Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E50A78DFEA11EF9D15D6A0762E951A.roa
File: 95E50A78DFEA11EF9D15D6A0762E951A.roa (raw, json)
Hash identifier: zL1gWsbpbjHdpYheI82Hx1s/2zi7q8YZzqbq051FI4k=
Subject key identifier: 14:DF:DC:6D:51:9E:9A:29:B0:A7:74:7B:A1:47:C1:22:8A:BB:B8:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E50A78DFEA11EF9D15D6A0762E951A.roa
Signing time: Fri 31 Jan 2025 15:46:50 +0000
ROA not before: Fri 31 Jan 2025 15:46:47 +0000
ROA not after: Sat 03 Jan 2026 15:46:47 +0000
asID: 40065
IP address blocks: 154.212.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85493 (0x14df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:46:47 2025 GMT
Not After : Jan 3 15:46:47 2026 GMT
Subject: CN=679cf06a-1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:34:b9:d8:45:ba:fe:d7:21:c9:f6:91:83:
51:66:69:84:ad:26:ab:47:c4:a2:ac:ec:65:d7:1e:
e0:ac:b8:1a:ce:e9:28:a1:74:3c:0d:66:ba:87:45:
82:2a:9d:e3:fb:8b:dc:3f:35:69:46:14:71:85:02:
0b:f8:09:5a:77:da:37:49:03:a7:45:99:13:6e:a7:
8f:1d:ad:0a:e2:0a:73:75:98:7b:07:53:b4:9b:fd:
0d:e9:2a:32:22:93:5f:48:80:e2:b4:69:86:6b:56:
13:21:a9:74:9e:44:f6:8e:57:a1:a4:59:a7:34:4a:
6d:d7:9f:7c:57:a2:93:cd:70:2a:17:ce:29:93:96:
d7:29:11:c3:ef:78:b3:86:50:d5:d9:59:a6:26:9e:
f5:b6:a4:19:ef:cd:2f:63:0e:b6:1c:bf:e1:ed:05:
98:6d:b9:47:99:f5:1a:98:56:a3:ab:e3:9a:97:5d:
dd:af:ea:d7:ae:67:92:1a:79:7a:eb:81:e1:31:1a:
4f:e5:8a:cc:7f:5b:41:a2:be:c1:05:2f:6b:2a:7f:
62:63:bf:e1:fd:aa:73:58:84:68:9b:52:6c:0e:ac:
77:43:cb:1d:97:db:af:30:de:52:3d:f3:de:79:9d:
1a:00:a7:7a:ba:9d:aa:93:f9:16:06:51:89:01:5a:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:DC:6D:51:9E:9A:29:B0:A7:74:7B:A1:47:C1:22:8A:BB:B8:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E50A78DFEA11EF9D15D6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.2.0/23
Signature Algorithm: sha256WithRSAEncryption
21:5e:71:2f:6d:1f:31:fa:61:72:fc:23:8e:dd:a2:38:94:da:
42:c9:83:f8:8f:5f:36:23:73:cd:19:52:98:02:f1:f7:fd:9c:
bf:d1:d9:f7:98:59:43:68:e6:90:3c:8a:e5:a1:90:07:61:a3:
ab:8b:81:9b:5b:1c:2b:56:74:3d:f3:64:df:33:1d:be:a3:19:
ca:fb:c9:16:0b:ba:f5:8b:e5:ff:c3:d7:d1:de:57:94:41:aa:
f6:ed:6a:93:cd:4c:4d:41:98:b2:9b:eb:01:5a:80:f1:d5:27:
b8:3c:86:c3:ce:c6:50:bb:2f:52:61:1c:0f:70:1e:35:08:25:
16:cd:fa:e4:56:3f:88:61:9b:dd:6c:92:68:d7:74:4e:3c:a2:
7d:f4:87:0f:92:09:b6:be:c3:8e:be:43:af:f3:81:b5:02:97:
c0:51:bf:f5:d5:bc:6a:86:a5:c1:92:38:c6:6e:d9:f7:e2:18:
4e:d8:44:e7:8b:e7:ef:83:87:60:33:67:16:1b:06:38:7c:37:
97:fb:81:9a:74:ca:be:e4:81:f9:b2:1a:d1:a0:b7:6c:84:54:
11:17:bf:2d:3e:fe:5f:01:b7:20:67:a9:4f:f9:16:13:09:12:
77:30:44:92:f2:21:fb:a6:ca:72:f6:7a:36:4c:cc:02:40:7a:
2b:f1:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:34 2025 by rpki-client