Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBD0114C92511EFAAE0ADA8762E951A.roa
File: 6BBD0114C92511EFAAE0ADA8762E951A.roa (raw, json)
Hash identifier: yR7RzhiSeWWvvr6qM8s6lwenRcAvUyRF4G5WPcoAdvg=
Subject key identifier: B3:7D:27:91:3C:86:8F:7F:7F:FB:3B:A1:57:2D:14:25:F2:A2:89:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01334F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBD0114C92511EFAAE0ADA8762E951A.roa
Signing time: Thu 02 Jan 2025 16:20:03 +0000
ROA not before: Thu 02 Jan 2025 16:19:59 +0000
ROA not after: Mon 13 Dec 2027 16:19:59 +0000
asID: 17561
IP address blocks: 154.222.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78671 (0x1334f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:19:59 2025 GMT
Not After : Dec 13 16:19:59 2027 GMT
Subject: CN=6776bcb3-e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9a:5d:b7:40:a2:a3:6d:d8:d4:29:3e:26:a5:
00:a8:28:50:f6:fe:09:49:b2:75:f3:a3:fd:8b:a1:
91:58:1d:3c:76:fc:a6:80:b2:7d:f7:6f:8b:0a:ef:
13:1d:97:37:90:1f:f2:9e:56:28:1f:b9:f9:d2:ed:
bb:1f:b2:1d:17:20:9b:76:9d:87:5f:02:19:cd:41:
60:b8:bf:d9:94:04:85:24:d3:6f:1a:ae:95:d7:de:
25:36:d0:cc:bb:c5:0b:65:2a:59:fd:69:bf:f5:61:
12:e6:af:70:b5:de:1b:fc:03:57:6d:02:33:bc:e4:
a7:27:c0:e3:70:c6:2b:7c:98:be:ee:22:af:b1:c0:
56:84:30:26:52:2e:06:d0:db:60:e4:32:d1:3d:50:
f1:90:e5:5e:84:82:eb:8e:c6:6b:ce:8c:44:ed:61:
28:14:7c:a3:3b:d2:cb:23:0f:83:21:b0:b5:12:61:
9b:4e:aa:0f:62:96:2c:a2:d2:a6:6f:51:5f:65:15:
58:ca:ae:9e:56:15:0d:ce:74:ef:45:52:c8:38:35:
65:52:a8:6b:b4:7a:1e:fa:7a:12:a4:8f:a8:da:b0:
84:69:65:1f:de:37:a4:b1:91:09:08:ad:8e:a0:4c:
d6:75:69:5e:79:90:f1:45:f9:bb:25:71:da:40:e0:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:27:91:3C:86:8F:7F:7F:FB:3B:A1:57:2D:14:25:F2:A2:89:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBD0114C92511EFAAE0ADA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.111.0/24
Signature Algorithm: sha256WithRSAEncryption
93:72:e4:07:cf:03:24:1e:32:ff:66:f7:ce:50:a8:9e:6e:db:
6e:16:da:34:bf:60:89:df:59:2d:a3:e7:87:b8:94:a8:52:3f:
bc:15:d6:e0:27:8e:04:55:62:03:a0:6b:5c:33:a5:75:d1:6d:
fc:5f:d9:84:59:9e:95:4c:80:1a:ee:de:07:a6:67:c3:f2:a3:
16:ab:a9:a1:77:b0:fa:eb:41:43:7f:e4:28:f9:12:2e:e1:bc:
7a:9a:21:5b:72:f6:3b:26:95:b7:29:e7:c6:28:70:45:cc:79:
83:f3:49:e9:ec:00:6f:88:14:2a:f0:97:85:be:6a:c7:4e:35:
60:f8:de:dc:4a:d2:05:b4:6b:a8:88:21:35:8e:28:36:6b:0e:
50:c4:b1:5a:c1:6b:d2:7d:05:59:8e:f4:a3:a4:e1:e6:1d:5e:
08:e3:cb:97:53:a2:03:f0:63:12:4a:fb:e4:4a:47:9e:b9:ad:
98:ff:f3:86:da:d0:89:16:a9:65:31:d5:58:fd:c1:a4:fb:7d:
9f:6b:bb:23:c5:83:11:3a:7f:ee:1d:fd:5e:ca:27:20:dd:b0:
21:fa:f7:ab:fa:52:81:8f:82:a8:c0:cc:00:55:71:34:72:87:
35:1f:85:78:cd:96:4c:87:77:0e:d1:10:99:15:d8:e6:e0:1c:
41:9f:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client