Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311DA1D603DF11F08DC6DC51762E951A.roa
File: 311DA1D603DF11F08DC6DC51762E951A.roa (raw, json)
Hash identifier: 7Dys/PSGL2xTW/5wPkjW67iP4PR3vbphdMqhmF6XTkU=
Subject key identifier: 1B:75:8B:CB:F7:E9:07:82:83:FD:B7:FF:47:5C:83:0C:4F:3D:D6:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017488
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311DA1D603DF11F08DC6DC51762E951A.roa
Signing time: Tue 18 Mar 2025 09:55:59 +0000
ROA not before: Tue 18 Mar 2025 09:55:55 +0000
ROA not after: Fri 25 Apr 2025 09:55:55 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95368 (0x17488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 09:55:55 2025 GMT
Not After : Apr 25 09:55:55 2025 GMT
Subject: CN=67d9432e-a399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:02:65:73:93:e1:3f:6c:cc:d7:26:68:43:
3f:50:27:42:3e:02:b4:ea:27:09:68:6b:dc:81:24:
64:05:2a:83:41:f7:56:21:4f:c6:ae:79:52:57:14:
fc:a8:db:2f:1e:9a:2d:61:03:33:8a:1b:4a:c0:7c:
d3:4f:e4:fe:77:c4:e2:5a:36:10:cc:9d:24:7c:8d:
75:82:f5:c0:05:9e:3d:bb:14:2d:c0:a8:d7:c1:9c:
9f:f9:6a:2e:c2:c0:75:2c:c5:cd:74:cb:68:9e:59:
ad:c6:26:87:5b:2f:3d:9c:d4:1e:95:50:67:3f:95:
e8:bc:d6:5d:39:1c:e4:ef:58:f9:a3:6b:89:7e:81:
5c:e2:ab:fc:25:37:21:2e:c5:a9:e7:4d:14:3a:c1:
49:bd:a9:17:2c:15:6b:1e:01:71:65:c2:6e:28:e9:
6c:1a:7d:c2:82:73:49:9f:0e:cc:07:6f:10:43:1f:
31:bd:65:bb:03:6d:17:2c:96:54:2b:d9:6a:ee:49:
73:ff:b0:b6:82:a2:4c:b0:cb:2b:ee:4b:f8:0c:72:
84:ef:3a:c8:6d:57:f6:4b:48:d5:0c:86:ca:e3:ea:
1e:5b:79:d0:45:f8:15:31:21:8a:92:a6:d0:7f:71:
76:0b:aa:6e:b3:59:17:bc:e8:cf:ea:71:47:ed:55:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:75:8B:CB:F7:E9:07:82:83:FD:B7:FF:47:5C:83:0C:4F:3D:D6:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/311DA1D603DF11F08DC6DC51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:20:4e:4b:64:55:b4:8c:1f:a2:0f:35:9b:9e:c2:1f:45:b3:
de:de:e8:f6:46:a9:ab:ca:e4:4e:cf:d5:a2:d7:6b:00:63:74:
d5:88:01:6f:e0:e2:f0:8a:13:57:30:5c:96:f8:23:4b:60:6b:
71:e0:8f:b7:2c:4a:8a:5e:70:3e:9f:54:b7:5f:6c:10:2a:e9:
66:b8:8b:02:d4:f2:91:33:f5:8d:f4:ab:5a:39:fd:fa:83:42:
63:76:b1:f5:cc:e1:48:44:7a:53:a5:24:9a:43:bb:96:fd:5f:
d7:0d:fb:0e:18:98:cb:af:8c:72:dc:be:f4:27:7b:09:99:d6:
80:c2:41:dc:96:6c:ef:5a:ff:5e:fe:22:e3:ce:f1:1c:35:56:
7f:fd:48:c9:ef:eb:f5:40:3c:c6:47:45:52:f9:6b:b8:ac:fc:
46:59:ef:68:bb:e0:8f:08:db:03:00:1e:18:5f:67:a5:bb:2d:
80:c8:13:2e:02:05:1b:bb:9e:12:11:0c:2d:fb:55:7d:e3:9c:
0f:ba:94:fe:f8:04:ec:d5:ee:a7:8c:4c:80:88:38:1e:1f:d7:
51:78:e1:2d:ba:ad:79:cc:d0:61:c9:4a:01:3e:b2:d1:e9:c9:
64:42:ca:51:db:72:94:62:0f:6a:a6:55:65:20:5f:a0:15:d0:
df:8a:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:06 2025 by rpki-client