Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8446E022F44C11EF81A9D29E762E951A.roa
File: 8446E022F44C11EF81A9D29E762E951A.roa (raw, json)
Hash identifier: 9Mu2M08t60GKXTJf4xYK4yjvxXrVJvFbnWsX1lLz4Hg=
Subject key identifier: CC:5E:D7:36:81:C9:62:75:86:58:33:32:F9:3B:1D:A2:94:09:FA:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016435
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8446E022F44C11EF81A9D29E762E951A.roa
Signing time: Wed 26 Feb 2025 14:18:15 +0000
ROA not before: Wed 26 Feb 2025 14:18:11 +0000
ROA not after: Sat 19 Feb 2028 14:18:11 +0000
asID: 17561
IP address blocks: 154.82.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91189 (0x16435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:18:11 2025 GMT
Not After : Feb 19 14:18:11 2028 GMT
Subject: CN=67bf22a6-d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:26:40:cc:ed:38:33:db:26:8c:41:9d:3c:
eb:e3:fd:5b:a3:db:2e:74:3c:99:05:da:eb:ff:75:
60:fe:f8:32:1a:f8:e3:06:95:77:46:68:7e:1a:80:
19:70:93:4d:f8:7c:ee:a8:8f:ce:88:36:b2:dd:09:
66:f7:d3:ec:84:64:8e:31:2f:f4:d5:6a:bb:7e:95:
68:08:a8:48:9e:e2:0d:0f:9f:6a:99:ea:0b:02:92:
a2:12:af:2c:f7:2a:ee:f6:38:98:ea:9e:58:25:0a:
8a:fb:01:e3:b8:e3:a7:37:f3:8e:71:54:78:b7:8f:
29:b6:8f:bf:40:9b:73:00:b1:ca:8b:7a:02:ec:a4:
6a:cc:c8:6b:a8:58:d9:52:01:a2:15:de:81:51:34:
e2:1d:16:53:05:c4:4f:65:4d:ce:07:ac:83:fb:c5:
47:20:4d:54:a1:65:03:59:d6:14:2c:d0:5d:2d:4a:
63:a7:0a:26:00:3a:41:9c:a4:f5:02:a3:f8:65:3b:
6b:af:5f:ac:d3:f3:78:eb:1a:9e:bf:e7:58:71:fb:
cb:c1:51:fc:c5:73:16:44:1d:1b:bd:58:98:79:c8:
f5:03:35:e9:40:85:f8:5f:e2:84:cd:1b:36:f0:17:
9a:43:3e:07:fd:5e:6b:7c:56:7e:41:ee:36:02:11:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:D7:36:81:C9:62:75:86:58:33:32:F9:3B:1D:A2:94:09:FA:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8446E022F44C11EF81A9D29E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c3:9e:58:50:b9:90:4c:71:d7:83:4c:1b:fd:e6:c3:a1:dd:
ae:cb:92:c8:08:0c:62:72:e4:96:9d:d6:d4:7f:a4:95:69:55:
47:f8:18:e2:5f:bc:51:44:bb:68:ff:92:2b:cb:1e:e2:bd:32:
30:77:72:b6:72:a8:45:2e:ea:47:3d:8d:2d:86:57:58:bd:26:
5d:ed:da:bb:e5:d4:e7:90:da:c0:ee:d4:8c:f1:7c:bb:c1:d6:
e0:1b:3d:8b:d5:37:94:af:58:30:1e:6d:1c:85:3b:ad:85:44:
9f:b6:b5:1a:0f:90:98:56:e4:29:33:22:b8:f3:4c:4e:2e:1f:
23:01:b1:2d:4f:9d:48:bb:5e:02:81:f6:6a:b1:bb:e7:28:7b:
01:3a:14:c9:c5:e8:fe:80:e9:55:83:02:aa:1b:73:99:2a:1d:
b7:48:8a:e3:b5:bc:9a:2d:86:9d:e7:4f:dd:e4:d3:a0:4c:3c:
55:1f:64:e4:a5:02:e7:b8:4c:0d:69:b2:f5:1a:d3:b4:a4:57:
f6:57:e1:3c:8f:b3:e3:f1:16:cb:b5:85:b3:3f:2b:05:52:6c:
6b:77:a9:e7:fe:f9:61:5b:91:b3:34:73:8a:92:80:1a:44:ec:
89:3f:84:62:3b:0c:e2:5b:20:51:86:75:2f:69:18:97:a3:38:
01:d0:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:53 2025 by rpki-client