Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE958FEFF2F11EFA96C05B2762E951A.roa
File: 3FE958FEFF2F11EFA96C05B2762E951A.roa (raw, json)
Hash identifier: REC4qEoeAx1WNwnBMzyIJX3DGVBwvi7Ce+SdMCAIeUQ=
Subject key identifier: 55:41:C2:90:9E:82:B3:C8:2E:DE:EE:A2:31:D8:32:CC:1A:D0:F4:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE958FEFF2F11EFA96C05B2762E951A.roa
Signing time: Wed 12 Mar 2025 10:46:27 +0000
ROA not before: Wed 12 Mar 2025 10:46:24 +0000
ROA not after: Thu 24 Apr 2025 10:46:24 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95216 (0x173f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:46:24 2025 GMT
Not After : Apr 24 10:46:24 2025 GMT
Subject: CN=67d16603-6f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:0b:4e:0a:32:dd:55:5b:fa:28:b3:29:21:
3f:96:6a:0d:73:c3:f6:ee:66:d1:01:24:c2:59:ff:
45:0e:b9:61:e5:63:a1:7b:2f:0d:94:18:75:33:76:
fd:c7:27:f5:be:b5:f8:c5:fe:25:74:eb:30:6c:d9:
68:f3:82:cf:46:76:19:83:5b:b9:07:20:62:b6:49:
4a:6c:57:1d:61:da:ad:cd:ea:ab:76:9a:e8:a9:41:
16:fe:30:78:e8:66:84:f8:37:d8:cc:0d:0a:cc:dd:
9a:2a:4e:c4:dc:d2:ac:13:cb:d8:5d:8e:b8:5d:af:
d9:cd:59:a5:5c:71:cb:57:a2:cb:4e:1e:f6:74:10:
67:e0:72:36:ab:7d:56:f9:6e:1f:ff:91:cc:6e:de:
7c:ef:21:3e:3d:72:86:9c:b8:ec:87:83:ae:63:79:
1b:e0:d4:16:08:bf:00:27:d9:ac:d8:19:15:e2:84:
f5:4e:62:7b:ca:b1:8e:2e:8c:52:7a:73:3c:d8:18:
7a:2a:cc:b8:1d:b0:90:69:05:62:62:da:c3:89:a3:
8e:79:a8:2a:b9:c7:cb:7c:0a:59:f2:fe:8e:e4:c0:
8a:87:9d:38:98:98:41:27:d0:c0:77:dd:b5:fa:0e:
2e:e6:75:37:7e:f5:f7:c9:0f:20:22:a8:e3:3c:9b:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:C2:90:9E:82:B3:C8:2E:DE:EE:A2:31:D8:32:CC:1A:D0:F4:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE958FEFF2F11EFA96C05B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:10:9f:d1:9e:a5:fb:b5:4e:f2:6f:eb:da:ef:fd:c0:2e:ee:
6c:09:48:be:36:b3:6f:00:94:80:6d:60:56:03:aa:d2:5a:b3:
6d:63:c8:9a:a1:2b:da:4e:9b:9f:63:3b:18:c4:28:4d:cd:bf:
bd:8a:6b:c3:68:6b:4c:90:3f:0c:c1:e3:69:6c:fe:ab:56:1c:
a1:48:15:5b:1b:5a:25:5b:45:32:54:33:37:3d:8e:9e:a9:bd:
50:aa:84:1c:da:79:00:67:9f:95:1b:82:58:0f:97:78:be:51:
32:54:b5:b7:fa:36:e9:47:e2:3c:38:95:e3:ba:02:68:32:fd:
99:02:6b:6f:f3:ba:d4:a3:1e:45:7a:2d:f6:b4:c6:76:cb:5f:
6a:e4:0f:71:e2:bc:13:0d:74:4d:62:32:89:39:1c:1d:69:8e:
2d:a5:42:57:3a:dc:a9:3f:46:5e:b4:95:92:ef:44:cd:f3:67:
26:6f:5b:06:09:d3:0b:b0:72:6d:89:e3:15:4a:61:46:fa:4e:
c7:93:63:98:33:92:f4:66:ed:2f:94:88:7d:4b:6c:1a:b4:11:
17:a3:c5:83:c2:86:e2:6c:84:36:a5:28:25:d7:2f:fa:96:1e:
65:ab:23:ec:99:42:e3:5a:31:ff:e1:95:59:25:9d:fe:12:cb:
9c:14:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:52 2025 by rpki-client