Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4197DE50DFEA11EF89178C9E762E951A.roa
File: 4197DE50DFEA11EF89178C9E762E951A.roa (raw, json)
Hash identifier: mgdFok4JiQl3AEICvjsvjdBO/buHAwtGdCXItBxhxRA=
Subject key identifier: 88:31:90:F5:06:41:77:21:69:A8:FA:5B:24:40:C8:AC:D3:AC:97:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4197DE50DFEA11EF89178C9E762E951A.roa
Signing time: Fri 31 Jan 2025 15:44:29 +0000
ROA not before: Fri 31 Jan 2025 15:44:25 +0000
ROA not after: Sat 03 Jan 2026 15:44:25 +0000
asID: 40065
IP address blocks: 154.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85491 (0x14df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:44:25 2025 GMT
Not After : Jan 3 15:44:25 2026 GMT
Subject: CN=679cefdd-bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:f6:ae:76:78:b6:57:83:c8:bb:09:5d:bd:
14:8c:fd:f8:e1:ee:cf:a5:f8:e6:03:87:d2:d6:70:
a6:fe:d7:75:70:b8:53:05:a3:d7:8a:4b:d2:2c:7c:
03:ee:19:a6:d5:0e:fc:8e:a2:c6:32:61:60:e6:dd:
2a:9f:08:96:58:9e:76:2a:aa:cc:99:28:90:c0:45:
e3:bb:71:29:a2:2e:68:88:4d:e2:aa:6e:d7:42:80:
5f:84:a9:56:b9:e4:a9:ee:6a:61:19:36:3d:8d:f2:
92:e8:78:6f:08:bf:0f:09:3a:cc:ca:79:79:ef:0f:
51:ea:ca:71:d7:a6:3d:ed:62:2a:82:99:89:f6:54:
bc:a9:e5:33:d1:6f:d0:bf:4d:03:c3:31:08:20:9d:
9e:40:a0:d6:45:ca:5c:b3:b2:6d:12:64:4d:9d:7d:
2f:31:08:d1:67:2b:0f:02:c1:2f:7e:e7:a4:07:db:
a6:c2:87:d7:0e:7e:a9:7a:09:f4:b8:a0:25:b8:8f:
f8:4f:09:72:b0:a9:f3:1f:34:25:f2:5c:67:38:26:
70:2d:7c:92:fa:1e:ea:74:43:5b:2a:fd:44:68:9c:
4f:55:b9:68:5d:ee:bf:ac:ce:39:5e:9b:d6:01:40:
91:24:1c:32:48:92:e0:36:79:04:af:a2:77:6a:1d:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:31:90:F5:06:41:77:21:69:A8:FA:5B:24:40:C8:AC:D3:AC:97:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4197DE50DFEA11EF89178C9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:38:48:2a:e1:3b:98:fb:e5:11:9e:d4:60:fb:a7:60:f4:21:
7d:5b:1a:cf:dd:61:9d:db:2d:59:0f:48:d6:0c:40:1e:b8:92:
29:97:1f:b5:03:58:1e:16:38:4d:f6:f3:46:e3:11:49:2a:03:
eb:49:4a:98:0a:12:0a:a1:ab:b6:96:1b:21:2b:c0:20:49:25:
12:57:1f:08:89:80:44:6e:11:e4:6a:7d:43:92:e1:18:58:3f:
fa:6e:ed:ed:ba:37:58:59:49:ea:f9:a7:d3:75:d0:48:4e:92:
0f:a8:e1:b0:44:d6:8f:46:d6:0b:d1:d0:f0:67:a4:f6:ec:68:
da:13:2a:c4:96:4e:c4:ea:2a:e7:6c:31:3e:35:bf:cb:16:b3:
a5:1c:99:fb:e0:e9:c2:5c:57:94:b5:41:d4:05:1d:d4:77:d4:
a1:ec:25:01:28:25:b9:72:df:04:aa:0d:2a:49:48:13:97:70:
05:59:aa:63:db:aa:cf:d4:7b:d6:73:96:6c:13:09:ea:b3:3b:
79:57:68:42:e1:f5:61:13:f5:b1:43:89:3f:10:83:ac:f8:9a:
b8:63:b4:ff:e2:d8:43:e6:b8:0e:df:0c:70:6d:ce:78:62:89:
38:ef:33:0f:f7:18:f0:b8:86:45:b4:95:ba:bc:ed:9d:99:99:
a4:97:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:54 2025 by rpki-client