Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58532908F45111EF8FAEA541762E951A.roa
File: 58532908F45111EF8FAEA541762E951A.roa (raw, json)
Hash identifier: kGUSbBUB247q8/sH0ZlP/qyBUwgf2A2wGq/D2VSYSp4=
Subject key identifier: 84:01:8F:F0:89:2C:DC:CC:59:F4:EE:93:95:92:95:8D:21:34:A4:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016487
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58532908F45111EF8FAEA541762E951A.roa
Signing time: Wed 26 Feb 2025 14:52:48 +0000
ROA not before: Wed 26 Feb 2025 14:52:45 +0000
ROA not after: Thu 19 Feb 2026 14:52:45 +0000
asID: 984
IP address blocks: 154.210.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91271 (0x16487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:52:45 2025 GMT
Not After : Feb 19 14:52:45 2026 GMT
Subject: CN=67bf2ac0-7758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:58:0b:f0:cd:ea:3e:57:5c:f5:c5:8e:1f:
d8:06:01:34:e2:3d:75:4a:13:dd:39:45:b8:76:75:
12:42:d0:e6:76:a4:af:43:e6:c3:fe:f9:d1:f7:18:
6b:bc:aa:be:f5:a2:0d:45:9a:68:f2:bb:b0:5d:1f:
8f:16:50:d7:0c:7f:33:b8:8c:e4:48:33:49:a3:ef:
23:71:78:77:7b:cc:e0:89:d1:7b:76:2e:96:b6:0c:
96:b6:14:4c:17:d8:0e:4a:fb:e7:d9:18:ed:91:4f:
4c:f6:45:d2:8c:06:2f:e1:d1:0e:f7:60:6d:60:23:
d8:53:f6:dd:bc:0f:a7:33:83:8b:a1:47:7e:1f:e4:
53:e6:61:3f:6c:28:6e:88:03:2b:3d:a3:b5:76:c5:
2d:c7:38:55:67:82:f0:21:21:48:ab:88:84:44:1f:
6d:37:15:95:f2:fb:bf:b2:41:b5:76:14:13:d4:5c:
35:e2:ad:e6:c6:bf:13:32:74:30:f5:bd:ff:87:6c:
af:4a:78:06:94:5c:50:ab:12:48:50:10:da:00:52:
94:c0:30:13:90:7d:dd:8a:a1:2f:2d:14:dd:d0:dc:
d2:83:1c:ad:7f:67:6c:e0:00:cf:0b:8c:c6:96:c1:
d8:50:12:05:95:e6:1d:11:19:87:19:fe:bd:fb:2f:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:8F:F0:89:2C:DC:CC:59:F4:EE:93:95:92:95:8D:21:34:A4:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58532908F45111EF8FAEA541762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d5:c3:bf:33:93:55:fd:77:fd:b6:ec:eb:26:10:b8:61:0d:
26:b0:6d:57:9b:12:4a:3f:b8:33:dd:c3:d9:aa:95:d5:34:0c:
ef:54:5a:10:f1:ef:a3:0a:03:6a:31:3d:de:c1:0e:d8:cc:af:
d8:f5:89:1e:14:35:0e:2c:87:4b:1d:48:45:d7:31:3b:8e:1d:
27:4f:16:77:e5:85:dc:ba:7f:00:5a:ea:c7:29:5f:c6:f4:3c:
0c:fa:e7:d9:1b:72:28:9f:a8:d3:cd:ca:c6:c1:00:e0:38:bb:
a9:9d:2f:27:7f:c8:11:64:b1:11:de:86:21:e5:cb:50:7c:41:
c2:bf:a8:84:4f:a7:40:d1:06:11:4c:54:a3:90:6b:6f:6d:e0:
31:5a:c0:20:e4:d7:cb:06:11:43:9c:22:3d:cb:ab:a9:c7:b3:
44:55:6c:73:c2:25:df:18:f3:81:5d:d0:1e:d8:fb:98:6f:86:
7d:8e:d9:45:12:f2:be:2f:d6:f4:ad:61:ea:f1:1e:1c:62:f2:
59:cc:fb:a9:73:45:5b:6b:84:75:d7:56:2e:07:b3:21:f6:7a:
5a:84:b6:b7:33:66:e5:6e:e9:8b:2c:8f:a3:df:99:77:3b:a3:
4c:08:b5:c7:59:16:c9:02:15:01:93:c6:ed:03:c2:94:d6:da:
82:2b:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:50 2025 by rpki-client