Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B647F02F8E311EFB20C7E80762E951A.roa
File: 5B647F02F8E311EFB20C7E80762E951A.roa (raw, json)
Hash identifier: Yo8tDk2Acn9h+frsWUBzVAdtb5tVvuT0MNI0FZnJpis=
Subject key identifier: 7E:4D:2B:F6:44:A7:98:17:7E:21:21:91:A3:2E:9B:DA:A2:A3:96:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B647F02F8E311EFB20C7E80762E951A.roa
Signing time: Tue 04 Mar 2025 10:28:05 +0000
ROA not before: Tue 04 Mar 2025 10:28:01 +0000
ROA not after: Sun 06 Apr 2025 10:28:01 +0000
asID: 203020
IP address blocks: 154.217.39.0/24 maxlen: 24
154.217.40.0/24 maxlen: 24
154.217.41.0/24 maxlen: 24
154.217.42.0/24 maxlen: 24
154.217.43.0/24 maxlen: 24
154.217.44.0/24 maxlen: 24
154.217.45.0/24 maxlen: 24
154.217.46.0/24 maxlen: 24
154.217.47.0/24 maxlen: 24
154.217.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94640 (0x171b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 10:28:01 2025 GMT
Not After : Apr 6 10:28:01 2025 GMT
Subject: CN=67c6d5b5-53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:a3:41:fb:06:56:8c:5c:ac:dd:f8:33:cb:
9d:c3:8e:9a:4c:cf:2e:ab:62:bf:36:ca:06:82:96:
de:dc:28:33:83:15:5d:03:59:54:1f:dd:76:22:79:
6a:40:cc:76:6a:64:ce:f3:51:09:15:02:58:79:46:
25:79:78:10:fa:06:d1:17:26:a5:72:d1:73:69:ad:
60:95:23:0f:86:de:83:ba:52:65:6b:36:5d:88:b6:
10:c9:65:2e:ce:00:bc:66:62:1a:10:36:e4:4f:04:
df:fe:b6:28:7b:8f:d1:23:dc:05:53:90:94:ec:7d:
c6:05:24:26:2d:2a:ef:92:55:6e:ca:7c:3a:99:2d:
6a:82:db:44:37:3a:a7:77:97:2c:8f:ba:25:6e:18:
1f:d0:db:bf:7f:c2:42:d5:71:60:4e:5c:1d:dd:bc:
5e:9c:26:bf:93:3b:19:86:5c:62:6b:07:74:4b:f7:
18:37:52:ec:75:6c:4a:00:e3:96:43:98:50:6e:c9:
58:86:ce:de:be:1c:b9:98:c4:3c:44:43:16:87:8e:
07:a0:cd:42:29:51:28:3b:41:04:ee:23:02:e5:a4:
06:da:ea:64:64:e4:1f:72:c1:fc:cc:1d:5e:0b:16:
d7:b9:46:db:be:a2:de:7e:cf:ed:2e:81:69:32:01:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:2B:F6:44:A7:98:17:7E:21:21:91:A3:2E:9B:DA:A2:A3:96:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B647F02F8E311EFB20C7E80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.39.0-154.217.48.255
Signature Algorithm: sha256WithRSAEncryption
9c:b2:a0:4c:3d:48:c3:9c:72:6c:3f:d3:7b:c7:ac:e0:89:e1:
dc:b9:86:ec:6d:09:70:a4:ab:9b:66:39:69:0c:26:67:9c:64:
30:97:74:ad:9a:63:4f:e9:6f:b2:74:b2:b2:14:87:80:8c:d0:
d7:bf:32:23:b7:bf:24:14:ae:a9:23:48:23:77:64:21:43:67:
29:e8:3c:5d:d4:aa:0a:af:75:21:4c:0a:a6:7a:42:02:fc:61:
c7:e2:10:5d:e4:72:f8:08:f8:62:fa:57:90:87:f9:41:19:c3:
27:a7:96:12:54:14:59:3f:99:a3:b2:93:26:1c:a8:40:72:da:
f0:11:e6:f3:f2:6a:39:a6:2f:f5:b6:fb:11:7d:cd:6d:b7:58:
89:ff:85:46:52:e1:cb:0c:6e:2f:56:9a:88:78:0a:81:02:e3:
b4:39:13:03:e9:a9:67:e0:98:4a:3d:3c:22:d1:4d:3f:dc:9d:
65:0f:d4:a9:2d:96:dc:66:7b:a4:b6:98:a0:e8:25:25:a6:0a:
e9:3b:00:84:88:7c:5c:76:ca:ec:16:f5:60:55:11:1f:61:f0:
c8:d5:f6:91:99:70:41:bc:79:8e:a3:f9:0c:19:2b:7d:e9:0e:
0c:67:3e:05:24:1d:43:7f:4f:d9:b1:67:59:da:de:90:ee:93:
f3:d0:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:02 2025 by rpki-client