Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F08F32FB3911EFB6003649762E951A.roa
File: 63F08F32FB3911EFB6003649762E951A.roa (raw, json)
Hash identifier: mMNoyQCI4vYKLMY6GYNGfDrHInBYTRmgANcvh1fq/gM=
Subject key identifier: 8A:60:C3:C4:8A:CA:0F:3A:6E:89:BB:E8:2D:51:90:66:CD:9A:4E:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F08F32FB3911EFB6003649762E951A.roa
Signing time: Fri 07 Mar 2025 09:48:58 +0000
ROA not before: Fri 07 Mar 2025 09:48:54 +0000
ROA not after: Tue 08 Jul 2025 09:48:54 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94963 (0x172f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:48:54 2025 GMT
Not After : Jul 8 09:48:54 2025 GMT
Subject: CN=67cac10a-0d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:4a:95:89:a8:55:92:67:99:e1:91:82:ce:
61:da:61:c1:12:7c:24:b3:aa:4d:9f:f7:39:04:dc:
ea:5f:88:46:b5:d8:d5:c0:37:a1:ef:87:9a:7a:10:
0d:89:8d:b4:89:29:e1:de:25:b7:3b:84:7b:32:31:
4a:87:ff:f6:2f:aa:d7:eb:c9:d4:57:3e:06:70:bd:
12:45:6e:53:67:1d:8a:84:3b:7b:d8:86:46:06:5f:
6e:5e:d1:6e:8d:7d:cc:10:ca:37:32:ee:c6:37:7e:
fd:34:ee:25:a2:22:e7:dd:d1:1f:32:96:05:a3:56:
65:c4:16:a1:80:5d:26:86:ec:7c:9f:2b:70:6f:18:
3e:5d:f2:5a:60:75:d2:43:d1:b1:27:07:97:85:c3:
92:21:93:cc:64:b4:f1:3e:e5:78:0d:38:9f:79:9f:
ec:d7:67:62:d7:d3:b8:59:5b:b8:e4:a5:7e:7d:d5:
25:aa:85:08:aa:c1:39:52:e4:db:e9:d8:16:2a:d4:
12:de:a8:d6:45:a6:b0:f1:dc:0b:63:ff:7f:2c:00:
8a:1b:23:3e:d9:96:c7:f5:28:f7:aa:ee:25:00:c9:
97:75:86:f9:f9:10:41:5a:db:d7:f4:34:13:24:70:
f7:ac:ec:86:d0:4f:07:40:f3:bb:23:02:d2:54:11:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:C3:C4:8A:CA:0F:3A:6E:89:BB:E8:2D:51:90:66:CD:9A:4E:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F08F32FB3911EFB6003649762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:50:4b:ce:45:d3:4c:d3:46:dd:c1:da:27:6e:95:5c:8e:2c:
e8:e7:3e:b9:9c:0e:92:cd:7c:41:6c:73:0a:ff:f5:ae:d9:50:
33:c9:0f:d2:8f:f6:e9:78:26:54:bf:39:06:c0:13:d2:a0:20:
b1:f7:4c:a2:80:a6:e8:3d:71:33:b1:40:5f:f2:97:3d:9e:48:
66:57:e9:4e:61:73:5b:64:5a:3b:62:ab:58:81:f5:db:f8:10:
aa:7d:77:50:e0:6b:1c:2a:30:c9:98:e0:6c:5f:4f:0d:e5:5b:
a4:61:32:77:6e:e1:f2:5f:1e:0f:f9:7d:20:74:79:98:93:17:
88:c7:04:c3:d5:15:83:ec:93:7b:33:35:73:1b:80:a3:67:4f:
1a:59:eb:f7:1e:88:45:69:1d:30:1d:16:a5:64:79:b5:2a:d8:
93:36:f4:e8:53:02:d4:f7:a1:82:e0:bb:29:fb:99:b9:bb:88:
6a:11:08:a2:f1:1d:3e:be:b0:c4:54:dd:d5:45:85:dc:96:8b:
7b:71:34:6d:e1:4a:59:2b:6d:44:00:5e:a7:b6:84:41:ba:86:
ac:01:40:0a:dd:93:da:b0:b6:93:21:f4:16:83:a3:ae:f9:76:
ac:33:92:06:e7:b2:35:35:dd:88:b6:3a:96:f3:c7:aa:34:cc:
98:ed:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:06 2025 by rpki-client