Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB904BA070211F0BB548490762E951A.roa
File: 6EB904BA070211F0BB548490762E951A.roa (raw, json)
Hash identifier: 0XuAdrTuYpcpTPuGfTUP3TSZxRi92FIDrzMG3B/YHas=
Subject key identifier: 38:37:F1:0C:E1:35:DA:6F:1E:1B:FF:95:87:3A:E6:4E:5F:96:59:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017576
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB904BA070211F0BB548490762E951A.roa
Signing time: Sat 22 Mar 2025 09:45:48 +0000
ROA not before: Sat 22 Mar 2025 09:45:44 +0000
ROA not after: Wed 30 Apr 2025 09:45:44 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95606 (0x17576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 09:45:44 2025 GMT
Not After : Apr 30 09:45:44 2025 GMT
Subject: CN=67de86cc-9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:da:43:db:da:86:43:18:ff:0b:c8:70:b4:
36:d8:42:96:bd:80:c0:55:b8:80:9c:ac:d5:93:77:
b9:b6:3d:69:6d:a7:52:f8:94:01:04:a1:ca:b7:3f:
3e:48:3a:16:29:29:62:b3:54:2a:3a:df:df:85:7d:
13:cb:68:73:40:15:1a:8e:e6:e2:d6:38:5b:21:90:
da:ec:0b:8a:f5:7a:f7:68:e4:0c:e2:69:77:35:dd:
bc:0c:8d:86:48:e6:a2:33:9e:d4:ae:35:5f:31:ef:
07:8d:db:3e:8c:34:ce:a7:51:c6:36:5f:39:a4:1b:
b6:5a:19:94:06:bc:28:4c:1b:da:8d:9f:5f:f0:64:
24:9b:25:b2:20:05:83:ae:ab:85:19:39:fc:b5:9f:
2c:2c:8e:96:57:aa:28:6f:25:9c:d9:7a:1f:d9:28:
b6:a4:5b:aa:cf:89:1b:b1:97:36:a9:0b:b9:e9:90:
18:29:28:d9:ca:26:c2:12:72:cb:9f:f0:7b:10:d9:
f4:73:0d:2a:c3:40:14:17:fa:aa:dd:fb:82:a7:88:
63:90:47:67:11:55:27:6e:a4:b4:e6:77:92:69:b5:
b0:c2:81:2d:e8:35:ff:d5:21:37:e9:0b:a6:69:9e:
50:00:5b:e5:1f:ba:2b:a2:0c:7f:40:ec:ff:20:25:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:F1:0C:E1:35:DA:6F:1E:1B:FF:95:87:3A:E6:4E:5F:96:59:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB904BA070211F0BB548490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:e1:07:86:e1:51:fe:01:02:8a:f1:8e:51:35:ac:23:df:b0:
f1:94:86:47:ce:3d:99:95:a6:e1:82:43:f5:7e:0d:8e:11:76:
63:a5:65:66:4d:8a:a1:66:c8:3a:45:ea:1b:fd:fd:f1:40:07:
af:60:82:8b:0d:a9:9d:1f:8a:68:61:5b:78:69:63:8d:fc:86:
f8:ec:ab:91:28:23:f5:4b:82:7e:36:19:b9:ad:01:fa:d1:9f:
11:11:69:2c:63:dc:96:fc:11:e8:0d:7f:70:9e:10:38:8c:2f:
b4:54:2f:18:89:45:6d:96:6e:b8:da:ed:c0:e8:85:c9:a4:8a:
c1:67:6a:64:39:4b:5a:0d:c5:1a:17:ac:10:21:5c:7e:fd:14:
12:9c:bb:19:0a:6b:3c:c0:a0:b7:ba:20:c9:86:41:ed:80:86:
af:33:0c:9c:12:7c:73:d1:04:bc:36:06:21:7f:98:7b:a4:2a:
d0:60:66:0b:fd:a6:85:c1:ec:e3:42:62:f3:ff:0a:a3:61:71:
56:16:68:5e:f8:d0:65:d7:93:46:f3:28:71:63:32:51:4e:6a:
d7:45:86:a5:ed:99:0d:ea:e9:5c:93:51:96:df:5a:51:d4:d2:
e2:35:75:42:97:6c:15:dd:b7:46:89:3f:bf:85:a1:92:5c:da:
b0:11:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:19 2025 by rpki-client