Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6642430F3B611EF9206EB88762E951A.roa
File: A6642430F3B611EF9206EB88762E951A.roa (raw, json)
Hash identifier: 21hH1xQch0koYOkYKQcxc5Ob5egbL2M4eXOPqLtNeEM=
Subject key identifier: 71:22:DB:53:8D:D5:26:D5:D4:E0:E6:1A:92:22:24:FB:35:C9:F1:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6642430F3B611EF9206EB88762E951A.roa
Signing time: Tue 25 Feb 2025 20:25:27 +0000
ROA not before: Tue 25 Feb 2025 20:25:24 +0000
ROA not after: Wed 09 Apr 2025 20:25:24 +0000
asID: 138915
IP address blocks: 154.95.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90073 (0x15fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:25:24 2025 GMT
Not After : Apr 9 20:25:24 2025 GMT
Subject: CN=67be2737-b13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:41:a2:5b:1e:0f:ba:09:57:42:9b:ec:4d:
fb:0d:ca:b2:06:75:58:e8:d3:95:b8:7b:20:b3:b1:
be:03:3f:ea:85:6a:aa:b4:9f:21:db:13:8a:6b:f3:
c8:fe:e9:c6:ca:9b:4b:da:20:32:68:23:3c:16:66:
d2:1e:0a:57:16:7f:e9:f7:2c:6e:27:44:d1:6e:a5:
d9:51:12:fc:42:90:1b:3c:3b:55:4e:8d:1b:d1:38:
9a:d4:b2:1f:dd:13:d8:96:8f:8c:08:d6:3f:a7:ef:
a0:20:f0:cc:5e:2f:dc:15:d4:55:c1:68:10:fb:27:
50:48:e4:a5:0e:0b:4d:cc:fb:45:8a:a4:0a:48:3d:
58:7d:84:49:16:5c:2c:9a:d9:83:89:6c:71:21:2f:
78:c3:54:4d:51:42:22:18:56:f2:66:e3:ed:c8:04:
c4:38:c9:80:30:6d:7b:ae:c3:b9:0b:82:53:d4:2d:
36:5f:6d:55:98:52:80:4d:eb:1d:c0:bc:5c:f0:ef:
56:4b:6b:b5:41:4d:b7:18:dc:04:55:bc:45:08:25:
99:53:cd:4d:b9:17:22:1f:ad:e1:07:54:5a:ab:0f:
57:5b:9f:14:10:c3:36:8f:dd:9b:8b:94:37:4a:d4:
46:21:f4:39:08:66:b9:de:fd:81:37:fc:99:e9:73:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:DB:53:8D:D5:26:D5:D4:E0:E6:1A:92:22:24:FB:35:C9:F1:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6642430F3B611EF9206EB88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:96:88:2a:8c:6c:1e:cc:0a:55:00:5b:ab:eb:97:6c:1e:ee:
ac:81:5e:3a:fa:98:5f:ef:d0:00:bb:a4:78:94:e8:18:bf:a6:
c1:c8:23:a9:75:6e:2d:3c:81:97:47:83:fc:75:37:be:c0:82:
bd:a6:52:71:97:32:9c:1e:f9:50:27:85:62:d3:6d:04:59:3d:
d9:fe:1d:87:96:c8:f0:d4:b6:6b:7b:59:7b:0b:0e:25:c8:cf:
da:a1:c3:4a:93:6d:83:ab:6b:0b:f5:f8:ac:ee:f7:71:d7:92:
aa:46:3b:b4:ae:94:8d:1c:83:2f:b1:d4:9e:fd:50:b5:94:8f:
9b:3b:9b:4e:f6:75:cb:15:79:00:e7:18:a1:47:01:be:a1:93:
7c:18:f7:61:2d:ae:f9:a2:54:94:2a:bf:88:53:6f:a0:39:ab:
07:10:af:f2:5f:7f:70:61:d6:2e:46:e9:53:ac:b4:58:fa:f9:
41:fb:61:92:e9:2d:bc:aa:e9:6d:de:b0:38:c1:90:dc:e9:8b:
56:25:2e:6c:79:90:08:85:6d:13:87:9d:95:1d:75:9f:06:ea:
fb:f0:57:b8:ca:93:fb:79:a6:9a:2c:08:9f:c1:fa:31:b8:b0:
44:44:44:eb:32:84:51:a9:ca:04:27:f0:fe:45:f8:93:cd:3c:
ce:f5:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:38 2025 by rpki-client