Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBA4ABA04BA11F092F04EA6762E951A.roa
File: 8FBA4ABA04BA11F092F04EA6762E951A.roa (raw, json)
Hash identifier: WcxJS/tuEokDZLFsm0dxJmnUVvLuOJuugC2RXWD0QWY=
Subject key identifier: 18:C1:EE:31:CF:51:20:9E:A1:4E:A1:77:44:BB:30:D0:E4:73:1D:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBA4ABA04BA11F092F04EA6762E951A.roa
Signing time: Wed 19 Mar 2025 12:06:17 +0000
ROA not before: Wed 19 Mar 2025 12:06:13 +0000
ROA not after: Fri 25 Apr 2025 12:06:13 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 13:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95494 (0x17506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 12:06:13 2025 GMT
Not After : Apr 25 12:06:13 2025 GMT
Subject: CN=67dab339-117b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:cb:12:35:54:7a:da:b8:86:58:5d:9c:cd:
ad:28:e4:b7:d8:14:14:3a:12:cb:fe:a6:ac:ea:50:
81:72:08:85:40:17:64:1f:52:34:03:72:a5:59:5f:
4c:d8:f7:f5:b6:89:8f:09:de:6a:bc:8b:97:bf:b3:
41:02:1d:11:4c:30:56:ef:24:4d:e5:80:ee:23:08:
d0:5b:51:00:44:08:19:a9:c2:7e:64:ab:be:36:eb:
0e:51:90:bd:21:79:65:9c:cf:9e:ab:2a:a3:03:59:
d8:13:ab:ca:ff:e4:f8:ed:58:93:98:df:1a:40:52:
56:7f:e9:d9:2f:01:65:f5:32:c4:d6:35:75:60:5c:
29:f4:bf:e6:99:7b:2e:5d:bf:ff:54:40:bf:75:e9:
9c:f7:fe:5f:5a:58:50:3f:53:03:e7:08:bb:cf:24:
f4:4c:66:0f:cf:4c:b4:b1:3d:1d:f9:63:30:8d:7a:
5f:94:7c:12:e3:54:02:ad:9c:0a:bb:d2:fd:1b:ab:
07:e3:9d:d3:f8:d2:22:77:08:b5:4c:aa:ee:d3:30:
76:8e:56:dc:4b:c6:9b:d3:ac:ba:d1:93:67:d3:b4:
68:7b:5b:5e:db:09:a2:e9:0b:e5:20:2d:78:d9:0e:
dc:13:17:57:85:e5:d4:3d:ab:4c:0a:3a:3c:eb:62:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:EE:31:CF:51:20:9E:A1:4E:A1:77:44:BB:30:D0:E4:73:1D:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FBA4ABA04BA11F092F04EA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:aa:fd:f7:f9:02:11:ad:87:76:f4:a0:ef:5e:8b:fa:12:dd:
f2:6a:c5:ff:9d:5f:4c:05:c8:0a:72:9a:41:19:2c:24:8c:23:
5b:8b:05:26:d6:c0:56:a6:32:04:fc:9e:35:06:c3:24:9f:c6:
86:32:71:91:31:5c:65:b8:fa:81:1b:ee:9d:09:fa:5b:9a:44:
cb:f4:40:d6:36:e2:e7:12:cd:33:66:7a:24:4b:52:60:e6:fd:
2e:c9:00:53:f1:19:27:56:f8:0b:6c:ed:89:f6:5f:5a:ee:5e:
0f:8e:33:03:0a:e2:a8:89:54:b7:5d:a1:9a:10:59:86:f7:6c:
dd:96:e7:e4:d6:2c:85:3d:3a:78:fe:bb:03:d5:d1:e4:44:7a:
d9:3f:78:b8:f5:bb:ba:f0:1b:48:66:d4:61:cb:e9:29:f5:34:
7e:b0:42:f4:4a:0e:9a:4b:45:73:63:b4:4c:88:f6:fa:6f:50:
61:f3:e5:98:09:1b:b3:1a:31:c3:43:59:f0:c5:ca:e5:79:d9:
56:99:47:db:6b:d6:0c:24:e5:e0:78:86:3a:aa:81:4b:33:de:
e0:b2:13:f4:8a:ed:8e:34:90:15:26:26:e3:42:cd:9b:59:0a:
49:19:39:05:fd:fe:e6:67:41:5a:15:38:66:5b:de:28:de:f9:
d1:48:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:36:28 2025 by rpki-client