Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1B4502F2E411EFBC494879762E951A.roa
File: 9D1B4502F2E411EFBC494879762E951A.roa (raw, json)
Hash identifier: UBqfkODWGV1B1jkTsNg1CXnQaovjnnkIpZzm8eLTYAo=
Subject key identifier: 4B:C4:26:86:D2:AD:61:B6:BB:01:66:BE:FC:2D:D3:D1:5A:E8:57:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1B4502F2E411EFBC494879762E951A.roa
Signing time: Mon 24 Feb 2025 19:21:57 +0000
ROA not before: Mon 24 Feb 2025 19:21:54 +0000
ROA not after: Mon 07 Apr 2025 19:21:54 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89326 (0x15cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:21:54 2025 GMT
Not After : Apr 7 19:21:54 2025 GMT
Subject: CN=67bcc6d5-8c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:7d:41:d4:c3:3a:d6:00:93:e2:5a:85:f5:
c4:a8:bb:8a:1b:b0:6b:53:87:aa:92:79:98:47:72:
e4:48:97:c1:dd:98:b3:aa:0f:af:f9:a1:8b:2e:b4:
34:c1:aa:64:c0:3c:c1:60:20:09:70:c3:db:37:9c:
be:9b:a0:e0:99:5a:dc:2e:03:69:3b:ad:6e:95:bc:
fd:b1:3d:1b:12:9e:0f:31:dc:03:fe:a5:18:ae:38:
e2:71:71:a0:53:af:6d:61:0d:2d:a0:ea:35:6c:5e:
64:02:2f:e6:6a:dd:49:21:c8:80:44:c5:6e:56:92:
6c:d2:13:61:fe:cc:e3:79:cd:2a:70:ba:3b:a9:cd:
c3:a4:a5:cd:82:c2:f0:b6:42:26:82:69:aa:e7:73:
12:86:8f:32:fa:d9:2a:1a:4f:d1:61:74:86:e3:d9:
60:25:af:b7:7e:36:aa:b9:4e:c1:e0:fc:78:a2:1c:
48:61:35:f9:15:5c:2c:fb:14:7f:f7:38:6d:bb:58:
2b:c6:52:7c:91:2a:5d:74:ea:13:5f:87:6d:72:17:
88:16:a0:82:08:e9:21:e6:e1:fa:04:58:e6:ac:e1:
59:53:81:e4:20:7b:e7:97:fa:ba:75:87:3b:67:a1:
54:29:cc:75:b9:5d:7e:cb:86:63:5c:51:a8:d5:e2:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:26:86:D2:AD:61:B6:BB:01:66:BE:FC:2D:D3:D1:5A:E8:57:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1B4502F2E411EFBC494879762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d1:f4:75:4c:b9:52:b2:3e:b8:f1:8f:d9:84:35:6a:ab:3b:
17:92:db:5e:62:15:db:e3:21:f9:84:84:61:e8:29:c4:4c:36:
a1:09:93:aa:03:0c:5d:f3:df:03:44:3c:e8:7b:e0:02:59:bb:
4a:50:fa:4a:13:5d:1e:1e:0d:e1:66:5b:65:37:03:94:37:5c:
a2:aa:d5:c4:23:0a:a0:46:60:67:ee:3f:32:0c:ae:7d:d7:d7:
c9:e4:cd:47:d0:5a:b3:0c:f1:1a:af:d3:3e:5f:c0:a9:f8:be:
85:6b:d8:15:0e:fe:5f:50:82:1d:29:81:c7:7d:8e:c4:7d:9b:
27:ef:1f:3f:91:d2:46:df:5e:99:c7:8b:10:7f:bd:1f:4b:7a:
e2:6f:46:48:00:19:b3:4d:c4:fb:7f:98:29:99:3d:a0:c7:70:
18:18:54:d0:d5:68:93:ef:78:cb:58:a3:1c:51:76:e0:b7:0f:
2f:e2:89:d3:a3:48:59:ee:ba:74:e4:c3:52:64:c6:5b:6a:54:
b8:44:42:07:7f:a5:44:f6:27:ec:29:74:e1:7d:d9:6d:38:d9:
a1:1f:f7:17:46:8a:7b:a3:8c:04:9c:e6:e7:69:fa:8d:57:c1:
46:58:a5:bc:38:37:b8:cf:5d:40:88:04:c1:76:ad:46:34:84:
7f:75:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:54 2025 by rpki-client