Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742EB966F61411EFAAF9515F762E951A.roa
File: 742EB966F61411EFAAF9515F762E951A.roa (raw, json)
Hash identifier: t+Mo6Z0eBdm3+IlN+Ii2qdI/bzd6Ok0w3/4Voy59nZ8=
Subject key identifier: C2:65:6C:78:32:00:79:08:41:F4:7D:B8:0A:CB:09:F3:9D:72:5A:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742EB966F61411EFAAF9515F762E951A.roa
Signing time: Fri 28 Feb 2025 20:41:58 +0000
ROA not before: Fri 28 Feb 2025 20:41:54 +0000
ROA not after: Sun 13 Apr 2025 20:41:54 +0000
asID: 138915
IP address blocks: 154.206.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93187 (0x16c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:41:54 2025 GMT
Not After : Apr 13 20:41:54 2025 GMT
Subject: CN=67c21f96-fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:d6:70:22:8e:14:e7:0e:1f:7d:2d:fc:43:
46:69:38:f9:0f:aa:fa:ca:ce:44:34:2f:ed:d3:da:
63:88:c2:46:c8:c8:ad:1d:98:e3:a8:ee:05:13:0e:
c4:3b:ab:e0:2f:78:85:9b:a5:a4:e5:38:9d:d3:fc:
2f:25:49:af:cc:6c:c1:a2:90:73:aa:22:38:d4:e3:
ff:78:40:04:ef:c2:b2:6f:d9:bd:3f:6b:a2:6d:cf:
bb:c0:a4:13:25:2f:5e:7e:53:a9:9e:f0:16:17:4d:
8d:b8:49:75:78:42:2c:1a:c1:ac:fd:23:14:60:a6:
79:83:6c:20:7e:e7:94:f9:27:7b:fc:bc:d1:33:49:
b5:24:28:fb:de:91:83:f4:b7:37:ef:23:56:6f:26:
80:81:62:2f:bf:00:82:40:63:f7:64:03:84:cb:a9:
f8:c4:53:d8:a2:5e:e2:2f:17:53:3d:ee:38:34:a8:
51:f6:b8:f2:f7:2b:d0:39:f8:44:e2:f5:8a:81:ac:
74:e6:35:a3:9e:d8:27:64:28:6c:8a:98:6e:4c:08:
b7:aa:f6:42:d5:22:89:0e:95:ee:35:cf:bc:a2:30:
5e:d0:9a:13:87:ef:0b:1e:e0:13:83:bf:27:0c:6d:
70:ad:ee:e3:e4:21:70:87:0f:d1:75:a9:1d:b9:28:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:6C:78:32:00:79:08:41:F4:7D:B8:0A:CB:09:F3:9D:72:5A:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/742EB966F61411EFAAF9515F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f6:3f:bb:2f:23:09:40:de:62:1d:fd:c1:de:c1:66:45:b3:
eb:6c:e3:6d:2c:7b:01:88:35:bb:6b:75:63:d5:71:44:73:55:
d9:09:26:8c:c1:6c:fb:34:06:03:ef:fa:1d:21:97:3e:3d:38:
6e:b0:d8:d8:bd:62:50:47:cf:8e:6b:f6:ab:03:20:30:2e:ef:
97:ed:29:8c:ff:71:ae:6d:a6:18:9e:0a:b7:38:26:6a:f9:45:
2d:f0:46:e2:b8:2b:c4:99:48:ec:dd:15:ba:10:3f:e0:26:35:
da:55:27:5c:42:36:f8:bb:4c:23:08:b8:88:4e:4f:b9:e6:b7:
58:a4:82:ec:c8:ab:97:81:02:8d:3c:d3:c7:c4:4f:13:0f:94:
83:b1:d1:79:3b:fc:55:a6:81:86:5a:f7:24:2e:ba:3c:a3:2e:
0b:55:3d:d1:0d:42:94:f2:75:75:07:bb:1f:a3:93:31:05:04:
a7:f7:0a:9c:f2:de:3c:de:6c:5e:d5:4b:83:32:27:6d:eb:60:
34:ea:da:23:e1:6f:ea:ce:66:49:c9:db:78:a0:0c:7e:a8:ae:
32:80:b0:7b:98:1e:fd:2e:06:8d:fa:74:a0:86:a2:c7:7a:39:
3a:98:f0:fe:c9:bb:39:37:12:51:c1:22:ff:c6:9d:7a:2c:ee:
64:e0:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:10 2025 by rpki-client