Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4091F700F82911EF83D2DB8A762E951A.roa
File: 4091F700F82911EF83D2DB8A762E951A.roa (raw, json)
Hash identifier: 21zLQpfelEJxLExjB9OXK2B60cE9iqQwAtvMjKKL4dE=
Subject key identifier: A9:41:D4:DD:C0:9C:76:D6:55:B2:19:CF:9B:3F:87:4C:9B:FE:0A:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017086
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4091F700F82911EF83D2DB8A762E951A.roa
Signing time: Mon 03 Mar 2025 12:15:53 +0000
ROA not before: Mon 03 Mar 2025 12:15:49 +0000
ROA not after: Wed 30 Apr 2025 12:15:49 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94342 (0x17086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:15:49 2025 GMT
Not After : Apr 30 12:15:49 2025 GMT
Subject: CN=67c59d79-f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:e7:b1:47:fc:af:1e:04:0c:75:7a:f6:9b:
19:a8:37:6b:eb:a4:09:4f:ec:fc:60:8a:82:67:a9:
0a:d7:73:72:a7:df:e8:ed:7f:56:52:55:1f:d1:05:
21:29:8d:ee:2b:19:fd:65:44:a7:95:d0:dc:c5:c1:
d2:14:ed:cb:b1:36:1a:8b:4f:02:b2:af:ef:b3:19:
4a:19:03:1b:1b:09:fa:c2:e3:61:98:0e:7e:0d:31:
c0:a0:0b:05:c8:2c:d6:61:33:ff:e7:76:91:9e:34:
eb:36:ff:46:bf:e3:4d:e2:38:34:45:d5:3c:2f:26:
0e:96:b8:a4:4f:58:f6:c3:6e:d8:fd:57:f0:2f:b5:
14:9d:62:c8:0f:93:a3:a0:d8:3e:82:7f:93:77:45:
60:13:fd:b5:f9:18:80:60:2a:8e:0f:1c:bc:23:65:
ef:c3:2f:86:4e:c3:37:7d:c7:79:1c:d1:b2:8c:b0:
63:18:91:f1:cb:ef:80:79:45:b5:0e:ea:64:2d:32:
e9:a7:d3:0e:cf:ee:22:9d:b9:d7:38:a8:70:5b:8b:
1a:2f:d0:a2:05:a3:6c:64:44:ce:bf:99:ed:98:6a:
32:d8:53:47:7e:2d:bc:7c:c9:8f:86:79:32:86:93:
07:f8:ef:99:6d:5b:83:d9:27:67:58:6a:c5:41:24:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:D4:DD:C0:9C:76:D6:55:B2:19:CF:9B:3F:87:4C:9B:FE:0A:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4091F700F82911EF83D2DB8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c5:0d:7b:bd:cb:3e:be:8f:c4:aa:21:32:72:fa:c9:95:56:
2f:84:56:9f:f9:99:c1:3f:2c:03:d5:d4:1f:fa:c3:ce:2c:0a:
3e:d5:1d:6f:f3:32:b0:2d:aa:90:57:54:ce:24:37:25:40:4c:
11:53:c2:bf:e7:0c:a6:53:25:55:d7:05:a6:e1:df:25:cb:8a:
ca:39:af:e5:41:cc:12:55:64:1d:5e:75:98:5d:b6:ee:1c:8e:
ba:7f:ec:67:6a:25:39:56:24:03:66:83:f2:2d:a8:3e:4e:d1:
e0:d6:5f:56:ff:20:c0:3f:0f:ee:51:b6:b5:9a:b7:45:2c:0a:
2c:b9:7d:30:ff:29:08:d1:e0:da:bc:79:12:c2:bf:aa:38:c7:
75:e2:b5:79:95:4d:b5:87:2c:95:41:78:7b:d1:a1:09:9a:77:
4f:b8:c3:f5:5a:1c:3c:0a:85:f8:14:7e:f7:c3:82:15:0d:6d:
d7:52:b3:5b:dc:09:ec:9f:5d:0e:ad:bf:71:b5:a8:29:48:b4:
d9:da:87:a4:28:9d:88:47:ea:35:fa:63:82:48:f2:e5:d6:eb:
a7:33:6b:18:a7:77:37:db:9e:08:cc:32:15:63:61:dd:b5:2c:
36:e6:a3:3f:9b:a6:7d:7b:d7:75:51:66:4a:ca:73:a3:fc:38:
28:7d:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client