Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A826D6C8A811EF86FE4888762E951A.roa
File: 61A826D6C8A811EF86FE4888762E951A.roa (raw, json)
Hash identifier: FvMPMfVYe+jvip+FVMhL6/r0gquzMeqrVmUmNnLiCTg=
Subject key identifier: C1:5A:43:5E:4A:E3:5D:5D:16:6C:84:17:56:3D:41:B2:C4:57:AB:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01315E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A826D6C8A811EF86FE4888762E951A.roa
Signing time: Thu 02 Jan 2025 01:24:59 +0000
ROA not before: Thu 02 Jan 2025 01:24:55 +0000
ROA not after: Fri 12 Dec 2025 01:24:55 +0000
asID: 984
IP address blocks: 154.220.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78174 (0x1315e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:24:55 2025 GMT
Not After : Dec 12 01:24:55 2025 GMT
Subject: CN=6775eaeb-4129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:30:7d:82:41:fa:f1:a4:b5:cc:4b:e1:d0:
a9:6c:8a:31:e5:b1:a7:58:05:0b:93:3a:6f:70:1d:
fa:2e:f3:d0:36:72:6f:81:2b:9f:e9:5b:23:8b:92:
b6:2f:cc:67:47:dc:d9:c8:e0:65:bd:59:58:1b:38:
5a:17:2f:38:05:56:88:1b:8c:a1:17:ad:73:98:2a:
a1:b0:82:1e:6d:61:d6:48:28:95:14:d7:f0:5d:7e:
08:ad:05:64:db:24:0f:36:a8:7b:b0:44:5d:0d:2d:
0c:9f:7d:b0:4e:50:c3:c0:d2:85:5b:e8:36:0a:ef:
47:01:7b:72:88:13:54:da:74:ff:e2:e2:4a:2b:d7:
cc:a5:74:74:45:3d:92:82:c4:58:67:54:50:15:8a:
fc:c5:d4:fb:27:5f:43:2b:00:e5:bc:56:44:65:0c:
80:db:5d:29:e8:ff:e6:f9:70:f7:1a:25:b0:01:9b:
b9:c1:59:f0:e7:0f:95:d7:08:23:be:05:11:c3:69:
55:02:9d:3d:55:06:26:b2:88:52:57:52:9a:6a:a9:
1c:70:bb:e9:7b:ac:5b:8f:c9:fb:ba:5b:c0:93:18:
53:ec:24:13:65:13:4b:c4:f6:c4:ee:cc:79:16:f4:
2c:c0:b9:53:5d:b6:13:5f:b2:6e:25:69:1d:6b:cb:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:43:5E:4A:E3:5D:5D:16:6C:84:17:56:3D:41:B2:C4:57:AB:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A826D6C8A811EF86FE4888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:69:51:55:af:7e:1b:81:98:70:38:41:7c:80:a9:6a:8a:29:
b9:e6:34:36:0a:71:67:81:e2:ac:a0:ea:9f:65:23:91:ae:f9:
28:2d:24:0f:0a:86:10:e9:ff:3a:72:50:6f:8a:c6:04:57:68:
aa:59:e7:84:22:1d:4d:40:67:a9:2e:c4:3c:2b:6a:13:c0:a1:
ef:f3:e0:d6:5d:79:db:74:5d:a5:82:bb:2b:e5:ad:37:d7:1b:
56:97:b7:c2:f6:c5:a8:1b:d0:5a:4f:83:80:33:c4:8d:88:c5:
9c:69:d3:a4:16:e3:e3:0f:d2:e5:16:64:01:cd:67:3e:41:ef:
e1:db:dc:1f:0f:2d:36:7c:af:e4:f1:9f:cc:cb:15:fc:17:af:
79:c5:9e:20:76:c7:97:01:30:dc:b0:f8:db:12:50:38:cf:bd:
90:f1:dc:0d:2b:73:8f:b8:eb:5c:9c:2e:d7:ed:4d:0b:8c:0d:
92:77:ed:13:f3:e1:bf:9a:7d:34:5c:49:54:e8:10:ce:33:ab:
17:6e:e8:5f:13:ef:e4:7d:d4:ea:42:fe:f0:73:49:d8:73:50:
21:83:1e:a4:ac:7c:79:e6:8c:b6:b3:00:21:a9:7c:97:e9:ff:
d1:a3:69:ee:12:aa:6e:75:a1:89:df:b6:c2:82:90:8d:07:17:
33:6f:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:34 2025 by rpki-client