Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E12FE86040811F0AE494648762E951A.roa
File: 2E12FE86040811F0AE494648762E951A.roa (raw, json)
Hash identifier: nrQON9IqNLpncge1/eCkx5bs1JfVtcl1ZKweiI/nXLU=
Subject key identifier: 29:4D:91:AA:ED:7D:83:31:B2:EA:52:35:E8:E5:49:C7:FF:D6:4D:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E12FE86040811F0AE494648762E951A.roa
Signing time: Tue 18 Mar 2025 14:49:23 +0000
ROA not before: Tue 18 Mar 2025 14:49:17 +0000
ROA not after: Mon 05 May 2025 14:49:17 +0000
asID: 49505
IP address blocks: 154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95404 (0x174ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 14:49:17 2025 GMT
Not After : May 5 14:49:17 2025 GMT
Subject: CN=67d987f3-6e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:d8:77:03:6e:f7:0b:d4:9e:c1:21:3c:5f:
53:3d:5d:43:57:47:35:fc:cd:7d:01:0f:03:19:a9:
5a:7d:34:be:fd:f7:1a:23:63:f7:ce:9d:d2:07:a3:
b7:ea:56:f0:0e:9a:24:c2:fc:61:52:3d:ce:ed:b8:
bb:46:dd:54:72:2e:c1:be:7e:af:6b:d3:e5:52:44:
13:5c:d5:c6:7c:4f:0f:10:82:62:5a:bc:04:23:16:
e7:7a:bd:12:9a:87:41:28:d4:63:e2:9c:a5:ee:58:
f2:47:db:24:e7:0f:d4:96:3f:ae:59:22:e8:ec:df:
dd:2c:b8:76:95:49:09:80:4a:c0:5c:9f:a0:40:32:
5a:06:81:98:28:98:b8:81:23:f8:67:12:4e:a7:c3:
eb:83:37:79:48:2b:32:39:0c:c0:2f:3d:b8:2b:14:
67:61:3c:b4:45:b5:d4:1e:d7:c9:eb:cf:ef:f2:60:
5a:0c:93:75:13:ab:36:d3:04:7b:fe:c7:08:75:8f:
c0:51:e5:d3:68:4f:cf:59:ff:3d:d8:3a:bc:34:f7:
fa:59:c1:d2:61:ea:61:41:90:47:9f:92:d8:29:8c:
78:2a:e8:bb:d3:1c:cc:8e:5a:02:91:7e:8a:77:75:
26:d2:1e:d2:0b:cd:b6:e5:08:b2:8b:79:25:83:22:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:91:AA:ED:7D:83:31:B2:EA:52:35:E8:E5:49:C7:FF:D6:4D:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E12FE86040811F0AE494648762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.219.0-154.209.220.255
Signature Algorithm: sha256WithRSAEncryption
c7:0d:e0:38:8d:fd:4d:e5:9f:5e:a0:1c:99:5a:ca:4a:e8:16:
b4:42:69:1a:2e:64:23:78:45:e4:54:c1:3d:1a:c8:c2:67:b4:
b9:1e:06:94:d2:2a:a3:f4:59:ec:72:34:cf:15:93:5a:67:1d:
3b:1d:f6:99:60:14:54:8f:e8:eb:79:9e:41:1b:a8:aa:c1:f5:
b2:f9:9b:b6:10:02:2f:7b:05:ca:ce:a0:09:77:db:e4:05:a3:
8e:0b:e0:80:b1:df:e2:10:7e:ef:1d:49:11:8a:86:8f:e0:ec:
c7:87:ca:41:8b:26:5c:f8:84:9b:47:55:6a:d3:00:1e:26:d7:
8a:03:84:69:29:a2:a4:8f:18:14:13:76:17:68:e5:21:c9:37:
b0:9a:0d:27:42:3a:27:02:0a:33:0f:e8:e2:78:09:32:84:75:
86:ac:bd:60:22:ea:f8:60:69:d8:c8:fc:a5:66:d6:4f:1d:68:
60:e3:f2:c1:5b:ba:88:0c:34:3d:e7:b2:ca:f7:b0:ce:d9:4f:
95:b3:a9:ab:37:5f:be:50:09:65:c4:cd:2f:74:46:0d:fc:b7:
2e:de:be:23:5c:51:12:44:76:44:18:be:f0:e4:f8:4e:b7:2c:
04:a8:dc:71:ff:47:e9:03:29:4f:84:53:eb:11:fa:6b:dc:33:
91:42:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:09 2025 by rpki-client