Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C1B4580F61A11EFB653AC84762E951A.roa
File: 2C1B4580F61A11EFB653AC84762E951A.roa (raw, json)
Hash identifier: mWuGmB4zJ0HuEWBv8S0IVN9xvwRYzKnjbKGHbdKopQE=
Subject key identifier: D4:49:65:F5:A9:64:3E:CE:9E:0B:69:07:1B:91:89:FC:2B:A6:C6:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C1B4580F61A11EFB653AC84762E951A.roa
Signing time: Fri 28 Feb 2025 21:22:54 +0000
ROA not before: Fri 28 Feb 2025 21:22:50 +0000
ROA not after: Sun 13 Apr 2025 21:22:50 +0000
asID: 138915
IP address blocks: 154.206.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93243 (0x16c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:22:50 2025 GMT
Not After : Apr 13 21:22:50 2025 GMT
Subject: CN=67c2292e-aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:ac:cb:01:e2:2d:50:6a:5f:0b:69:4e:d5:
d6:e5:8a:51:6b:71:ca:30:7d:92:b1:e8:99:05:a4:
1d:ba:29:e0:3f:93:04:e6:b4:a0:86:57:67:85:e1:
cb:e7:dd:cd:38:84:93:6b:a1:b9:17:87:e4:0c:bf:
8d:34:0b:5d:38:54:ac:1f:c7:94:3d:d8:8f:2e:3b:
40:79:c5:e1:ef:b5:b2:58:04:e8:89:9c:63:3a:bd:
c1:fd:0c:99:9e:d8:d1:77:09:35:4c:46:89:dc:6f:
f1:1e:d6:f3:77:5a:0e:ff:ee:ef:4a:47:cc:f4:83:
00:0d:83:f0:28:89:ba:f1:24:63:57:d8:d1:01:fd:
93:56:4b:f7:65:27:d4:03:33:8a:27:f1:f2:29:c2:
67:17:1c:83:49:a9:fa:2f:94:95:9f:83:4b:db:ac:
49:63:88:98:8d:b3:e4:21:c3:ce:50:97:ce:72:19:
94:88:93:44:24:63:bc:57:bd:7f:6c:26:48:81:5e:
be:04:bc:d6:9b:03:96:ef:10:d0:72:f1:3a:21:cc:
84:25:37:96:ea:06:52:67:47:e8:32:6b:8d:c5:d5:
f7:d0:3b:7f:41:23:a9:d5:d8:0d:af:c7:c7:ea:3a:
45:65:c8:85:ef:4b:47:a8:98:a1:02:b2:1c:4a:1b:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:65:F5:A9:64:3E:CE:9E:0B:69:07:1B:91:89:FC:2B:A6:C6:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C1B4580F61A11EFB653AC84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.96.0/23
Signature Algorithm: sha256WithRSAEncryption
04:0e:f6:71:97:94:35:1e:50:4d:fe:7c:94:cf:6f:1a:da:b3:
a0:50:e7:b5:82:ba:09:01:55:b0:f9:10:f0:c4:20:ab:4a:6f:
3d:bf:fb:82:62:60:6b:52:8f:05:32:a6:c7:f8:ba:85:a3:4e:
37:bc:53:bc:08:9a:ad:4a:30:35:dd:8c:02:90:bb:1e:6d:42:
6e:12:ad:9a:8f:7c:cf:cb:56:d2:2d:02:47:a4:c4:c5:15:39:
18:c1:83:1e:e8:f9:0c:9c:fb:ea:d2:f1:d9:bc:10:57:93:9b:
6e:63:b5:30:16:15:b0:20:4f:a9:a4:29:cb:3d:f0:c5:b3:4d:
d1:1a:ed:59:23:b8:3e:5b:6f:56:35:ef:97:66:2f:9e:f2:1d:
99:75:ee:be:c2:16:6e:eb:c7:fa:b5:fb:64:e8:ff:15:09:9a:
b4:a6:20:7d:ca:61:a9:7c:1d:39:66:15:23:32:07:3d:a4:42:
d3:5a:a3:0c:86:43:cb:1e:51:85:5a:93:66:ed:6b:a5:3a:ab:
ce:18:fb:ac:59:73:7c:75:62:5d:db:56:fa:bd:e0:a5:25:83:
a8:81:e7:c9:37:b3:7c:5d:9b:fb:4a:1d:0c:8b:e9:e7:f6:f4:
cb:92:de:d0:91:58:fe:4e:2b:f9:13:91:9d:c3:21:14:f3:2a:
3c:82:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:33 2025 by rpki-client