Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75E730CF2711EF9B94F071762E951A.roa
File: 9E75E730CF2711EF9B94F071762E951A.roa (raw, json)
Hash identifier: iudKWGW45stgVwR1iJ2P7r+z0+Kd+C6L2uAqjowFS/I=
Subject key identifier: BE:D3:DE:1D:05:94:9A:A2:E5:13:72:DE:60:13:06:91:63:16:4C:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75E730CF2711EF9B94F071762E951A.roa
Signing time: Fri 10 Jan 2025 07:50:54 +0000
ROA not before: Fri 10 Jan 2025 07:50:50 +0000
ROA not after: Fri 16 Jan 2026 07:50:50 +0000
asID: 138965
IP address blocks: 154.222.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80309 (0x139b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 07:50:50 2025 GMT
Not After : Jan 16 07:50:50 2026 GMT
Subject: CN=6780d15e-e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:42:a9:45:e9:50:88:20:f8:eb:84:f0:1d:
ef:83:bd:46:d5:af:42:4b:60:68:86:7f:0b:f6:78:
b6:25:5d:aa:2f:b2:1c:66:c9:33:e9:51:86:26:c3:
25:fb:30:40:e8:5b:ca:a8:fa:52:e2:21:c7:2c:e5:
ac:b1:d1:e6:9a:cd:cd:44:1e:2f:ab:db:e1:8c:4b:
66:58:5f:12:6b:32:b2:4a:9f:93:12:63:dc:26:15:
78:c9:1b:7b:79:4c:9e:af:93:b1:fd:a7:7a:65:31:
ea:5d:4f:0a:43:da:6d:38:91:cb:3b:d5:04:54:89:
7a:8c:66:dd:98:14:0f:2f:e4:ca:f1:35:65:03:2f:
b2:c5:7b:8e:2c:7e:c1:8f:58:e7:ba:7f:3a:48:af:
85:26:dd:27:c8:4a:cc:d9:25:f3:ca:f0:f1:83:1e:
0f:91:1a:a6:fd:6c:ea:eb:01:99:d6:c4:67:2e:a2:
2f:5e:42:c4:9f:2d:01:0c:8b:77:9e:98:14:8a:1c:
93:31:e3:c4:68:20:9d:50:d9:4c:08:d1:9e:25:54:
51:87:01:d4:b8:ec:e5:d3:96:54:07:e9:38:ed:9f:
12:75:fc:0b:8a:48:d9:63:8e:60:e6:d2:84:5a:c7:
90:fe:d8:6f:b0:9b:12:62:a0:31:34:56:50:17:03:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:DE:1D:05:94:9A:A2:E5:13:72:DE:60:13:06:91:63:16:4C:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E75E730CF2711EF9B94F071762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ea:dc:80:0e:5e:c5:87:50:44:af:6e:cc:84:08:3f:c3:55:
81:c8:39:88:cb:e6:25:6c:5f:e3:fa:87:bc:87:b5:b9:a6:45:
37:5e:13:0a:95:6a:ff:9a:0d:9e:ff:ae:17:08:57:fa:61:e3:
f3:2c:76:75:29:d0:58:b7:12:bb:df:ee:fe:3a:25:b5:fb:28:
4e:81:7d:df:5c:5b:16:ec:24:cd:43:71:79:23:d7:41:8a:91:
61:8d:83:78:3f:c1:42:30:5c:47:61:e3:c7:36:e3:6c:19:54:
ed:ae:04:01:76:de:36:02:d5:5c:ed:3d:25:b3:43:cd:9a:48:
ef:b0:a8:c9:36:ee:ca:ed:f2:64:d2:27:8a:0e:b6:c6:cd:86:
12:1e:c0:53:ff:a6:96:42:33:8e:95:33:78:83:bd:45:ac:5d:
97:8e:e4:89:a6:52:0c:7b:42:61:0c:3b:23:24:32:8d:c5:42:
ce:af:8e:49:da:ed:3b:13:be:cd:cd:ff:cc:a8:22:df:99:e3:
02:d1:93:20:63:bf:f2:59:81:87:a2:c0:21:7d:c6:de:bb:d6:
bd:0e:6f:97:4e:7c:12:bb:01:d1:58:cc:9a:fd:91:b3:a4:9c:
98:ac:e3:c4:07:ec:2d:c3:a3:2c:b3:0e:70:95:8a:f8:fd:f2:
65:0e:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client