Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A18D20E2DA11EFAE4DEE70762E951A.roa
File: A2A18D20E2DA11EFAE4DEE70762E951A.roa (raw, json)
Hash identifier: 2oCJzMLSN104uidwxls0hifhhe5yHvSVp9JoH6G+7O8=
Subject key identifier: 71:BA:0F:EE:32:34:63:EF:E2:9D:66:DA:DB:CF:EC:B6:D2:B1:7D:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A18D20E2DA11EFAE4DEE70762E951A.roa
Signing time: Tue 04 Feb 2025 09:30:13 +0000
ROA not before: Tue 04 Feb 2025 09:30:10 +0000
ROA not after: Wed 30 Apr 2025 09:30:10 +0000
asID: 18229
IP address blocks: 154.210.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86243 (0x150e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:30:10 2025 GMT
Not After : Apr 30 09:30:10 2025 GMT
Subject: CN=67a1de25-c3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:e6:8f:2c:5f:58:7f:8d:87:90:e9:fc:c4:
12:5c:7b:2c:bc:1d:04:5b:02:4f:a8:db:d2:96:94:
ca:64:78:9a:94:9f:71:6b:b1:54:f4:bb:e3:a0:7d:
5a:51:a8:e5:85:e6:93:39:46:11:b0:b8:45:ca:88:
8c:cd:cd:59:86:95:3b:17:c6:09:38:49:4f:5c:e7:
49:86:30:94:fe:23:8d:bc:11:1b:46:38:b5:3d:e7:
07:aa:18:7e:8e:d2:21:b6:12:da:a8:d8:7e:db:dc:
d6:ea:9b:d0:81:9d:e5:2e:09:4e:f0:49:f4:c0:aa:
ab:96:30:22:10:f9:48:01:f1:ae:b0:06:57:e3:80:
dd:55:2e:0f:57:73:ef:6c:a6:84:c7:b2:78:ec:41:
01:62:b4:3f:bf:ac:5b:37:63:dc:29:4b:68:83:c4:
17:f2:ce:37:47:33:1e:06:97:23:12:55:6a:67:f2:
0b:41:48:42:ba:cc:e1:0f:7a:1b:e6:91:a5:23:0c:
fe:0a:af:dd:67:9d:a9:82:74:ad:eb:83:fd:4f:c3:
2e:f8:95:28:68:db:e3:43:b8:a1:0d:74:5c:9a:ff:
e1:28:9d:6b:41:22:07:57:21:26:ef:b8:59:43:ea:
9a:ac:21:5e:65:a5:62:8f:82:21:f8:ba:1d:ba:e8:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:0F:EE:32:34:63:EF:E2:9D:66:DA:DB:CF:EC:B6:D2:B1:7D:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A18D20E2DA11EFAE4DEE70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.219.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3d:03:e1:16:30:c1:ec:cc:fe:7e:4f:69:38:20:9f:3e:5c:
b9:66:c3:a5:fe:7d:28:00:08:45:39:46:03:01:cd:83:1f:4d:
aa:05:2d:6f:0a:d3:e3:fc:03:8f:aa:6e:07:18:d6:20:43:ec:
98:5e:f6:53:24:1c:b5:b2:5d:67:03:23:95:3b:11:23:84:ba:
7d:58:7f:d5:ba:f4:21:c4:d2:e2:05:4f:b1:c9:a1:7f:1d:6d:
58:91:58:4c:dc:30:2c:c8:5d:e0:dc:f1:a5:4f:4a:5e:6a:d1:
e9:ea:6e:ea:a0:42:9b:f6:b1:6f:46:ab:83:fe:86:8a:95:a2:
8d:8c:50:ff:b1:bc:65:ad:c4:67:e1:1b:db:9f:81:05:81:64:
79:b1:5f:ec:9f:3f:07:5e:2a:9f:eb:ec:8e:40:c8:e2:ea:2a:
21:15:45:a9:43:61:b0:85:24:63:5a:de:7f:5a:c8:ce:b0:89:
34:b2:c3:d1:f6:38:b5:95:1d:37:f5:53:58:dc:43:c2:ed:3a:
07:68:5b:5c:c8:4a:b1:32:fa:12:73:8f:85:db:91:c3:a8:aa:
14:df:e5:0e:70:01:36:f4:e9:4d:6a:cf:9b:fa:9a:f8:2e:d9:
74:ac:08:8f:27:0e:8c:99:e0:f8:f9:25:76:38:c1:10:ec:e5:
c5:02:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:35 2025 by rpki-client