Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D2BA44E31211EF91AE6962762E951A.roa
File: A6D2BA44E31211EF91AE6962762E951A.roa (raw, json)
Hash identifier: HIovDoLGqtqCFJRkLpxlnxG0x9V/+1hZAy8gTngOYEo=
Subject key identifier: C9:D9:0F:15:2E:4A:EB:9A:81:C9:77:91:03:1B:A5:26:F1:07:13:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015111
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D2BA44E31211EF91AE6962762E951A.roa
Signing time: Tue 04 Feb 2025 16:11:12 +0000
ROA not before: Tue 04 Feb 2025 16:11:08 +0000
ROA not after: Wed 30 Apr 2025 16:11:08 +0000
asID: 18229
IP address blocks: 154.210.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86289 (0x15111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:11:08 2025 GMT
Not After : Apr 30 16:11:08 2025 GMT
Subject: CN=67a23c20-dbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:2d:c8:6e:9a:3e:01:ee:6d:09:27:03:a2:
4e:b9:cf:5f:89:92:29:06:ff:1a:fc:2a:30:dc:6b:
ba:c5:d4:99:cf:6a:38:4f:84:f2:5f:d3:1e:37:12:
05:8b:0c:25:e9:6f:47:a2:84:a2:4b:21:ec:2a:cf:
d4:0f:d1:68:a0:0b:1a:38:71:cc:d4:ff:d4:42:eb:
2a:5d:35:67:ed:74:71:e0:d7:bb:3e:be:8c:55:c2:
c1:fe:7f:86:7f:9f:76:91:2b:6d:e4:2d:63:a9:13:
8e:b9:a9:9b:7a:a9:0f:a7:3d:5c:67:7e:ec:70:0f:
e7:bd:6e:0f:a8:25:53:60:42:c8:11:3f:a8:7f:ce:
03:f7:a7:38:b7:c6:4e:fa:ee:a2:e4:4c:3b:1a:52:
cb:ee:45:1a:f5:85:18:51:79:43:0d:01:a5:c0:c3:
92:ed:9f:c7:3b:f1:6e:07:9d:36:ac:fa:ca:7b:70:
58:8f:fc:9d:88:32:1a:97:5e:b0:fb:58:51:99:55:
6b:95:eb:26:3d:fc:4b:87:ba:3e:d3:92:3d:68:2c:
e2:58:f0:55:0c:1c:c0:d8:28:af:c3:17:14:fb:65:
a1:94:d7:35:62:07:86:f8:c9:dc:29:d6:71:4f:27:
24:46:e3:b5:8d:5b:fe:10:87:47:c5:b5:17:3e:cb:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:0F:15:2E:4A:EB:9A:81:C9:77:91:03:1B:A5:26:F1:07:13:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D2BA44E31211EF91AE6962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.132.0/24
Signature Algorithm: sha256WithRSAEncryption
80:dd:da:7c:f9:58:0e:b1:34:b0:02:7d:11:79:d9:e2:9b:ab:
9c:59:4a:40:f6:93:0f:db:9c:b5:39:1c:64:27:07:86:f0:10:
7f:19:07:c2:21:45:22:8e:8d:65:4a:5e:9d:8f:d5:aa:40:2a:
ce:2e:19:12:94:07:a1:70:69:97:7a:2f:f2:05:9c:30:46:c0:
28:44:ac:44:c1:a2:7f:9f:4d:96:c7:a8:84:0e:d4:49:4c:22:
1f:21:8e:49:5e:be:3a:2d:90:83:e9:86:47:d7:16:d2:9f:92:
45:d6:ab:2e:b3:28:a2:b1:ba:c4:58:0a:9f:3a:e0:1b:78:ae:
63:71:a3:15:ce:d9:0c:95:51:3a:5f:d3:02:1d:c2:02:7b:02:
ea:ed:26:cc:52:b9:cf:61:80:de:e3:2b:58:7d:dd:4c:ac:b4:
22:b5:c6:83:b9:ec:4b:a4:e2:a6:23:93:00:2a:01:0b:94:03:
76:7a:0f:94:ee:6c:07:2f:51:6a:a9:87:c0:c5:74:b4:fc:ee:
19:c1:8e:e3:b3:67:d8:ff:a2:b9:0a:44:6b:d2:44:c8:c8:e0:
22:ef:f0:d1:4f:ca:59:bf:3c:8a:80:b0:9c:27:9a:0e:12:55:
4c:92:bc:d2:08:44:73:bf:43:de:d5:ed:b4:23:f0:71:75:2b:
15:dc:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:50 2025 by rpki-client