Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64769D02F80F11EF8D23445C762E951A.roa
File: 64769D02F80F11EF8D23445C762E951A.roa (raw, json)
Hash identifier: /oy36bMKSVoV+SxSUkVVMjGYkrQqe1HYHy/7jTLJvko=
Subject key identifier: 40:66:40:DE:6B:BA:68:DC:20:3C:50:F1:1D:C0:56:12:48:0A:17:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64769D02F80F11EF8D23445C762E951A.roa
Signing time: Mon 03 Mar 2025 09:10:47 +0000
ROA not before: Mon 03 Mar 2025 09:10:43 +0000
ROA not after: Wed 30 Apr 2025 09:10:43 +0000
asID: 63139
IP address blocks: 154.94.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94124 (0x16fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:10:43 2025 GMT
Not After : Apr 30 09:10:43 2025 GMT
Subject: CN=67c57216-1320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:22:00:fa:af:dc:3f:47:03:96:2a:34:ac:
8e:5c:92:75:b5:53:65:0d:b6:56:0d:bc:16:00:66:
fc:f8:6f:26:5e:75:12:7d:60:4a:2c:19:c3:fb:5e:
8d:08:bd:a8:e5:ce:ca:1c:2d:e1:bc:33:15:46:94:
dd:bc:32:b7:b8:4e:81:f4:ac:03:c7:79:c7:ae:ca:
6c:64:7a:10:53:3f:8c:d4:7c:75:72:0c:3c:80:af:
43:bd:32:4e:6f:13:f2:30:08:c9:f7:6a:18:2f:d0:
c3:e2:22:15:a0:9b:7a:2a:31:54:fd:5a:85:88:0f:
9a:f2:56:09:2e:cb:b4:77:fb:66:66:ee:23:bb:4e:
14:be:4a:c9:31:b9:3c:85:e6:12:ac:40:cc:c6:51:
81:12:bd:c3:9d:17:06:48:94:56:1f:05:0c:49:80:
dc:94:de:08:e5:f3:23:03:6c:2d:36:93:8f:22:1a:
3d:d6:78:63:42:dd:5b:9b:6f:81:51:63:0d:48:68:
1e:2b:55:3e:52:02:39:b4:3f:a3:6d:3d:3e:62:0b:
bb:e0:e9:9f:13:8b:cf:97:7e:37:d3:e5:fe:15:fe:
01:c9:aa:78:17:9b:ad:0b:83:db:96:72:fa:59:62:
c3:b9:fc:c9:c5:15:a6:48:8f:36:a6:b3:32:a1:dc:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:66:40:DE:6B:BA:68:DC:20:3C:50:F1:1D:C0:56:12:48:0A:17:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64769D02F80F11EF8D23445C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.103.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cc:54:c7:b3:5a:2a:22:78:2d:22:c3:40:c1:77:7f:8f:01:
a6:ee:93:82:79:aa:71:f9:5b:92:8a:bf:fb:79:93:9d:6b:12:
7a:b7:4a:60:0b:7c:77:cd:7c:a8:d0:8c:dd:ad:f1:94:ed:b1:
50:36:c2:76:88:f9:31:db:7a:1b:ea:c8:96:e4:93:46:fc:e8:
19:85:00:75:91:1f:69:7a:17:88:98:4e:66:ab:ce:26:0a:6b:
7b:10:c4:25:6e:c3:0a:45:ed:38:22:3e:42:77:7d:87:7c:89:
a9:54:0f:0b:2c:d0:c8:c2:92:ab:bf:61:37:df:82:f6:73:48:
66:b0:8e:2c:0e:9b:16:36:df:98:a6:33:25:87:b0:f2:72:4b:
b2:f8:a8:5f:86:9b:2b:54:19:e4:97:b6:0d:aa:70:fe:6c:d4:
6a:7c:ae:72:02:9f:56:85:d1:92:fd:3a:87:80:41:25:0a:10:
e4:87:d5:e9:bb:4e:ff:19:5f:bd:21:a5:e2:51:2d:5f:b6:d7:
da:6d:3a:ec:2d:89:1b:61:e9:32:e3:54:1b:a6:44:97:c4:4e:
ee:58:4c:f4:82:53:e5:ec:39:a2:82:90:1b:d4:0e:e9:c7:d1:
e5:bd:f0:b0:73:02:a4:d8:6a:a9:c1:db:44:66:be:8c:4e:42:
9d:6c:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:32 2025 by rpki-client