Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A11930BC4311EFAA14B394762E951A.roa
File: A6A11930BC4311EFAA14B394762E951A.roa (raw, json)
Hash identifier: Sn7VwpAYXGeRqqY1/apdWsUvr2PUsJEWBy+k9MpAWfg=
Subject key identifier: 39:4E:C1:69:F4:2D:E4:9E:C6:4D:B9:F5:89:72:56:AD:E4:C8:61:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A11930BC4311EFAA14B394762E951A.roa
Signing time: Tue 17 Dec 2024 06:53:42 +0000
ROA not before: Tue 17 Dec 2024 06:53:38 +0000
ROA not after: Sat 21 Jun 2025 06:53:38 +0000
asID: 201411
IP address blocks: 154.202.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72625 (0x11bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 17 06:53:38 2024 GMT
Not After : Jun 21 06:53:38 2025 GMT
Subject: CN=67611ff6-bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:de:f3:25:92:e7:85:02:f8:30:78:e7:16:
ce:04:99:9a:1c:29:69:f9:64:cc:f5:f4:d7:32:25:
ef:cd:cd:c9:e0:62:70:42:5b:65:b4:09:8f:5d:7c:
b4:06:1a:bc:d0:88:3a:7f:e2:17:56:70:c9:6a:9d:
54:7e:2f:47:a1:df:ff:8f:be:d7:45:c5:34:20:49:
2a:09:79:31:a6:e8:8e:b7:c4:2b:22:b6:5b:d3:d9:
97:75:ef:9d:87:35:00:3f:7f:61:38:9f:58:91:d5:
62:b0:36:ad:91:c2:60:da:a9:c3:e1:ce:9a:bc:b2:
da:60:09:b2:55:59:88:fc:2d:4a:ee:0c:20:79:33:
19:c4:d8:1b:de:73:9d:6b:63:02:f3:dc:bb:f4:ff:
55:8d:8b:85:fc:64:15:10:c4:42:0d:a7:8d:ec:19:
6b:6c:fb:d6:e8:bc:dd:4e:a1:8d:f3:32:d1:2d:ea:
b8:05:70:3f:cd:3e:99:17:d3:e4:60:c3:3a:32:47:
a2:03:91:22:94:6e:ce:d1:cf:14:df:ea:8d:86:9e:
bc:95:be:f1:13:56:b2:66:2b:ba:03:e9:15:05:88:
94:b6:da:e1:c8:2b:7e:99:08:5e:06:96:53:63:0d:
14:2c:cb:2a:f7:3e:df:c9:2b:ce:34:ed:03:fe:4c:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4E:C1:69:F4:2D:E4:9E:C6:4D:B9:F5:89:72:56:AD:E4:C8:61:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A11930BC4311EFAA14B394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d4:fe:e2:75:5e:03:a2:4c:15:5c:3a:68:ce:03:9e:79:7d:
20:f2:37:1a:03:c1:78:b5:d3:fc:9a:a4:9d:17:00:4f:49:dd:
1a:48:28:98:c8:d2:64:e6:e8:8c:20:9e:02:20:db:c1:6d:5c:
a9:70:9f:75:cf:ab:4c:99:f2:11:45:76:44:8b:11:21:5d:ad:
e2:d8:53:68:fa:e0:ff:c1:ee:0e:ca:d0:57:87:ff:09:90:a7:
78:3c:99:ef:c0:31:70:a0:67:d9:73:de:0c:c0:10:c3:00:e6:
5d:9d:e5:26:fb:3d:5e:ec:87:9d:88:1d:ce:0f:f6:7a:62:ef:
a4:5a:b6:6d:d5:aa:23:d0:27:91:cf:8b:b6:33:bd:09:c4:99:
fb:97:15:23:22:f8:32:ce:6e:91:52:d1:a2:66:a9:13:ed:b3:
ee:e5:25:81:b0:d6:d8:be:aa:f8:a3:e8:ad:2a:7a:9b:1e:25:
eb:fa:69:b4:d3:e9:52:fe:e9:75:74:1f:5e:69:9d:47:ec:5e:
21:bc:ab:79:3a:1c:fd:f5:c5:39:34:78:ac:fa:8d:05:26:2c:
95:74:55:aa:dd:b3:a0:18:fe:80:d5:b0:a1:d2:5b:b8:eb:7d:
20:ab:b6:53:f1:a6:04:04:9e:c4:78:fb:5e:00:8c:07:ba:c4:
46:95:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:26 2025 by rpki-client