Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4A4F12C93711EF92FA1A98762E951A.roa
File: 5D4A4F12C93711EF92FA1A98762E951A.roa (raw, json)
Hash identifier: 5eb8FGilB14VGgMfyFeKz8aUu7aLi6O1bf2wh1aZAiQ=
Subject key identifier: C0:6B:06:2C:CC:16:EC:B1:CE:61:8F:52:80:3B:99:88:F4:1F:26:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4A4F12C93711EF92FA1A98762E951A.roa
Signing time: Thu 02 Jan 2025 18:28:30 +0000
ROA not before: Thu 02 Jan 2025 18:28:26 +0000
ROA not after: Sat 13 Dec 2025 18:28:26 +0000
asID: 984
IP address blocks: 154.222.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78813 (0x133dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:28:26 2025 GMT
Not After : Dec 13 18:28:26 2025 GMT
Subject: CN=6776dace-49f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:97:f5:07:92:ee:46:85:b2:ea:6f:f3:fc:
c3:78:d6:82:8a:05:cb:72:52:24:97:84:01:25:ba:
92:77:40:b5:58:b9:74:0a:f1:84:ec:8b:64:eb:82:
cb:5f:e9:5b:b6:2e:46:c0:10:e9:c0:82:9a:0a:1d:
ef:13:a8:97:05:c2:1a:b6:b5:67:ee:f2:f3:a4:3e:
ed:24:01:ad:e3:71:67:a6:98:dd:75:69:26:54:30:
5c:d5:8c:51:56:61:61:e3:49:e8:51:8f:8b:ac:50:
9d:6b:fa:ad:ef:7f:1b:7f:f6:7b:11:96:00:9a:fe:
ec:0b:9b:a7:c4:75:de:63:b8:a3:23:79:ba:c1:79:
28:78:67:3c:23:3b:75:05:49:25:db:b2:67:f0:b1:
5c:a5:c2:32:b7:e6:8b:5c:3f:ce:b7:04:39:e7:e8:
0e:5a:51:1b:f0:4b:70:03:0b:90:1a:fb:db:48:02:
0e:1a:60:cc:77:68:81:ca:26:4a:67:79:d5:98:12:
1b:8a:bd:1c:76:93:90:d5:d1:7d:a2:20:43:d9:f5:
f8:c9:65:94:35:1a:58:73:dc:ad:4f:82:99:a8:c0:
57:a2:9a:31:d3:77:90:55:71:78:fe:37:1c:de:c3:
f1:af:65:e4:12:25:d7:3b:2c:5b:d1:59:42:c2:f0:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6B:06:2C:CC:16:EC:B1:CE:61:8F:52:80:3B:99:88:F4:1F:26:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D4A4F12C93711EF92FA1A98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f0:41:7a:22:b8:4d:9d:e3:a2:ea:18:3e:07:2f:37:1c:8e:
25:83:a8:bf:f4:38:f1:48:0a:5b:99:2b:ef:d3:9a:75:a3:4a:
d9:76:85:a2:91:c4:9e:b3:67:11:7d:f5:ce:fa:39:60:06:bc:
ce:7a:f0:8e:d3:a3:52:ca:ef:71:9a:03:b8:b6:09:31:d2:60:
18:76:7d:d7:d1:89:c1:42:3e:18:68:a0:3c:fb:2e:c1:00:89:
96:70:8b:fa:5f:62:0e:9a:e9:b2:6c:8d:4f:ca:a8:ad:bf:1b:
68:ba:58:81:7f:b2:b2:c0:4b:23:f2:c6:96:5f:99:16:0a:c0:
6c:90:ef:d7:ee:90:8f:c1:cd:61:24:13:e4:46:0d:7b:d5:a5:
5e:dc:ad:ed:bb:d7:5e:49:3a:2d:6e:3f:01:88:70:7e:e6:77:
d1:89:f0:97:5c:7f:94:62:06:ba:ee:c6:f7:2e:93:f3:9c:6e:
d2:1c:36:58:5e:1f:02:31:db:4b:5e:99:02:39:18:ff:fa:35:
c2:a3:a9:5b:0c:de:69:73:d1:b5:e6:dc:5b:31:c1:a8:bd:07:
ec:5a:de:cc:51:ff:28:41:09:4b:70:da:90:10:be:72:74:57:
a0:0b:64:f1:f2:0b:f2:8b:fe:9d:3e:0f:61:1b:1e:f6:b7:08:
90:31:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:04 2025 by rpki-client