Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CC66A64F6C311EFAFE0F18C762E951A.roa
File: 8CC66A64F6C311EFAFE0F18C762E951A.roa (raw, json)
Hash identifier: 4ouktlKS3BtLT6uPoCjEcONfzwfvX5il3kwIzHyvFjs=
Subject key identifier: 37:D4:91:E3:E2:AC:6C:DD:D7:50:A4:89:37:3B:34:38:FA:69:AE:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CC66A64F6C311EFAFE0F18C762E951A.roa
Signing time: Sat 01 Mar 2025 17:35:21 +0000
ROA not before: Sat 01 Mar 2025 17:35:18 +0000
ROA not after: Sat 05 Apr 2025 17:35:18 +0000
asID: 203020
IP address blocks: 154.207.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 17:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94009 (0x16f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 17:35:18 2025 GMT
Not After : Apr 5 17:35:18 2025 GMT
Subject: CN=67c34559-aebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:59:08:f6:99:1c:cf:10:c0:78:9a:a4:ef:
2f:13:a9:9e:09:4a:97:85:24:15:de:52:87:5f:26:
6d:0a:71:e1:49:d8:1d:60:dc:d0:a4:cb:52:ae:1a:
22:18:5a:04:b7:a8:22:6d:a3:a1:94:75:0e:01:fc:
3e:69:2b:7b:28:9f:b5:20:dc:8b:04:32:33:43:f3:
0f:fa:a3:ae:eb:2f:fb:be:eb:5f:0b:5b:91:e9:77:
93:69:40:0a:a7:29:86:72:39:21:0f:84:0c:b2:d3:
81:b1:2d:06:54:0b:f5:51:05:c6:76:83:ac:0e:3e:
90:02:ac:4a:c4:f3:0d:4b:3c:ca:62:c5:94:f6:2b:
37:33:0b:8b:9a:62:68:d3:be:73:60:c1:dc:0e:19:
65:75:d3:93:d1:28:3b:b9:22:d4:3e:36:d3:ff:4d:
54:be:0f:e0:6f:95:ea:8c:f0:c0:c2:b0:0c:6e:46:
a0:58:45:2b:3e:b9:40:d6:0d:4d:ba:68:ec:ed:85:
c2:8b:fd:6d:f9:ec:91:c8:ce:4d:89:a7:a2:8c:d2:
17:8d:7f:5d:b7:9b:8d:d5:91:32:50:85:2f:d8:35:
50:7b:d5:fb:82:12:59:1f:e9:0a:c6:08:00:41:37:
67:24:51:54:bd:80:cf:6f:53:51:3b:1b:34:b6:5a:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:91:E3:E2:AC:6C:DD:D7:50:A4:89:37:3B:34:38:FA:69:AE:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CC66A64F6C311EFAFE0F18C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b4:fa:b0:59:f9:10:e3:18:69:f7:96:12:24:64:bf:76:be:
f5:3a:54:63:03:6e:44:1d:3c:2d:aa:68:40:a9:a4:5e:b3:5c:
f5:ca:ef:09:2c:70:5a:15:64:9d:0f:86:59:31:58:f3:2e:34:
83:fb:b0:2d:95:a2:28:59:be:15:0d:42:ec:b6:bb:ed:5f:d0:
70:f7:64:3c:ec:d1:86:12:f6:e7:8a:4c:b7:0f:34:23:f8:f9:
49:0f:87:93:5e:69:43:c3:23:39:e0:04:54:1b:91:94:23:55:
6a:24:1c:2f:1f:f9:f4:a1:89:59:fc:41:d8:3e:8b:a7:cc:46:
92:d7:6e:c7:44:8f:5e:cc:7d:de:7b:c3:17:fe:af:5f:62:e7:
b7:16:bd:22:3a:6f:d4:a3:30:26:35:1e:97:0d:5a:bc:e5:7b:
b3:c7:f3:ce:bc:2c:e7:1c:d6:f9:c6:89:bc:f5:ee:2c:2d:50:
3c:06:19:0f:64:4f:76:40:f6:12:38:a5:ab:62:8a:1c:b7:a1:
a6:ed:25:26:ac:73:52:55:cf:64:1a:f5:a1:f2:68:06:88:7d:
c6:ac:11:48:02:a0:ff:e5:18:31:7d:7a:26:ed:7c:0c:8f:a5:
94:9d:52:6a:10:90:b7:36:cc:95:08:a0:68:f7:6c:56:f5:a0:
28:40:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client