Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466BA8F99411EF8A3B54AE762E951A.roa
File: 8F466BA8F99411EF8A3B54AE762E951A.roa (raw, json)
Hash identifier: zSbEP6/OIz2qXW7412ZtrC0h9JQuIzEOAV0DzPrdPiw=
Subject key identifier: 56:DB:00:ED:A2:EF:5F:69:B1:07:20:FD:05:3B:4A:68:D6:20:18:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017236
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466BA8F99411EF8A3B54AE762E951A.roa
Signing time: Wed 05 Mar 2025 07:36:33 +0000
ROA not before: Wed 05 Mar 2025 07:36:29 +0000
ROA not after: Thu 10 Apr 2025 07:36:29 +0000
asID: 134351
IP address blocks: 154.200.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94774 (0x17236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 5 07:36:29 2025 GMT
Not After : Apr 10 07:36:29 2025 GMT
Subject: CN=67c7ff00-622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:d4:44:39:9e:b9:31:79:74:5b:ed:5c:79:
cc:eb:e9:87:7c:0d:dc:65:d5:ab:e7:f1:2b:6b:7b:
af:6b:98:e3:5e:ea:d1:0c:95:bb:bd:d1:4f:fe:c1:
5b:5b:de:f9:b7:24:be:db:97:d4:43:ce:b1:bc:f0:
61:ef:86:2b:e1:52:aa:49:ec:31:8e:c1:f2:6e:a4:
f7:aa:d6:ea:7e:e6:36:b5:ae:f4:3e:d4:d1:36:38:
9c:4a:5c:32:1e:ed:86:cb:cb:a1:3c:50:df:36:43:
45:86:66:a1:4b:69:6a:fb:ff:17:92:d4:a3:f8:5a:
94:2e:fb:0f:4f:d9:5a:ba:f9:b2:bb:da:aa:17:d5:
6f:75:74:73:8d:68:0b:e4:03:7f:f7:dc:d5:c7:e1:
8e:cb:12:e5:51:00:55:ff:8b:45:4c:4c:b0:a5:a5:
ab:8c:de:19:68:80:b1:f2:6f:6b:fe:a0:b3:e7:a6:
7b:75:fd:52:ea:7e:3f:ec:fc:2b:32:ac:ed:53:83:
c8:e9:40:1f:19:0b:20:aa:cc:95:c4:38:92:b4:b9:
a9:e6:20:f3:f2:cf:fc:cb:aa:aa:ae:4d:1c:94:ce:
01:ba:18:4e:e2:2f:9c:da:66:1e:ea:dc:b4:a1:23:
97:0a:a3:17:ab:6a:48:44:d5:5d:90:33:3b:f1:9c:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:00:ED:A2:EF:5F:69:B1:07:20:FD:05:3B:4A:68:D6:20:18:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F466BA8F99411EF8A3B54AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5e:8a:01:ee:77:b0:de:a6:1b:d9:dc:f4:2b:1f:02:97:fd:
d2:8d:04:79:f1:3f:3d:ec:31:f7:d6:c6:06:58:11:06:2f:10:
14:56:a7:c6:9a:8e:dc:87:38:d1:1b:57:a1:ee:5b:d7:00:72:
00:dc:e1:ab:31:16:8f:8f:ca:28:e9:80:5b:fb:72:d7:bc:51:
c9:22:8d:fb:b6:79:47:8e:a5:91:dd:80:fb:7d:e9:81:7e:22:
80:85:04:16:40:d1:bb:f6:5a:97:77:14:7a:d0:6f:9c:2b:48:
a9:59:fe:2d:24:5f:65:5e:67:44:90:64:e9:e6:2d:b8:13:42:
7d:86:26:f4:23:29:da:91:33:e6:4b:7e:dd:c3:c9:cc:f9:64:
ae:df:a7:a0:91:ec:0c:91:20:5b:2d:e7:65:03:08:fc:67:9a:
5a:9b:c3:19:f2:8c:a8:c7:89:06:13:36:d7:e5:9d:cf:7c:1b:
4a:b2:60:b5:36:23:16:46:3f:fc:97:3b:f4:3d:5b:20:6d:fa:
b4:0e:d7:f5:d6:d9:a5:b9:c3:7a:13:83:a3:70:bd:ab:4b:fd:
d2:bd:da:fd:b4:15:78:fa:c2:76:d1:72:4c:2f:f5:8a:54:c5:
d7:af:74:67:e7:aa:c2:63:0f:3a:6c:30:cd:35:ec:7d:e5:84:
06:34:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:43 2025 by rpki-client