Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704DDEE0F34D11EF80EDC54A762E951A.roa
File: 704DDEE0F34D11EF80EDC54A762E951A.roa (raw, json)
Hash identifier: ETBWoBrV9dmAD9/i12F4kWYu+Ki7q9MK2zKk1JVDOG8=
Subject key identifier: 92:31:DA:C5:78:5B:51:C5:B3:91:99:2D:B9:FD:A0:9B:2F:7F:94:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704DDEE0F34D11EF80EDC54A762E951A.roa
Signing time: Tue 25 Feb 2025 07:52:19 +0000
ROA not before: Tue 25 Feb 2025 07:52:16 +0000
ROA not after: Mon 07 Apr 2025 07:52:16 +0000
asID: 63139
IP address blocks: 154.223.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89464 (0x15d78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 07:52:16 2025 GMT
Not After : Apr 7 07:52:16 2025 GMT
Subject: CN=67bd76b3-55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:d0:03:df:77:d8:39:03:0c:ab:1c:1f:37:
d0:b1:3e:48:c4:41:e0:11:1e:f2:4c:86:f6:1e:d2:
f9:82:f5:58:1f:16:b3:d0:49:1a:74:e4:0f:68:dd:
90:e3:13:f2:e0:1b:b9:db:b4:bd:a2:fa:df:58:a5:
f8:03:e3:55:4b:01:1c:84:88:97:47:13:db:f4:8a:
8f:39:b0:5b:9b:c0:cc:f9:75:9a:85:13:86:56:31:
59:03:c9:fb:a3:fe:e7:7c:8a:c5:d4:59:21:f5:ad:
88:78:8b:ed:a0:c5:89:98:9a:5a:63:86:c3:99:91:
0c:4d:8c:5b:32:7c:57:b9:25:a1:d2:e8:83:5c:16:
52:44:ff:b9:49:4f:87:35:4f:dc:c4:00:33:06:d1:
ea:d2:5a:81:f6:40:d5:b6:48:f6:1c:bd:9d:28:0b:
8d:93:ff:2f:89:48:aa:2d:9a:c5:5e:4a:f0:20:b0:
fc:44:07:42:f1:17:c2:1c:b8:3a:bf:0e:db:dc:10:
4e:e8:da:16:cf:a5:96:bd:3c:4b:51:64:95:60:7d:
da:3f:b3:00:d0:96:28:85:c9:96:01:d0:bb:f9:d7:
17:9e:c2:de:74:6d:9f:08:63:d0:46:b3:28:da:8e:
49:e4:f5:85:39:a4:d6:c4:e4:7c:a2:c1:14:8b:65:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:DA:C5:78:5B:51:C5:B3:91:99:2D:B9:FD:A0:9B:2F:7F:94:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704DDEE0F34D11EF80EDC54A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.25.0/24
Signature Algorithm: sha256WithRSAEncryption
55:84:62:69:62:0a:cc:06:04:34:a1:0c:8a:c2:ea:fd:a8:0b:
39:3b:b7:fa:70:02:b8:b1:9b:e9:28:5f:6f:c7:e2:42:86:23:
52:c8:c9:5b:86:94:13:6b:bc:bf:1d:c0:bf:07:af:3e:f1:2b:
65:ef:ad:55:cd:7f:ec:96:34:34:2b:18:f1:19:c2:12:c6:14:
78:a9:7f:7e:1c:27:60:ab:3d:d4:fc:37:0b:2e:89:b2:04:89:
02:46:95:cb:6d:1c:94:77:53:0b:17:05:dd:8b:87:06:d3:9f:
9a:78:84:d4:d1:a4:45:cc:78:94:7b:d3:2a:84:67:03:ac:99:
01:a8:a2:39:08:ad:05:ea:9d:6d:ca:1f:ec:b4:7e:fc:c8:0f:
b0:25:95:22:49:6e:34:74:9c:23:8d:0f:c8:c8:32:f8:9c:e3:
a5:c3:39:b4:0f:66:42:d9:11:9c:db:af:92:d0:6f:23:f3:78:
3d:d3:6d:d0:b6:81:56:74:db:d4:b5:0e:63:bd:73:4b:cd:d3:
4b:1d:cf:3c:83:a4:65:f2:bf:b1:a8:1c:ec:be:d4:03:f5:49:
0c:8a:03:43:d1:4a:60:82:2c:7b:81:05:c3:8d:a5:2a:26:d1:
86:68:6f:90:e3:da:84:26:a3:30:78:23:70:42:b9:b3:14:fc:
fb:95:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:52 2025 by rpki-client