Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9661BCC8F81B11EFA6E158AF762E951A.roa
File: 9661BCC8F81B11EFA6E158AF762E951A.roa (raw, json)
Hash identifier: 186EqAJFagW/0kjAMEImfLgMVRMJ66VvlbNhqt15M9c=
Subject key identifier: 02:41:6C:CE:60:F9:A1:34:08:66:9B:93:E6:99:D3:65:01:CF:C7:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9661BCC8F81B11EFA6E158AF762E951A.roa
Signing time: Mon 03 Mar 2025 10:38:04 +0000
ROA not before: Mon 03 Mar 2025 10:38:00 +0000
ROA not after: Wed 30 Apr 2025 10:38:00 +0000
asID: 138915
IP address blocks: 154.93.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94249 (0x17029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:38:00 2025 GMT
Not After : Apr 30 10:38:00 2025 GMT
Subject: CN=67c5868c-a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:ae:46:23:58:10:38:b9:ff:76:c0:7c:9c:
ce:c5:24:08:74:1d:a7:89:18:8e:fd:ab:af:37:a3:
19:18:86:40:dd:36:46:f6:c1:c2:20:3e:80:1b:42:
a3:16:9c:3b:4e:32:d0:84:d3:10:da:2d:15:6d:e2:
00:c1:9f:ae:4b:0b:cc:a7:fd:9b:e2:c1:f7:e9:d4:
0c:4b:02:8b:b6:51:9b:ae:c7:64:49:99:2f:51:f1:
28:48:d2:52:d2:1a:6c:c7:e8:1f:9e:4f:cc:95:9e:
c3:88:c8:13:34:77:14:0b:8b:66:a6:32:8f:fb:28:
87:3e:f1:1d:60:c6:66:dd:cc:1e:2a:1c:a0:f3:7c:
8d:4c:ae:d8:2f:86:c4:bb:92:9c:42:ec:aa:06:f1:
d2:34:d0:8d:52:5e:45:42:8a:48:25:a5:cd:29:74:
7c:cb:74:a6:8e:4c:15:40:c7:bb:c8:5e:0d:dd:b6:
d7:a2:cd:17:51:be:93:e7:62:da:19:c1:97:4b:4f:
7e:f3:94:1a:be:4e:54:cd:d9:09:0c:22:36:ff:e9:
51:f4:e3:5a:f8:c4:d0:a1:42:21:1b:29:1d:c2:eb:
5e:46:7d:aa:64:6b:e6:56:97:65:23:60:6f:b8:22:
96:f3:16:17:df:49:8c:da:11:c9:d1:bd:ab:ef:a4:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:6C:CE:60:F9:A1:34:08:66:9B:93:E6:99:D3:65:01:CF:C7:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9661BCC8F81B11EFA6E158AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:31:7c:7f:db:06:eb:02:9f:fe:7e:4d:69:99:4c:bc:e1:17:
41:25:64:80:7c:a5:0e:ef:1b:b5:42:75:3d:80:ad:5b:9c:0a:
02:b8:b5:01:cc:29:dc:4f:e3:79:93:1d:f3:29:64:4c:8e:e1:
c7:79:25:f1:03:cf:ac:6e:7d:9b:84:28:b2:b5:92:1e:b1:ea:
3d:10:6e:38:f1:2c:bd:9e:13:3c:4a:81:42:74:49:4c:23:a8:
4d:73:a5:08:24:86:40:73:d9:41:4f:a6:92:e6:2a:4d:fe:c8:
96:10:58:d4:dd:01:a1:35:df:47:6f:b1:ac:c8:ae:5e:bb:97:
9c:23:ad:c1:62:e2:53:77:53:89:0a:c7:18:54:43:55:93:9e:
4f:d6:47:1b:fb:04:1b:21:cd:a5:42:60:4b:3e:e2:1a:e2:7e:
1d:0d:d1:e8:6a:69:31:af:20:1e:52:54:cf:39:3d:2d:f9:2a:
a8:f6:f6:cb:3e:97:90:36:6e:3e:6e:55:75:34:cb:da:85:46:
fb:21:c6:78:77:df:da:6f:b2:9c:d2:15:c9:3b:a7:0f:1d:de:
e8:1e:b5:0d:8a:d6:3c:2d:4b:8f:4a:7d:9b:c4:53:02:5c:5a:
e3:fc:9c:b5:a3:e5:09:43:c6:7e:be:2f:40:d2:d7:21:20:bd:
f1:2a:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:40 2025 by rpki-client