Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99225510F45D11EF99D77894762E951A.roa
File: 99225510F45D11EF99D77894762E951A.roa (raw, json)
Hash identifier: FAw1MI+OwebVqvMukWxAvnNbyhILWEuXAzW7Pzb3rFc=
Subject key identifier: 2C:B8:72:CB:FE:55:3B:C1:11:4F:95:24:7E:60:0E:C8:C7:49:4F:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01651C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99225510F45D11EF99D77894762E951A.roa
Signing time: Wed 26 Feb 2025 16:20:31 +0000
ROA not before: Wed 26 Feb 2025 16:20:27 +0000
ROA not after: Sat 19 Feb 2028 16:20:27 +0000
asID: 17561
IP address blocks: 154.82.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91420 (0x1651c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:20:27 2025 GMT
Not After : Feb 19 16:20:27 2028 GMT
Subject: CN=67bf3f4f-6696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:04:8d:1a:62:bf:29:87:8c:dd:d4:d0:47:
ed:00:96:e5:15:cb:58:2d:2b:c0:f8:58:c8:75:c1:
59:32:18:ba:5d:37:33:c5:4c:e9:ce:46:f3:9b:f1:
af:7a:7b:7d:cd:26:58:fd:02:d5:92:22:d3:a9:88:
5e:d8:0b:bd:f3:53:40:2d:1d:56:ab:82:9d:ec:b0:
69:53:5f:89:e0:d1:0c:d4:81:7e:2f:34:d6:49:a3:
40:70:8d:8d:cc:73:0d:5c:50:de:bc:e8:1b:10:b1:
cf:be:a8:f2:1f:f9:e7:82:a6:41:22:da:d0:5c:4c:
44:7a:3d:6d:dc:9a:4d:3f:b2:0a:37:e8:df:a3:08:
32:a4:2b:8d:ec:81:5c:07:ed:12:e6:0e:16:cb:39:
7c:bb:c4:ed:e7:96:97:0e:cb:b0:b5:47:d4:e1:44:
a2:79:77:5d:57:9c:ea:de:e7:f4:36:29:e5:06:d4:
2d:9c:23:29:bd:7a:68:4d:97:0f:3f:2e:c1:23:57:
14:4a:a7:b1:93:c6:3a:9c:bc:90:68:d0:03:a5:67:
60:cb:01:d9:25:05:75:e3:51:56:5e:5e:22:c9:c2:
34:09:c5:ea:01:e0:48:15:3c:06:43:d0:01:fd:04:
5b:ed:05:56:94:2a:cd:43:eb:d8:89:18:86:df:fe:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:72:CB:FE:55:3B:C1:11:4F:95:24:7E:60:0E:C8:C7:49:4F:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99225510F45D11EF99D77894762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d4:9a:10:7a:e7:17:d9:be:e6:c1:de:39:ee:89:16:1f:ea:
af:a4:f7:12:18:95:28:16:62:54:71:10:02:97:b0:b5:f1:1a:
1e:8c:ca:21:d5:b1:99:b3:64:c6:68:4c:23:fc:21:45:07:ae:
1b:be:6c:bb:78:ca:9a:a8:b2:82:98:70:f5:75:08:74:35:3c:
74:4e:a1:6d:ee:81:77:3d:91:e1:a8:95:da:ee:a8:bf:9c:ad:
4b:d0:f8:d5:cc:22:5b:3a:54:2a:70:de:fd:20:07:d9:83:b1:
bd:12:c2:d7:44:1a:ea:f6:b8:ab:45:66:e0:b5:6d:ab:94:b8:
cd:c2:14:df:ee:f6:a3:91:8f:47:16:86:da:8f:27:f1:2c:af:
2b:8f:f3:96:ac:9c:2f:d4:5f:65:a2:0c:73:c6:e9:22:84:dd:
79:ee:c4:c3:96:a8:35:bf:58:83:05:1b:df:a6:39:41:94:38:
a8:1e:ae:e9:f1:cd:bd:7f:3e:4c:d8:fa:18:d2:e5:85:e8:c4:
70:06:61:02:db:59:f7:6d:e0:37:d8:b0:fa:15:65:2b:75:03:
6b:fd:ed:12:8b:58:d2:b6:83:6f:a9:97:7e:8d:49:07:b4:76:
86:eb:2d:4b:75:ca:e2:f2:67:19:83:a7:e8:a7:f7:63:d7:e4:
fe:35:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:09 2025 by rpki-client