Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A18442F61D11EFA33DC997762E951A.roa
File: 65A18442F61D11EFA33DC997762E951A.roa (raw, json)
Hash identifier: k6U688OXbV/puxl88sFsoORX6yC9QiRKm1RJl8FC2tE=
Subject key identifier: FD:86:E4:7A:41:B2:74:4C:E6:39:B6:AB:EC:4A:DF:9C:EF:84:23:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A18442F61D11EFA33DC997762E951A.roa
Signing time: Fri 28 Feb 2025 21:45:59 +0000
ROA not before: Fri 28 Feb 2025 21:45:56 +0000
ROA not after: Sat 19 Apr 2025 21:45:56 +0000
asID: 138915
IP address blocks: 154.90.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93271 (0x16c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:45:56 2025 GMT
Not After : Apr 19 21:45:56 2025 GMT
Subject: CN=67c22e97-db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:80:d5:9b:ff:d1:71:d7:bd:d6:25:31:72:
a6:24:e0:10:be:ba:47:ba:f8:19:8c:10:13:41:5b:
4a:d2:5c:1e:df:c0:d5:46:0c:30:9d:20:97:95:56:
52:bd:63:e8:86:1d:c1:93:03:13:38:b8:b1:03:67:
bc:b5:06:55:c8:79:d1:bb:60:2d:79:b9:4e:5f:0f:
f1:58:e8:33:7a:b6:25:ca:8b:cc:9c:72:ad:5f:3c:
1d:1d:01:f6:c3:01:c7:8a:2c:04:aa:97:7f:07:00:
c4:b6:e8:01:7c:65:c5:3a:a6:72:5c:e7:67:dc:ea:
ae:14:24:ed:1b:6a:64:f8:01:4f:d8:71:ec:ff:88:
c7:f0:36:99:d7:1a:78:b5:4b:3e:be:89:3f:6c:64:
e5:d8:46:dc:d3:1d:db:ad:29:14:8d:a5:38:14:be:
19:11:c9:8d:db:6e:3f:a1:56:c4:b2:74:e2:fe:74:
5f:f9:81:ef:b6:84:5b:a2:f2:ea:1f:a3:1a:d3:a9:
71:db:6e:75:6f:e6:53:24:8c:9f:14:bb:f0:6a:b8:
ea:76:1d:09:51:7a:62:f3:5e:c1:ef:50:59:e6:fe:
ef:3b:a3:43:f5:c0:72:dc:03:01:c0:c9:f0:ca:39:
46:f4:b9:72:4f:65:93:f8:32:cf:41:c6:16:2b:79:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:E4:7A:41:B2:74:4C:E6:39:B6:AB:EC:4A:DF:9C:EF:84:23:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A18442F61D11EFA33DC997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.34.0/23
Signature Algorithm: sha256WithRSAEncryption
28:90:95:1d:87:81:bb:f7:78:21:dd:6d:78:d5:9d:b8:04:d1:
da:a5:33:c2:c0:43:39:d1:5b:ee:c5:f9:d0:86:f0:2a:f9:f3:
73:67:d6:9a:c6:80:3c:93:70:b5:e7:10:9b:25:b9:82:7c:a4:
16:06:9c:0c:05:a2:5b:e4:a8:5d:cd:db:99:a1:d2:c1:8c:87:
f7:fa:1b:ec:83:fb:7c:c0:b0:71:ee:9a:b0:cd:53:92:97:5a:
e5:7d:e5:b9:d5:fa:fe:aa:f9:c6:11:1c:a5:b7:22:ba:66:c6:
f5:72:4f:7a:04:bd:a2:56:75:1f:a0:63:b7:9f:ad:b0:bd:d8:
7e:9e:1a:0a:4d:c2:0a:d0:23:7a:8d:c5:8b:59:92:47:a0:32:
1b:da:12:5d:22:1b:5c:4e:89:3e:fb:3c:8e:d5:3f:59:aa:1b:
10:ec:4e:1c:28:c2:eb:51:f6:7a:21:44:9a:49:49:ce:1c:4c:
eb:79:7f:6e:c8:44:6b:1f:ad:c7:36:f2:c0:ff:61:ef:38:e9:
66:d9:86:ed:5f:93:05:be:25:10:d2:83:d0:b4:3a:6b:27:30:
19:df:91:ac:61:fa:83:76:66:7c:b6:03:ff:95:16:a7:da:69:
d2:0f:31:77:05:56:9d:69:66:83:28:db:44:58:41:b3:7c:b5:
c4:23:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:07:17 2025 by rpki-client