Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFB49C4041511F0B810509A762E951A.roa
File: 7CFB49C4041511F0B810509A762E951A.roa (raw, json)
Hash identifier: uE2LNLBDJ7aU7M1eddyZcRLnk6eKrE2xbf8UAvCyFbo=
Subject key identifier: A7:B9:BE:34:F7:1B:46:4D:9B:60:8B:35:F8:89:9B:D3:BD:6B:4F:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFB49C4041511F0B810509A762E951A.roa
Signing time: Tue 18 Mar 2025 16:24:39 +0000
ROA not before: Tue 18 Mar 2025 16:24:35 +0000
ROA not after: Wed 16 Apr 2025 16:24:35 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95432 (0x174c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:24:35 2025 GMT
Not After : Apr 16 16:24:35 2025 GMT
Subject: CN=67d99e47-bbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:4b:fa:42:72:73:f7:5c:00:f4:e3:f2:4a:
43:0d:b2:69:de:32:00:02:2b:69:af:16:0d:9c:eb:
6e:6f:7f:e9:03:52:79:42:b3:01:cd:03:e2:eb:94:
52:69:e6:fd:17:c5:4d:9c:d2:71:01:8f:dd:4b:33:
bd:14:7e:30:7f:7b:45:f3:7e:7d:16:5c:2a:db:c2:
27:f3:d9:cb:bf:ff:e8:76:ee:ee:6d:46:24:65:6e:
bf:fe:03:ff:de:6d:0b:88:cf:86:e4:97:b4:76:0a:
aa:af:31:6a:e2:aa:a7:99:00:8e:bb:26:ed:5f:5f:
f1:79:52:cc:b3:5f:4b:80:ed:5f:fc:e9:67:59:b2:
09:ea:2a:72:a5:5c:82:3f:0a:ae:79:77:93:93:18:
bc:2b:0a:ad:b4:f3:76:75:83:ea:70:53:c9:d6:9f:
8b:61:4d:e6:78:6c:70:c2:fa:e6:98:77:6c:66:4e:
08:e3:0b:39:1e:49:35:8f:61:8c:b4:c6:6d:06:bc:
98:70:9a:ec:19:a1:18:d9:40:a0:f6:e5:4f:1b:64:
ed:49:fc:fc:be:60:05:d4:93:4b:31:41:c0:57:6a:
91:e8:44:1e:7f:2a:b3:9c:70:88:72:cc:6f:a8:58:
f6:7f:27:ac:7d:40:6d:6d:26:5a:d8:6f:8c:07:70:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:BE:34:F7:1B:46:4D:9B:60:8B:35:F8:89:9B:D3:BD:6B:4F:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFB49C4041511F0B810509A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ba:c2:9a:22:40:f9:e8:9b:a5:91:2a:a0:5a:5d:49:b0:d5:
bc:b6:c2:35:4f:aa:10:2b:fa:aa:5d:24:bb:3b:6c:02:02:82:
06:b1:53:53:87:15:20:af:74:0a:ad:7e:ff:63:12:e9:ec:5d:
59:01:8b:63:bd:1b:e1:45:77:5c:6c:5c:77:13:9c:49:4c:70:
f5:25:a6:e1:d6:d3:b1:db:a0:1f:94:60:53:2f:1a:00:73:4a:
f9:cb:c1:1d:eb:ac:23:4a:3b:3d:d2:c7:04:df:00:cd:85:33:
c7:85:70:b3:33:a9:da:95:29:6f:2c:fc:67:fd:81:6b:6c:da:
7f:b9:f1:5e:b1:17:4a:89:9e:13:f7:78:f4:99:e1:dc:37:f0:
fd:05:74:17:c7:83:75:e0:73:59:1f:5e:2e:7f:45:fd:09:e8:
4a:c2:61:db:c4:df:7d:04:79:6f:db:0d:13:66:5f:89:db:02:
84:f5:16:42:3d:61:ad:39:7b:e0:06:59:63:43:06:bd:51:71:
7b:d7:bd:f6:73:0c:2a:94:45:ba:6a:df:f3:3f:1c:ee:10:ea:
c4:ff:67:7d:67:c0:f3:9d:3f:59:7d:2e:3c:fe:df:d7:a1:67:
13:c8:24:f8:d9:3c:75:50:20:56:30:36:c9:67:c3:21:3f:b9:
6c:9c:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:55:16 2025 by rpki-client