Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6496EB98F35A11EFA2E5F69F762E951A.roa
File: 6496EB98F35A11EFA2E5F69F762E951A.roa (raw, json)
Hash identifier: ib+uhJLufbTAAq4ukRUT7Lu9p+Ch8/MNM+wOosxA/cg=
Subject key identifier: F9:00:AB:21:72:81:D4:7C:F6:1C:13:F5:F6:25:46:4D:22:F8:75:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6496EB98F35A11EFA2E5F69F762E951A.roa
Signing time: Tue 25 Feb 2025 09:25:03 +0000
ROA not before: Tue 25 Feb 2025 09:25:00 +0000
ROA not after: Sat 19 Feb 2028 09:25:00 +0000
asID: 17561
IP address blocks: 154.83.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89600 (0x15e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:25:00 2025 GMT
Not After : Feb 19 09:25:00 2028 GMT
Subject: CN=67bd8c6f-ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:af:73:5d:08:35:2e:03:57:3b:c2:e3:ae:
c4:03:60:52:c8:85:fd:64:ce:18:f6:a3:84:f7:45:
92:90:a4:9b:aa:05:22:da:6d:75:61:5a:4f:fe:9a:
a8:8c:ce:90:f7:7d:26:16:b1:dc:ac:00:39:cc:2d:
61:55:2f:10:7d:97:45:a6:75:c1:80:54:23:8f:42:
37:4b:32:5c:dd:74:00:b1:ae:0f:af:ae:bd:cb:97:
56:a5:cb:f5:7b:00:75:ca:b0:97:5d:39:96:f3:b2:
39:34:8a:1c:9a:68:a1:7e:37:d7:66:1f:84:ff:f0:
f9:d5:c9:a7:c3:1c:76:6a:f7:41:29:b3:de:5e:8b:
80:38:34:00:76:47:26:61:fb:6d:1e:49:aa:54:71:
88:6a:69:b4:e8:37:37:6f:91:f4:25:4b:2d:40:e4:
18:14:1a:bf:0c:4f:ad:0e:9c:39:bc:b3:f8:e1:82:
e4:8a:de:be:56:8b:42:a2:7a:43:f9:99:a5:95:dc:
f1:47:8f:57:09:e9:c3:bc:f8:58:53:ea:e1:93:e1:
82:29:f4:64:07:95:fb:98:f9:c7:08:ae:43:6a:43:
b3:8e:11:99:57:ee:4f:39:4e:c8:1e:b4:77:67:5c:
f7:81:fc:f5:d7:32:6d:0e:47:e5:68:76:1a:4b:f3:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:00:AB:21:72:81:D4:7C:F6:1C:13:F5:F6:25:46:4D:22:F8:75:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6496EB98F35A11EFA2E5F69F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ea:0c:8e:e4:a4:6e:55:55:c8:07:ec:5c:0d:91:b2:67:53:
f1:38:c4:66:91:a1:da:6e:38:58:1c:f2:51:c9:cd:fd:74:ba:
bf:eb:82:10:06:de:8f:0c:62:d8:41:c7:24:1c:1d:fe:3d:7d:
15:36:cf:90:07:2f:8b:70:51:23:9b:56:61:e1:cf:97:1b:3c:
ad:a1:f0:58:a5:ce:d1:8d:2c:c6:ea:ad:2f:e1:df:5a:7f:3e:
f7:01:f9:64:b3:ee:ec:c8:ad:e7:a6:05:db:80:54:c5:27:36:
12:52:88:fd:d1:8d:17:65:ad:9d:57:9b:19:0e:2a:a5:7c:66:
11:fb:36:90:6f:b6:a2:df:ca:04:a5:6b:a8:99:d0:47:c8:82:
3b:d9:e7:1f:56:6e:8e:e9:cf:cb:f5:ba:56:88:b4:90:08:63:
d3:f2:d9:35:4c:84:fe:90:78:b3:f8:86:a4:ea:d8:8c:57:91:
d7:0a:e8:38:99:6d:da:8d:9d:f4:56:28:ed:27:7a:d8:3e:d6:
94:45:37:cb:2e:a0:b4:da:dd:15:4a:96:e5:fe:30:13:7f:bb:
bd:17:90:f7:e9:c5:46:91:4a:19:94:ab:f9:9e:c3:cf:c4:d6:
6d:8b:a4:20:f7:af:7f:e7:c6:76:73:74:4e:4c:0d:09:6c:65:
5c:36:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:33 2025 by rpki-client