Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A052C548C91211EF96C950B2762E951A.roa
File: A052C548C91211EF96C950B2762E951A.roa (raw, json)
Hash identifier: pbHQ72qhuXWMzJEV8VM2FB59LFBGdlmsbWZyRlvtSNo=
Subject key identifier: 1F:A2:DA:E0:81:FB:98:B5:0F:06:84:10:3B:6B:7E:CE:41:43:BD:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A052C548C91211EF96C950B2762E951A.roa
Signing time: Thu 02 Jan 2025 14:05:31 +0000
ROA not before: Thu 02 Jan 2025 14:05:27 +0000
ROA not after: Mon 13 Dec 2027 14:05:27 +0000
asID: 17561
IP address blocks: 154.221.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78517 (0x132b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:05:27 2025 GMT
Not After : Dec 13 14:05:27 2027 GMT
Subject: CN=67769d2b-50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:80:5b:c8:20:bf:36:c8:0b:cc:8d:15:53:
a1:1d:d1:65:bb:b8:8f:1a:41:0a:e2:f3:43:9c:8d:
a8:4f:0a:00:46:a8:46:49:40:54:16:fe:17:bb:f8:
80:50:37:c2:79:33:ef:16:57:9f:7b:27:c5:5d:11:
03:1e:c8:b9:6a:50:1d:10:0a:ce:62:6d:6e:d6:c2:
fc:7b:85:18:9b:ab:18:01:b9:89:31:bf:d8:74:b7:
de:a1:ef:63:af:5c:78:26:06:15:5b:4a:ac:e6:12:
ee:1f:fa:a8:a6:be:69:d7:9b:f9:50:bf:2e:2c:f4:
a9:45:3e:11:83:74:43:8f:e8:1e:ff:e3:1a:bc:22:
d0:c6:d9:16:bf:a8:86:33:21:62:d2:28:f8:ee:d9:
81:f9:d8:db:62:4c:fe:1b:a5:1a:34:94:49:d5:28:
22:18:15:1d:09:f1:20:28:3a:1f:4c:d1:fc:be:e9:
68:e4:74:a0:55:dc:e8:42:07:80:62:8f:6f:ba:3c:
ec:0b:3d:51:f3:10:22:8b:ab:67:10:b8:f6:0a:35:
32:0f:3b:96:94:d6:0c:d3:3f:3a:95:9f:fd:71:5e:
08:1b:0c:93:30:ac:45:bc:bc:ea:56:4e:c8:f0:13:
55:88:3f:fc:69:a3:fc:d7:28:6d:75:5d:e0:cd:ba:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A2:DA:E0:81:FB:98:B5:0F:06:84:10:3B:6B:7E:CE:41:43:BD:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A052C548C91211EF96C950B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0c:68:d6:3d:0b:4f:7b:f7:99:c5:d8:d8:53:34:d3:8f:df:
dc:f7:1e:b7:9b:4b:8a:4d:5b:2b:55:9d:1a:6f:72:a5:90:90:
aa:e6:6c:5a:c9:d9:79:ef:31:bc:8b:03:7e:b5:28:fb:5a:5e:
92:b6:7e:48:f5:c8:7d:b2:2e:fc:f3:70:a6:69:11:68:ca:8b:
9a:01:d4:72:00:0e:60:4a:24:4e:3c:2b:8d:f8:23:3e:76:d6:
59:c6:b6:b3:f8:b3:af:35:e6:ea:a7:98:6c:a3:cd:5f:f7:cc:
77:ef:ce:52:7c:bb:9d:1c:70:b1:fa:76:48:98:c1:3e:ed:fb:
7d:f5:62:b2:60:08:73:91:f1:2a:6c:29:46:9e:aa:57:34:22:
a9:19:0f:6f:c3:06:bf:5a:03:94:f4:a3:2d:31:9b:79:2e:44:
cf:2e:65:a4:e1:73:0b:5d:ec:b1:ee:02:41:23:4f:1a:22:73:
a5:24:34:2e:4b:a5:8a:79:ef:46:16:76:11:4a:b8:31:71:a2:
6e:9d:a2:a8:07:44:a2:f7:d4:c7:f5:5e:23:51:fb:6e:57:c0:
b8:c4:29:a8:87:2a:8a:45:d8:ce:1d:54:5a:c8:0c:23:2a:57:
eb:9f:d6:3c:7c:5d:10:ba:c6:0c:a2:ce:99:de:2a:4c:70:33:
62:55:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:10 2025 by rpki-client