Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F45F50F82E11EF8DEF14AF762E951A.roa
File: 61F45F50F82E11EF8DEF14AF762E951A.roa (raw, json)
Hash identifier: CmLwlC0b695xSDurA4uNnKbg9eKnIAM5Ml1iGauAV6s=
Subject key identifier: 94:0F:77:76:8E:AA:62:89:47:8C:1D:FA:CE:B2:6D:2B:DC:77:8C:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F45F50F82E11EF8DEF14AF762E951A.roa
Signing time: Mon 03 Mar 2025 12:52:37 +0000
ROA not before: Mon 03 Mar 2025 12:52:33 +0000
ROA not after: Fri 09 May 2025 12:52:33 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94385 (0x170b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:52:33 2025 GMT
Not After : May 9 12:52:33 2025 GMT
Subject: CN=67c5a615-7f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:96:77:44:25:0a:21:9b:09:22:83:1a:28:
a3:86:e8:76:ff:ec:46:fe:81:ed:c2:47:20:fc:a9:
31:4d:6a:59:28:ed:5a:3a:7f:00:68:55:34:a4:ff:
82:f5:f7:2e:03:b8:c3:f1:1f:d2:15:06:bb:94:d6:
74:ee:1d:ce:28:f6:ea:2a:d0:64:70:3d:08:4c:02:
c2:0f:68:da:87:e3:a6:23:db:38:34:06:1d:60:15:
b1:c7:ba:4d:5e:60:31:94:07:45:f7:c0:19:29:4a:
1b:1c:2a:57:30:4a:ab:45:42:42:41:3f:da:a5:4d:
ef:f6:cd:33:eb:dc:5c:b6:49:1f:2e:a6:7c:8c:52:
d6:9f:2b:c7:f6:de:4b:9c:5b:6a:67:3c:41:00:e0:
35:38:22:18:dc:e4:99:7b:5b:54:ff:19:ae:bb:07:
b6:e0:1e:59:4e:84:36:f4:7b:e1:e4:a7:9f:9c:10:
d5:fc:06:be:be:aa:8f:4b:38:a3:c5:c7:d4:62:19:
71:9f:24:78:a7:09:a8:5a:24:b1:f8:a0:7c:43:64:
ea:04:9d:0f:01:3d:21:09:54:c9:66:a0:0c:4d:cf:
00:37:dc:0e:71:ff:9a:aa:ed:f8:67:50:60:f8:2d:
28:5e:17:7b:8f:83:8c:8b:54:24:7e:8b:dc:fd:65:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:77:76:8E:AA:62:89:47:8C:1D:FA:CE:B2:6D:2B:DC:77:8C:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61F45F50F82E11EF8DEF14AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
1c:35:50:61:e4:b4:f0:e0:f8:6d:7c:77:a0:b1:44:67:ec:50:
8b:9d:de:8b:ef:16:f2:db:da:23:be:1c:90:d1:b3:4c:14:90:
bc:c0:69:5c:40:4d:08:92:22:4b:4d:86:70:7b:92:2c:09:8e:
03:62:df:1e:82:c4:95:4c:68:f6:aa:19:38:dd:83:7f:b2:db:
b7:ed:d7:8e:bf:ca:70:cb:4a:ec:c3:d5:29:b0:72:a0:5d:a7:
0a:b4:65:d6:49:05:cd:05:6a:be:2b:4b:af:8a:a1:fe:53:ea:
c3:db:43:08:50:6f:c6:99:09:78:dc:12:61:7f:9f:8a:11:50:
7d:dd:ac:4d:19:7f:c4:c8:0c:1f:fb:58:79:b2:f6:9e:59:c5:
82:89:eb:27:25:2b:90:63:eb:0c:a7:ad:9c:8c:77:e7:56:c4:
0d:b3:69:4e:15:4c:ec:3d:a0:49:52:44:c7:f9:af:7e:72:43:
22:20:e8:3f:b2:c2:38:3c:b0:14:f0:95:19:64:d9:72:3b:43:
e2:60:42:59:ba:46:61:1c:eb:8e:88:ce:5b:79:8d:b9:3c:03:
4d:74:5b:33:dc:a8:bf:9d:a3:11:d7:25:ee:de:6e:63:19:f0:
b8:d2:e7:a2:0f:da:a6:5c:93:49:5e:72:d0:55:18:67:c2:c8:
a2:ec:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:05 2025 by rpki-client