Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC19646CE06A11EFB2E65D8E762E951A.roa
File: AC19646CE06A11EFB2E65D8E762E951A.roa (raw, json)
Hash identifier: zrd8VXHYyBWn3Irl3pLmP7YTE5dxjHHTO2D7DWocjnA=
Subject key identifier: 41:35:F5:DE:2C:28:48:1C:40:F3:0C:F1:35:65:D5:E3:FA:0F:C4:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC19646CE06A11EFB2E65D8E762E951A.roa
Signing time: Sat 01 Feb 2025 07:03:43 +0000
ROA not before: Sat 01 Feb 2025 07:03:39 +0000
ROA not after: Thu 01 May 2025 07:03:39 +0000
asID: 328608
IP address blocks: 154.83.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85638 (0x14e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 1 07:03:39 2025 GMT
Not After : May 1 07:03:39 2025 GMT
Subject: CN=679dc74f-2515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:67:18:b7:2f:19:75:f7:02:1c:8b:bf:8e:
6b:6d:bd:ea:13:6d:d6:6f:2d:46:99:34:ad:fa:45:
4a:33:f5:77:a1:9b:8d:02:3e:3b:59:70:ac:4d:b8:
29:f5:39:d0:f6:41:3e:0e:48:05:4b:d9:bc:cf:14:
84:15:1a:22:eb:b4:90:5f:26:2d:b8:33:c7:03:f1:
00:da:83:56:56:81:c7:4c:d5:e2:b6:86:2c:4b:f2:
fd:07:36:3c:22:33:28:98:17:bb:94:91:2f:7c:f6:
36:35:77:0f:d8:f0:f3:7f:16:0b:d4:9d:d9:24:e8:
d6:a5:55:08:c6:19:cc:c8:2b:98:79:22:3e:90:71:
e7:02:c7:13:bf:c5:62:0b:c6:08:ae:d2:ee:da:d8:
68:2d:d7:8b:4c:65:32:87:9c:ea:87:11:7c:92:06:
6a:b3:cd:64:ef:67:e0:95:9d:99:b8:4e:b7:19:4a:
32:5b:3f:e2:a4:27:9d:e0:52:0f:4f:15:0e:a7:7c:
9d:46:1c:d6:fb:84:65:5d:29:01:8c:e7:93:bf:9a:
a3:7b:af:04:dc:d7:16:6f:0b:17:d7:1e:8e:e0:32:
bb:f2:70:c9:d1:92:8c:a9:c6:14:3f:bd:aa:55:86:
21:7b:2b:ce:3a:54:20:32:3e:ff:d8:27:1a:5b:d1:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:F5:DE:2C:28:48:1C:40:F3:0C:F1:35:65:D5:E3:FA:0F:C4:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC19646CE06A11EFB2E65D8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.240.0/22
Signature Algorithm: sha256WithRSAEncryption
40:aa:2e:aa:1f:97:e8:89:a8:81:f2:6e:95:88:67:56:09:64:
f5:d8:00:5a:77:2f:e8:44:05:89:be:be:b2:9b:9b:e9:7c:7d:
f0:e9:61:64:7a:6d:9d:d0:59:dc:6c:aa:0b:5b:5a:9c:a1:ba:
10:c0:b6:a3:9c:e3:08:a1:57:0a:44:8b:65:cb:b5:17:cf:87:
a1:69:64:b8:d3:fb:b4:e2:d7:e0:46:a8:03:42:d1:74:9f:9c:
52:9e:fb:59:77:8a:0e:4b:06:c3:fa:7b:f7:f1:2c:58:e8:a5:
07:44:05:d4:f1:a1:5b:29:a8:39:94:f2:07:93:df:c0:cf:3c:
1e:6f:b2:de:92:b8:d7:bf:c7:97:cb:c3:da:58:9f:3d:c9:4f:
ec:a1:03:d5:e5:fc:ef:9e:d7:77:ed:ec:8c:dc:b1:16:bb:8b:
0e:cc:cd:c0:cc:e4:ea:e8:e1:c4:12:30:72:09:18:2b:c6:b7:
86:a2:a2:91:a1:f1:92:a2:dc:c0:d9:d2:a8:13:ab:f2:3e:87:
17:59:b5:34:1a:91:50:1e:5d:49:22:8d:14:3b:98:3f:76:f3:
1c:ab:d1:53:7d:19:06:a1:ab:3b:9b:2b:af:97:d4:fc:21:40:
09:61:eb:ce:ee:dc:eb:ba:e0:f9:79:9c:ac:a1:e6:a2:d4:68:
d3:ef:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:43 2025 by rpki-client