Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35D7A016F82A11EFA2FA5993762E951A.roa
File: 35D7A016F82A11EFA2FA5993762E951A.roa (raw, json)
Hash identifier: uLHumag1Div5JAAsBMZgYAiONCqCrsJGRp9XuVYDSvI=
Subject key identifier: E0:50:16:B8:7D:72:1B:72:8A:B1:80:78:3A:BC:29:AF:68:F3:0A:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017092
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35D7A016F82A11EFA2FA5993762E951A.roa
Signing time: Mon 03 Mar 2025 12:22:45 +0000
ROA not before: Mon 03 Mar 2025 12:22:41 +0000
ROA not after: Wed 30 Apr 2025 12:22:41 +0000
asID: 138915
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94354 (0x17092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:22:41 2025 GMT
Not After : Apr 30 12:22:41 2025 GMT
Subject: CN=67c59f15-f21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:ba:9d:ae:43:5b:0f:c3:4b:82:ca:12:42:
bb:a3:65:49:e5:64:82:c1:32:d4:dd:8e:8c:cc:ba:
9e:6f:1e:2a:47:d0:9b:66:93:09:da:30:1e:60:44:
d7:9a:a0:e3:35:44:18:4b:7e:fa:71:1f:7a:8f:eb:
c0:d8:82:85:80:80:f2:81:fe:9d:0a:90:69:3e:b8:
96:62:66:31:95:16:05:bc:49:c6:7f:9a:c0:e0:bf:
89:2a:31:c1:8b:66:90:01:e3:7b:3c:6e:67:d1:fd:
b2:ec:95:7f:19:42:33:77:69:06:9f:f4:51:7c:cc:
8f:0a:4b:33:3e:de:35:81:24:1d:74:35:a0:d6:af:
2e:d9:82:16:2f:9d:0a:f6:70:77:1b:fd:11:b3:67:
03:d0:20:eb:21:66:1f:e5:45:89:0a:d4:e3:20:8f:
d6:77:7c:f0:35:88:47:29:e4:fe:80:20:67:d1:cb:
2c:60:2d:b7:8a:b6:75:3f:b8:92:35:80:c6:fc:9d:
91:86:46:e6:bd:8b:fa:13:cb:b4:8c:d1:ad:d8:82:
de:cf:a7:02:46:31:b3:6c:09:7c:bd:d4:b0:aa:d1:
45:f8:46:65:48:b9:54:4d:bd:4a:b5:f5:65:a3:ef:
76:e4:08:04:8e:62:21:f7:4f:8c:67:19:87:6e:e8:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:16:B8:7D:72:1B:72:8A:B1:80:78:3A:BC:29:AF:68:F3:0A:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35D7A016F82A11EFA2FA5993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9d:4c:04:39:2a:5f:61:05:18:1c:fc:3e:fa:e2:e7:bb:a2:
dc:d5:d8:3d:06:27:47:2a:c0:f7:56:8e:e0:f6:f8:82:e1:12:
ab:5f:e1:19:e5:78:51:2c:33:71:07:9c:0e:1e:bb:36:36:dc:
fe:32:ab:a4:79:9f:4d:5b:d8:14:3a:98:4c:36:b2:e0:06:fc:
8f:05:56:08:61:3e:d6:a4:07:52:47:74:c9:28:5e:a8:ae:9b:
d8:77:17:27:17:67:44:1f:ff:81:6e:0d:4e:c7:d7:d5:54:53:
25:4c:65:68:f2:96:d1:05:aa:88:27:90:b2:bf:73:ee:d5:43:
b1:00:9c:e3:4c:55:dc:a3:ee:a0:d0:30:21:0e:15:18:69:3a:
4d:8e:70:bd:5f:75:ff:29:ec:8e:bc:2d:01:ff:aa:80:9c:a2:
b6:b9:48:f0:df:2f:52:3d:63:99:1a:56:43:18:a3:b2:b2:c1:
8f:42:60:39:c6:0b:4d:cd:b7:24:5a:c1:1f:f3:5c:ac:6c:40:
ea:02:46:b8:e6:a5:cb:d4:50:b1:ea:07:47:1d:12:5f:f8:56:
01:74:af:9e:0e:7d:df:23:2c:bc:32:ec:f3:fa:be:a0:b3:d7:
81:b0:73:03:c1:22:82:48:b6:2f:00:96:81:23:df:6b:ad:75:
b5:65:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:29 2025 by rpki-client