Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA8E1B4DA2111EFA9CBA398762E951A.roa
File: 5BA8E1B4DA2111EFA9CBA398762E951A.roa (raw, json)
Hash identifier: VtXOKMCDY5BtGBexj9bPdgK7aD3XICUutBtJJ8zyobw=
Subject key identifier: 83:B5:9D:8B:BD:CF:50:27:6F:F2:67:E4:DF:56:0D:07:C5:D3:E3:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01440B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA8E1B4DA2111EFA9CBA398762E951A.roa
Signing time: Fri 24 Jan 2025 07:03:48 +0000
ROA not before: Fri 24 Jan 2025 07:03:44 +0000
ROA not after: Tue 13 May 2025 07:03:44 +0000
asID: 138915
IP address blocks: 154.205.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82955 (0x1440b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 07:03:44 2025 GMT
Not After : May 13 07:03:44 2025 GMT
Subject: CN=67933b54-8d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:d7:78:f8:15:bd:15:da:60:70:60:ba:e4:
b2:2d:3c:1d:3a:cb:38:4d:0b:fc:af:94:f6:f9:72:
c7:ca:91:66:7c:14:de:a9:82:16:65:4b:d1:31:58:
5d:5d:21:07:89:0d:ee:8a:f4:b1:de:8e:e9:0d:93:
0d:79:6d:a7:49:b9:0d:87:d6:97:c8:a2:c1:20:37:
b7:d2:f3:b8:bd:20:b0:23:83:29:b9:7f:1a:ef:ff:
ad:f8:66:bb:1e:87:d7:67:0d:31:bc:8f:d3:ee:1f:
57:d6:5b:c9:1f:30:4b:99:e1:b5:c0:b6:8a:17:8b:
23:91:4d:23:6d:ea:75:96:a6:4e:2e:59:07:79:cb:
00:63:20:62:ca:7d:84:dd:08:34:fe:28:70:ef:cf:
61:fe:d2:cf:56:4b:b8:57:7f:45:0d:1a:33:8f:21:
d0:68:3a:76:a7:06:a4:95:5f:4f:48:50:96:30:e4:
35:aa:fe:88:87:ee:fd:7d:64:d9:58:55:1d:c0:9d:
e1:27:f4:e6:fd:72:36:cd:d0:1e:3e:44:2b:01:23:
c5:86:3c:1e:e0:20:11:37:c5:2e:4f:5d:55:45:7a:
31:21:14:43:59:d9:4d:6b:29:fe:e5:29:0a:4e:ae:
72:fe:8d:87:86:c2:b5:b0:a3:24:88:21:e7:b9:82:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:9D:8B:BD:CF:50:27:6F:F2:67:E4:DF:56:0D:07:C5:D3:E3:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA8E1B4DA2111EFA9CBA398762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.129.0/24
Signature Algorithm: sha256WithRSAEncryption
68:26:83:00:e6:d4:bc:70:c3:3d:81:67:4f:c1:23:d8:3d:40:
3d:b4:ec:25:15:1c:f4:d0:04:f7:f3:df:16:96:c1:c6:c7:65:
8e:94:7e:fc:e4:e2:d3:a2:e9:3a:2e:66:55:b9:09:89:e5:48:
4d:97:b7:33:78:32:b3:29:2d:f1:8c:ee:64:d1:a6:da:33:ba:
89:83:b9:68:67:ba:46:93:68:e4:19:17:50:14:dd:d3:3a:77:
b3:1c:cb:53:c0:e4:03:c2:2a:50:28:e0:6e:14:17:b9:eb:4a:
c1:29:8f:c5:9a:d0:c6:cd:d5:4a:4d:19:d3:4b:7f:1c:16:55:
6c:f5:4a:fa:f5:3b:be:35:eb:0e:7c:e2:06:b2:fa:36:14:ba:
a1:ee:8c:90:29:a0:b6:74:49:ea:f9:06:4e:b3:88:8f:8f:ab:
f1:5b:be:89:c5:7a:e8:8b:91:07:07:d7:6e:17:1a:87:59:49:
03:4f:f7:0e:57:63:fb:97:25:82:df:f6:09:1c:5b:81:64:9f:
c4:dd:ec:6e:43:af:4f:fa:06:6b:ab:48:59:4c:62:1c:8e:14:
d6:56:d0:fb:45:7d:cd:17:a8:21:9d:be:7f:e6:fa:2e:bd:f4:
b2:65:0d:40:69:79:11:45:29:44:f7:1d:d9:19:92:aa:b3:b1:
1f:2c:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:48 2025 by rpki-client