Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D695D28FF1C11EFA0E217BB762E951A.roa
File: 6D695D28FF1C11EFA0E217BB762E951A.roa (raw, json)
Hash identifier: PQlwIsuwrOB1e0LAHi9S4N12d1og4V2x6bI2Q2k/Qxk=
Subject key identifier: 7F:ED:9A:2A:69:7D:D0:AC:9C:55:E1:69:8C:B8:31:56:35:9E:02:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D695D28FF1C11EFA0E217BB762E951A.roa
Signing time: Wed 12 Mar 2025 08:31:43 +0000
ROA not before: Wed 12 Mar 2025 08:31:36 +0000
ROA not after: Sun 20 Apr 2025 08:31:36 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95155 (0x173b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 08:31:36 2025 GMT
Not After : Apr 20 08:31:36 2025 GMT
Subject: CN=67d1466f-40cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:b3:8d:8e:c4:41:26:05:73:cf:68:21:3b:
e7:ae:ba:8f:d0:26:df:d2:ec:a8:de:19:8d:5e:60:
1d:73:e9:66:e9:5a:a2:81:71:4d:33:9a:c8:8d:15:
18:08:c4:83:17:78:cb:04:c1:05:fd:b6:df:2b:c4:
e9:c9:76:ce:03:2c:82:aa:4e:8e:10:17:36:a8:f7:
57:19:f2:ab:0c:87:18:ac:8b:8e:a4:d9:4e:4b:97:
0f:c3:02:5c:ed:aa:e3:33:1a:2a:7c:2c:24:28:a4:
a3:03:73:b4:1b:f6:82:c5:17:9c:09:95:34:54:85:
d0:9f:e9:c7:dc:6b:51:4c:a4:48:79:31:25:30:42:
a0:71:36:a8:02:33:03:69:98:25:9d:b4:52:bb:fc:
b5:28:1a:86:ea:d8:d5:9f:38:7a:c3:30:93:4b:d3:
a6:aa:38:93:40:38:ad:71:1a:10:e4:da:67:a2:dc:
4e:b4:a8:d2:71:a2:3d:db:f1:51:22:e6:8f:2e:b9:
6b:df:f5:dc:74:ef:ff:89:38:80:8e:73:d1:6c:7c:
3a:7c:3d:84:ac:58:2c:56:c5:32:1f:97:f3:08:ef:
f8:31:30:99:83:3d:bb:23:09:42:84:7e:4b:b7:fa:
02:2d:d4:e1:93:02:40:80:96:b9:7e:20:fb:bd:59:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:9A:2A:69:7D:D0:AC:9C:55:E1:69:8C:B8:31:56:35:9E:02:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D695D28FF1C11EFA0E217BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
c9:15:9c:9c:91:69:9a:ab:64:1e:6f:52:0d:dc:c0:40:30:b4:
86:af:92:b1:b3:0e:80:e5:bf:3a:2c:68:ab:09:c6:ca:f8:03:
ec:cf:ea:ab:15:d5:8b:38:cf:1c:04:fa:24:36:a3:21:bc:c3:
de:de:f8:bf:8e:d3:f2:50:6e:39:f1:8b:20:c8:bd:67:40:c7:
b4:5d:fc:1a:7a:be:ef:08:58:5b:b3:52:29:06:94:ce:41:ca:
39:e8:00:55:b4:38:4e:04:59:88:b8:35:05:79:5e:22:6a:df:
4a:81:a5:82:ba:dd:d5:a5:e4:be:59:03:8c:ce:40:ee:30:f0:
a0:6d:57:ff:fa:df:13:ad:08:43:10:08:7e:2e:60:ac:90:e3:
41:bf:0e:59:68:5d:f1:25:42:99:28:a7:44:65:e8:96:b9:95:
5e:d5:6f:ed:aa:d2:07:e8:3e:0e:4a:19:f1:35:5f:1e:10:97:
9b:02:bf:7a:9e:63:3f:c8:db:17:45:f9:be:03:20:32:48:fc:
04:f0:33:2c:4a:7a:df:99:89:d9:fe:df:73:7e:64:37:22:67:
25:ab:5b:cb:98:72:f7:37:a4:c4:ae:1c:7b:1b:62:e6:5b:e0:
fc:ff:40:57:08:85:fd:4c:26:b3:a8:35:7d:f3:43:34:19:5d:
a1:a1:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:42 2025 by rpki-client