Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DEC82CF45011EFA4C44CB9762E951A.roa
File: 78DEC82CF45011EFA4C44CB9762E951A.roa (raw, json)
Hash identifier: Zl0twgiewQzSnE1De9+N1BaKfwN1j7Xh5FwjrdMIqbg=
Subject key identifier: FB:AD:90:76:8B:3D:AE:AD:20:58:CE:23:FA:38:6A:AF:83:A9:E0:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016478
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DEC82CF45011EFA4C44CB9762E951A.roa
Signing time: Wed 26 Feb 2025 14:46:33 +0000
ROA not before: Wed 26 Feb 2025 14:46:30 +0000
ROA not after: Sat 19 Feb 2028 14:46:30 +0000
asID: 17561
IP address blocks: 154.82.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91256 (0x16478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:46:30 2025 GMT
Not After : Feb 19 14:46:30 2028 GMT
Subject: CN=67bf2949-2a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:e9:dd:ca:ff:0c:1f:77:4e:15:ad:ae:70:
5b:da:4a:4d:43:92:80:28:5c:18:84:8d:f5:d2:6d:
a3:ad:45:b1:2f:3f:f9:cf:a6:47:f6:70:dc:30:f2:
fa:03:dc:97:8b:6b:3d:09:d6:ce:75:24:58:07:a8:
6d:67:6d:a1:fd:5a:ab:20:e8:74:b0:a5:a3:5c:8f:
2a:5f:c1:50:65:64:96:fd:b1:6d:a0:0f:bf:b2:4b:
a2:51:ba:cd:40:be:18:ac:f0:27:43:0c:e8:99:9c:
9f:fe:11:05:d9:e5:62:ba:42:95:70:78:8c:2c:d5:
16:83:81:5e:3d:22:ff:bf:db:27:f8:a3:a2:a4:e8:
2a:01:0b:72:e7:b7:31:a5:0f:c0:f6:f6:6a:0c:b1:
21:02:3a:66:31:c4:68:e8:4a:a0:20:cf:27:57:c3:
45:0e:24:f2:3b:8e:df:c3:a7:51:be:50:3d:de:10:
e3:72:df:2b:22:5b:d5:0d:ef:4d:c0:b2:42:ac:79:
36:26:6f:ce:76:93:b4:f9:eb:a5:e7:22:0b:a2:1d:
5c:d3:b0:85:b7:a3:55:2b:ff:73:b7:54:35:23:c4:
6c:82:52:0b:20:e7:2c:9f:2b:eb:de:95:33:4e:94:
c2:be:90:7d:eb:ad:6b:fa:7d:6c:23:0f:57:83:eb:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:90:76:8B:3D:AE:AD:20:58:CE:23:FA:38:6A:AF:83:A9:E0:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DEC82CF45011EFA4C44CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.217.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1c:77:ee:5f:32:9e:9e:57:fe:43:18:9f:82:40:35:b5:b9:
2f:6b:df:89:55:52:df:b1:aa:ec:cc:70:2a:fe:c1:94:96:9b:
5d:f6:ce:f2:12:ff:35:5e:78:bf:8c:2e:3a:7f:4d:97:e9:be:
93:4e:ac:73:db:d4:d4:f2:1c:db:72:9a:67:26:51:58:67:63:
9d:fc:55:5c:93:c0:02:b9:e4:69:b4:5c:4b:12:d8:2f:1e:85:
46:f9:8e:83:c9:9f:ba:70:e0:74:11:a5:0e:36:2e:fb:13:87:
84:5a:c9:35:f9:e5:74:12:bb:cd:bc:78:a3:4f:fc:3b:56:ff:
b5:c5:fc:6c:37:c3:1e:16:fb:7d:9c:68:8a:4c:2c:2c:ff:8a:
b3:b9:04:19:a1:8d:64:c4:81:99:91:b2:94:86:31:31:34:92:
5a:b8:cc:7a:6a:26:c1:25:5b:6c:80:2e:a6:ee:f7:a9:46:ec:
15:7b:f1:6a:5a:41:07:a4:71:50:f0:1a:b2:1f:67:19:60:9d:
a4:55:17:58:cb:6a:ee:c8:22:35:db:95:68:2a:46:17:23:aa:
01:d6:07:7e:be:b8:8e:69:2d:87:a9:38:a0:d5:86:b2:ee:b3:
b0:5a:15:93:b3:be:5d:09:7d:16:cd:29:a3:21:e3:7e:4f:73:
4b:41:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:12 2025 by rpki-client