Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C667BCFE4811EFB7E59369762E951A.roa
File: 96C667BCFE4811EFB7E59369762E951A.roa (raw, json)
Hash identifier: xpKWYpfZ3YzHNbXqCqz7nLmRdDf1JQUqjMlwf+VVZeg=
Subject key identifier: F1:D3:78:30:D7:DB:EF:14:FB:05:E5:0B:CB:A4:88:79:84:AD:63:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017357
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C667BCFE4811EFB7E59369762E951A.roa
Signing time: Tue 11 Mar 2025 07:15:19 +0000
ROA not before: Tue 11 Mar 2025 07:15:15 +0000
ROA not after: Sat 19 Apr 2025 07:15:15 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95063 (0x17357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 07:15:15 2025 GMT
Not After : Apr 19 07:15:15 2025 GMT
Subject: CN=67cfe307-1f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:08:9d:19:b6:a3:e3:f3:e8:a5:56:3e:fb:
8e:a2:af:73:00:bc:53:a4:7b:32:b5:9f:fb:48:f8:
49:d6:e0:c1:f5:2d:a6:3d:2a:81:40:fa:04:b0:80:
83:1e:b9:b5:11:27:eb:b7:91:a8:6b:e1:e0:73:5b:
e0:cd:0a:66:6e:4f:fa:d8:9b:e6:c4:01:f4:5b:e3:
13:17:04:c4:8b:76:07:4a:65:01:e1:e0:30:f7:f2:
3d:15:b5:55:b6:fe:67:1a:0a:03:bf:2b:fc:6f:50:
4e:b0:5c:f1:41:8e:0e:75:59:85:1a:4a:e4:f6:ea:
31:1f:ad:35:5a:6c:7e:cd:d6:39:d5:af:0e:f4:98:
dd:65:cb:69:42:ee:59:27:ee:3c:7d:f4:64:8c:b4:
40:b3:2c:c1:d2:3e:13:5f:20:c9:25:df:43:f7:1a:
1a:e1:95:52:a0:e2:e2:86:50:9d:08:a8:b8:23:72:
33:9c:56:09:af:20:36:8d:50:b1:28:f1:18:f1:bb:
f1:c6:0c:79:88:83:4d:38:4b:4a:76:ab:38:22:89:
bf:87:30:ba:60:4c:15:28:f6:9c:07:f7:3f:c3:09:
d5:da:a5:63:ac:2f:b4:b9:98:55:b7:ab:b3:e1:34:
84:87:f9:07:e9:1a:56:c4:3c:78:bf:d1:2d:0c:ee:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:78:30:D7:DB:EF:14:FB:05:E5:0B:CB:A4:88:79:84:AD:63:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96C667BCFE4811EFB7E59369762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:cb:70:22:ef:70:3e:09:2e:dd:76:09:27:f2:63:6f:b5:9e:
05:c6:d1:92:a9:71:96:53:20:92:f7:ab:fe:ef:36:ba:58:7e:
6d:04:91:24:0e:ed:7d:97:7a:c4:d3:f3:c5:2a:90:87:74:e4:
3e:bf:d7:c1:02:f8:99:bd:14:68:f4:7d:b7:fc:24:a0:a0:9a:
e1:28:65:18:3f:24:79:75:1b:7d:95:d2:c1:1e:5b:cd:4f:c8:
6c:86:f4:20:f7:8f:c5:66:b9:02:8f:fa:b3:0b:eb:6e:a2:a2:
30:90:9f:40:71:08:fd:00:27:a7:88:5e:26:98:78:43:55:21:
8e:7d:c9:f4:fc:72:de:19:bd:b4:8d:bf:05:48:9b:9c:72:38:
aa:62:49:85:4e:22:f1:62:67:28:50:1f:f9:73:3e:17:c1:d9:
80:88:8a:5b:1f:b1:9d:12:a0:96:0a:09:1b:22:1e:2a:ce:05:
4a:f8:5e:6a:e8:f2:da:b6:2e:08:31:02:19:22:91:ab:08:b3:
13:09:95:23:0e:b8:44:3b:1d:bf:c6:5d:14:2e:d2:c8:0b:96:
9a:3e:2d:aa:2c:db:7d:df:20:dd:00:ce:f3:d8:91:29:19:0e:
81:46:02:1c:15:ca:53:6e:e5:ea:07:b0:55:e7:9e:8b:85:ea:
97:47:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:42 2025 by rpki-client