Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501482EF47111EF92A811A0762E951A.roa
File: 9501482EF47111EF92A811A0762E951A.roa (raw, json)
Hash identifier: IVTRVg7CZEdXrFlDotQ01FYS49eK21Z8y/HyGNSQN44=
Subject key identifier: F0:34:98:C6:75:0D:42:D0:79:32:9A:BF:80:2B:38:F8:3A:A0:D6:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016568
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501482EF47111EF92A811A0762E951A.roa
Signing time: Wed 26 Feb 2025 18:43:34 +0000
ROA not before: Wed 26 Feb 2025 18:43:30 +0000
ROA not after: Sat 19 Feb 2028 18:43:30 +0000
asID: 17561
IP address blocks: 154.218.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91496 (0x16568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:43:30 2025 GMT
Not After : Feb 19 18:43:30 2028 GMT
Subject: CN=67bf60d6-44d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:7a:d8:19:f4:d3:a3:09:eb:54:c7:9a:31:
fe:bb:8e:d5:e7:d8:6f:8e:24:2d:b5:69:92:77:ef:
84:20:10:66:8e:00:1d:cf:87:02:8b:06:63:18:f3:
2b:90:60:9d:5c:8f:62:84:73:ca:12:6a:c9:9e:b7:
6d:1a:a8:af:44:c9:18:80:88:b7:27:fc:11:bb:48:
4d:b1:68:e6:b3:f5:b9:e2:88:6d:f3:c9:13:2f:b5:
60:dc:81:aa:91:e2:b4:d7:64:97:fe:49:45:e0:da:
8e:e1:07:87:30:96:42:56:03:16:58:d3:c6:5c:bc:
c8:b6:66:cd:fd:d8:6a:6e:43:a9:7a:bf:cc:74:1d:
b6:af:92:58:bd:ed:4a:8b:09:f9:31:66:85:ea:4e:
d9:37:70:77:2a:83:98:b5:3a:73:ec:73:7c:0e:ac:
fe:0b:6b:6a:9e:a0:c3:be:f3:86:62:25:59:bf:17:
15:c7:55:70:9b:c6:3e:2e:a5:e8:75:50:16:df:96:
8e:0b:fe:98:8b:6e:f5:e5:ee:01:0a:6e:55:f3:bc:
5c:26:c9:18:71:55:2e:b8:6c:0c:9c:b3:f9:3d:f3:
4c:5c:11:41:8d:6f:42:82:19:02:82:dd:19:06:a7:
bf:61:61:0f:8b:c5:c8:aa:76:eb:97:85:c2:44:e5:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:98:C6:75:0D:42:D0:79:32:9A:BF:80:2B:38:F8:3A:A0:D6:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501482EF47111EF92A811A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:7e:e6:06:08:e5:70:0f:f0:ec:e4:09:6d:58:b2:99:9a:de:
e6:5a:94:fa:7a:87:36:1c:bf:ea:3c:e0:f7:6c:bb:47:21:21:
b0:9f:66:2e:23:06:10:c1:d8:a2:40:af:9d:64:a2:58:9a:90:
2e:88:99:b9:9e:0f:1c:d4:b2:fe:00:7f:8e:d2:52:b1:05:45:
0b:cd:72:41:6a:e4:f6:d2:6b:d8:34:52:4e:1d:51:59:9f:9d:
bf:c2:e4:53:72:9e:cb:d2:43:8e:ae:14:70:4d:db:f3:c7:9b:
2a:af:e4:e7:2d:f9:6b:03:8d:1b:fc:c2:bd:fb:e7:62:95:c5:
7f:c1:98:63:bf:4b:ec:0a:a2:6a:e3:4b:90:fa:b8:a2:eb:fe:
7d:7c:ec:03:4d:3f:fe:f3:f2:36:79:89:f3:a4:49:1a:d7:94:
78:3d:36:84:c4:f2:2e:34:bc:8b:6b:db:4d:61:1d:ab:7d:f0:
9b:86:d8:09:1f:d7:a3:fc:8d:c6:c4:6f:c5:e1:c8:3a:55:fd:
83:fb:1d:b3:52:82:15:a2:7a:22:e9:e6:1b:47:54:cf:8a:a5:
dd:be:d3:dc:f8:08:8f:02:82:b7:85:21:1f:ca:6f:b8:31:50:
59:8e:3c:ed:81:ba:d5:5b:0b:4c:52:0c:09:fa:c4:f4:4c:b9:
5b:93:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:57 2025 by rpki-client