Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5757F124F8BA11EF96BB8F6D762E951A.roa
File: 5757F124F8BA11EF96BB8F6D762E951A.roa (raw, json)
Hash identifier: dv6z5OUm7QAJSuVEWMCY3PDIeGoxZOABlMBdXbkXLdU=
Subject key identifier: 6C:A8:3A:06:5E:2C:55:67:2A:B4:DC:E1:66:FB:62:AB:56:B3:C4:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01716A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5757F124F8BA11EF96BB8F6D762E951A.roa
Signing time: Tue 04 Mar 2025 05:34:28 +0000
ROA not before: Tue 04 Mar 2025 05:34:25 +0000
ROA not after: Tue 03 Mar 2026 05:34:25 +0000
asID: 984
IP address blocks: 154.199.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94570 (0x1716a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 05:34:25 2025 GMT
Not After : Mar 3 05:34:25 2026 GMT
Subject: CN=67c690e4-c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:4d:2b:07:21:04:a7:03:34:e8:41:93:a3:
bf:6d:e2:92:ba:35:7d:f7:23:ca:37:0c:01:f1:1b:
7f:d5:f2:a9:a4:c8:74:ea:81:62:cf:c3:59:08:aa:
b8:80:6a:91:65:22:f1:df:20:c3:0d:81:88:04:c4:
8a:7c:b7:de:22:36:3e:83:c1:a4:30:09:04:dc:53:
93:59:05:e3:10:10:fd:cf:be:d4:80:95:cc:5f:76:
b0:1e:d0:47:08:20:f5:0a:10:7f:e3:fa:1c:f8:4a:
bc:e1:aa:af:26:5f:ae:7f:d8:3e:c8:df:0a:b7:85:
4b:67:e7:b4:e0:a7:96:fd:0c:b7:08:99:37:92:aa:
9e:ba:2f:93:29:c2:9f:43:03:4f:2a:12:5c:84:cc:
66:4f:13:7c:a0:71:4b:91:a9:49:e8:f6:61:fb:66:
1f:6d:31:15:70:c8:2f:96:42:43:cf:dd:0b:4d:c5:
da:c0:c4:07:63:28:37:34:b3:15:2d:7d:95:b0:57:
a5:30:41:2b:27:2a:4b:d9:a2:4b:84:2f:49:26:e7:
78:be:b1:de:38:85:35:e1:1f:9b:57:64:b7:e7:9a:
04:6c:dc:e4:00:50:3c:e2:51:03:ac:a5:eb:40:84:
c7:2a:8b:cf:80:6f:bd:41:b6:33:2d:3b:90:0d:0e:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:3A:06:5E:2C:55:67:2A:B4:DC:E1:66:FB:62:AB:56:B3:C4:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5757F124F8BA11EF96BB8F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.6.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:be:3a:ea:65:03:ea:8b:8b:19:e8:74:3a:bc:41:08:25:
fa:3d:46:ad:96:80:cc:ad:ca:58:c1:93:18:cf:be:03:26:52:
b0:70:31:fe:06:8d:da:40:12:54:6f:64:4c:f8:ee:87:f2:57:
66:ad:cd:8a:67:e9:b1:e6:f4:38:6f:ee:66:bb:a0:2c:b8:c8:
72:48:00:21:2a:78:0c:3c:45:3e:b2:d7:89:9d:e7:31:71:e6:
88:88:01:aa:c6:30:9b:17:f0:91:dc:8e:f8:19:31:a0:2a:58:
74:26:1d:79:73:ef:ac:22:22:ed:e4:be:a8:c1:17:b2:2c:eb:
5d:96:58:95:12:24:fd:d8:d6:d6:72:99:67:92:bf:4f:86:a5:
36:d5:1e:d9:27:4e:31:2f:dd:79:ed:4e:bf:70:e3:56:70:1b:
41:76:fd:2b:b6:1e:0d:8f:68:08:ee:84:a0:30:09:6e:25:fa:
4e:5f:78:3a:da:af:34:e1:f6:4f:b8:f8:b4:e3:05:3f:e6:5f:
c9:32:8d:5a:a6:e9:7c:0b:10:96:eb:54:1f:3e:cf:3a:13:0b:
19:27:cf:70:4f:01:8d:78:66:4a:61:c7:a7:9f:91:23:17:e5:
08:57:66:6d:15:b3:53:8a:38:02:99:15:22:ce:97:c7:a6:1e:
12:80:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:37 2025 by rpki-client