Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B046EF06711EF8A9165B4762E951A.roa
File: 714B046EF06711EF8A9165B4762E951A.roa (raw, json)
Hash identifier: XjBdwOVhvjNsWDq9Pz4SPPbnaawHNryj1+YcL8N8xJ0=
Subject key identifier: 30:2D:5A:4D:1C:7F:FF:D5:C2:FF:B2:C8:50:BC:6E:4C:6B:6A:13:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0159D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B046EF06711EF8A9165B4762E951A.roa
Signing time: Fri 21 Feb 2025 15:20:55 +0000
ROA not before: Fri 21 Feb 2025 15:20:49 +0000
ROA not after: Mon 24 Mar 2025 15:20:49 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88530 (0x159d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 21 15:20:49 2025 GMT
Not After : Mar 24 15:20:49 2025 GMT
Subject: CN=67b899d7-bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:c5:1d:d6:2f:e8:74:c8:8f:56:d6:93:5c:
a9:7e:53:c7:cc:a2:cc:b2:1d:d0:f4:60:60:7a:4f:
10:45:bd:be:18:7a:0b:20:b7:8a:ee:4c:72:45:0c:
0d:f2:b8:53:28:72:dd:fd:0d:1f:e5:69:22:fc:8a:
87:a5:86:5b:d4:e7:4c:1e:9d:25:de:1b:10:fb:02:
de:cc:64:77:96:bf:4b:99:76:e8:af:38:7f:7a:f2:
33:70:02:33:ce:83:ef:0c:8c:16:70:76:e1:e9:ed:
52:e8:72:5d:27:af:4d:90:65:d8:c3:ae:97:dd:f1:
7c:d9:e8:72:83:a0:2a:ef:16:5a:8f:c4:06:84:84:
66:59:a6:35:62:e7:62:23:60:2a:21:39:66:81:4f:
be:dc:37:d6:04:bc:71:8e:f0:bb:49:0f:88:cd:b6:
76:9a:d9:12:68:55:88:51:f0:48:a9:1f:6e:3a:85:
1f:16:ad:27:6e:e1:40:1e:e5:7f:4a:3e:75:70:b6:
36:57:92:ba:7e:60:05:1e:8a:2a:81:09:84:a7:26:
99:f9:e9:15:a7:f5:a1:47:56:59:51:cf:b9:02:cd:
10:f8:79:35:1e:3c:1a:51:88:2b:dd:aa:30:41:bc:
38:f0:89:47:a3:81:7d:38:1d:f8:11:82:bb:96:66:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:5A:4D:1C:7F:FF:D5:C2:FF:B2:C8:50:BC:6E:4C:6B:6A:13:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B046EF06711EF8A9165B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a0:00:7c:dd:04:f9:70:bd:85:dd:bb:2b:aa:77:ab:0d:c9:
be:de:4a:38:4e:bd:1d:07:5a:58:23:4f:ff:8f:54:22:40:47:
6f:09:21:33:0a:49:c6:c1:67:1e:55:a8:b1:8a:7f:67:c3:25:
db:e9:e1:d5:de:40:4c:b6:16:b2:a3:ab:b2:0f:88:d0:25:c8:
3e:fc:c4:3a:0e:e0:bf:cc:9e:19:70:3c:dd:7e:b4:f1:78:c8:
61:ee:34:ef:94:11:d8:0c:99:6c:19:84:47:cb:ef:1b:b1:78:
07:61:22:00:c0:54:04:af:a2:50:4c:a9:97:1a:18:91:fa:5c:
19:d9:3a:fe:55:04:f5:58:7f:30:54:c1:cb:bd:85:f2:00:b0:
3b:59:ba:bd:32:41:53:fc:31:02:3f:30:da:52:39:eb:ac:b6:
af:b5:fb:50:c5:bf:cc:8e:4b:48:8e:04:39:43:59:00:d4:7d:
8c:c5:74:fe:99:3b:c5:bb:bc:6c:64:59:da:f5:7f:e8:3a:00:
60:1d:fe:a3:2b:7e:f5:81:c7:be:50:4e:c6:c0:2a:18:10:e9:
b5:66:17:e1:47:53:f8:ee:70:59:79:ab:5a:83:44:5d:72:1e:
48:32:15:f5:2f:9b:54:6d:fb:c9:88:d4:ed:8a:f7:0f:7f:0e:
ee:5c:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:47:39 2025 by rpki-client