Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD64D52F44911EF9ADCD686762E951A.roa
File: 2DD64D52F44911EF9ADCD686762E951A.roa (raw, json)
Hash identifier: O33nX2BcysbttOkDPxmINKL/PwJ5WvrA2szFaGKGyh8=
Subject key identifier: BC:16:E8:65:4E:D8:24:9C:2E:1E:F4:FD:4D:58:3A:B6:B5:D5:D6:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD64D52F44911EF9ADCD686762E951A.roa
Signing time: Wed 26 Feb 2025 13:54:21 +0000
ROA not before: Wed 26 Feb 2025 13:54:17 +0000
ROA not after: Sat 19 Feb 2028 13:54:17 +0000
asID: 17561
IP address blocks: 154.82.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91135 (0x163ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:54:17 2025 GMT
Not After : Feb 19 13:54:17 2028 GMT
Subject: CN=67bf1d0d-87de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:e5:a7:40:94:89:bb:6e:05:5b:2c:8a:53:
66:60:36:6e:e0:45:f0:01:9a:51:bc:1c:6c:bb:63:
45:07:87:bb:61:f5:aa:98:c4:e4:b0:b2:a1:02:5d:
43:5f:1d:66:9a:06:e1:8d:b2:dc:c0:d4:f8:81:96:
8f:ee:80:2a:e1:4a:a0:ac:85:a1:8f:1e:0b:33:0a:
23:66:fa:58:d1:53:31:27:72:b8:4d:72:d4:c9:02:
fe:3b:a9:c8:e7:fb:5c:11:6f:58:e4:a7:d4:90:4a:
b1:5c:7e:39:6c:f4:92:67:e0:36:e0:32:0d:cc:e1:
88:27:41:6e:17:d9:51:d6:25:eb:c5:8f:68:2d:f2:
e2:c6:61:e9:74:53:c1:4e:5b:53:d5:e8:92:2b:34:
fa:ba:31:ff:87:5d:c8:1d:0d:d1:89:95:7f:21:ae:
85:4e:17:3d:37:c1:4d:06:f1:06:74:92:60:42:8b:
57:40:f5:e7:9b:22:af:87:c2:10:b8:81:de:8f:87:
c6:a3:9a:01:f5:d7:40:e4:5c:64:6e:a3:78:40:5b:
eb:6b:24:1a:b1:1f:fd:11:60:de:5b:e9:aa:e0:eb:
b9:b2:17:4e:48:26:b0:28:d6:a8:69:82:0a:4c:f0:
2f:36:51:ce:22:fd:3d:b4:23:7d:b8:ae:32:74:c9:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:E8:65:4E:D8:24:9C:2E:1E:F4:FD:4D:58:3A:B6:B5:D5:D6:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD64D52F44911EF9ADCD686762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.189.0/24
Signature Algorithm: sha256WithRSAEncryption
44:38:b5:66:ce:f9:ec:8d:d7:3f:9c:06:32:08:35:2e:9f:71:
a0:e2:5a:5a:4c:22:35:72:10:f6:28:6e:07:24:ec:cd:3c:86:
8e:da:6d:39:76:99:af:fe:32:da:4f:bb:85:91:43:43:19:58:
51:e3:d4:59:a4:57:77:00:15:da:34:c5:51:41:06:41:24:52:
fd:9d:25:08:98:00:e8:bc:f9:b9:13:ab:93:c2:24:11:7f:f9:
df:a8:93:3b:4e:46:77:9d:24:55:c5:02:c3:f3:60:6b:b1:09:
a1:f4:26:d3:fe:3e:a6:1a:e9:7a:10:27:85:3e:8f:38:f0:49:
66:74:ff:a8:a4:8d:de:86:7b:63:e4:fb:6d:66:ab:47:d8:15:
c5:55:23:0b:23:f7:64:be:3a:1c:a7:34:4a:03:27:13:63:e7:
bc:ee:ec:44:b7:c0:2d:4d:0d:5c:9c:f4:8a:fa:72:9c:df:64:
6f:5c:9f:cc:fc:00:8e:09:4e:f8:62:77:98:21:0a:54:6d:63:
95:35:9f:94:c6:57:8a:c5:a1:ae:62:6d:a0:29:eb:6b:6f:e7:
43:8f:0a:06:ff:0c:be:d2:ea:29:0d:31:77:29:45:5c:d3:cf:
50:2e:fb:89:ff:96:ba:30:3d:87:71:ec:dc:9d:59:9f:47:d3:
72:04:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:38 2025 by rpki-client