4:47:
a7:e4:b7:ee:5f:fa:77:0e:22:ed:9a:68:69:16:83:10:e3:b9:
9f:0b:f2:9b:e1:e5:24:98:69:b6:2f:76:2e:04:56:22:6c:1f:
b5:6a:23:f4:82:ee:5d:4d:90:4b:0d:a3:a6:2a:db:71:51:a8:
85:cb:db:70:c7:a3:51:87:4a:fb:92:6a:6f:cc:cf:24:13:9e:
7e:ea:e3:92:bf:63:40:e7:f3:33:63:20:a4:63:02:18:0f:db:
c2:1f:d6:32:17:a0:94:bb:fb:39:69:8a:fd:4d:e6:b2:cd:bd:
1e:55:0d:83:d4:ed:1c:3d:5b:02:c9:e3:52:30:1e:b4:06:e8:
1f:bf:fd:dd:33:fa:e2:07:b3:ae:1a:03:da:c4:b3:23:e6:2d:
6d:65:50:d8:f9:2b:cc:be:78:b8:31:49:a2:b4:d5:f3:5f:9c:
9b:ef:66:ad:8f:28:4e:d4:a3:b9:b1:01:21:4c:fe:63:82:2b:
27:83:bc:ad:d6:4c:0a:e1:f9:b7:7b:7c:a7:21:b2:77:c3:4e:
98:ce:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:33 2025 by rpki-client