Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D662D4D79211EFB002847C762E951A.roa
File: 73D662D4D79211EFB002847C762E951A.roa (raw, json)
Hash identifier: WVyP0MlOxnN8siuhP/FaOLRGvUZlHB563bbp1BstHlE=
Subject key identifier: 4F:FA:48:E6:F5:11:C6:89:E4:84:56:0D:5D:F0:BA:74:EA:8E:6B:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D662D4D79211EFB002847C762E951A.roa
Signing time: Tue 21 Jan 2025 00:55:48 +0000
ROA not before: Tue 21 Jan 2025 00:00:44 +0000
ROA not after: Thu 31 Dec 2026 00:00:44 +0000
asID: 35916
IP address blocks: 154.87.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81509 (0x13e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 21 00:00:44 2025 GMT
Not After : Dec 31 00:00:44 2026 GMT
Subject: CN=678ef094-1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:dc:be:43:bb:78:8e:dc:6c:d8:f5:e1:3a:
c0:2a:c5:6c:da:4d:b4:2e:b7:c0:2a:82:57:52:26:
ad:1e:84:3f:5a:44:72:61:6c:87:35:61:52:83:3b:
5d:e9:3b:f3:63:7a:f6:fc:cd:f0:85:b4:b1:f3:ef:
84:7a:ea:44:7e:fb:20:35:70:c2:cd:78:28:33:81:
01:69:a5:e5:8d:ac:cf:9e:c1:19:94:0a:5a:74:6d:
c3:42:8c:0f:3b:5c:69:37:a0:7b:46:92:e0:08:7b:
0f:56:32:80:16:d4:eb:fb:9c:c2:0d:69:78:a5:ec:
81:4a:ee:7a:01:2f:27:a8:a6:0f:81:2c:f9:0f:76:
1e:2c:94:33:c2:19:ef:9c:41:1f:0f:27:e2:68:5f:
24:93:15:98:bc:fb:0c:89:a2:dc:6a:32:38:9b:0a:
c4:65:05:14:0e:97:b7:4f:8c:fc:f9:cd:3d:e5:cf:
16:c2:53:bf:88:84:6b:5a:d6:b9:0d:84:60:95:dd:
6c:25:fd:9e:75:05:1c:70:ab:f2:c8:f6:98:2a:d7:
b8:b1:92:0c:54:2a:58:d0:90:68:50:99:16:28:03:
9b:9f:a2:5d:dd:4a:c2:55:bc:9b:dd:2f:b4:11:38:
c5:72:d6:4b:12:fc:d7:62:3e:95:ee:33:9e:c3:f9:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:48:E6:F5:11:C6:89:E4:84:56:0D:5D:F0:BA:74:EA:8E:6B:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D662D4D79211EFB002847C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.32.0/20
Signature Algorithm: sha256WithRSAEncryption
08:f1:60:f6:52:ca:66:4e:ee:33:da:8d:8e:85:ec:ac:ef:c6:
2b:03:0e:d5:f8:11:d4:7b:da:de:ee:e1:32:8e:63:ae:72:64:
c1:d7:e4:81:c3:96:bf:02:a9:ac:9d:14:4e:da:e3:14:ac:04:
fc:07:e8:06:f3:74:98:a6:cf:b5:47:5f:19:4a:23:bd:eb:01:
0f:ac:8b:90:53:6c:85:9a:9b:78:19:1c:9c:6f:a1:9f:09:2c:
a7:e0:4d:4f:f9:b9:88:86:55:18:80:90:55:18:80:9c:1b:7e:
d2:88:03:10:e1:71:2a:84:c2:85:0c:5e:af:5f:f6:2d:e6:85:
3c:9b:de:1e:d2:a5:9d:a1:c1:ac:fa:e4:37:a5:b5:6f:9c:f3:
88:ca:09:ef:a2:c5:3f:ab:cf:6f:74:7a:05:40:72:94:7d:65:
d9:97:be:15:fb:67:5e:00:0e:d3:17:ed:df:2b:c5:b4:73:ab:
92:55:c1:31:b5:93:6c:e8:c6:9b:08:27:d3:03:c7:a3:b2:ed:
04:fe:2b:bb:1a:3d:ec:f7:be:ae:2a:f2:17:87:d6:39:2f:f9:
ee:f9:e9:38:c5:8d:f5:5d:ad:f5:41:01:09:60:60:f7:4e:d0:
58:b8:b6:67:c0:e8:06:b5:5e:f9:01:a4:d7:37:dd:fd:b1:4a:
6c:bb:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:46 2025 by rpki-client