Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD334AF4C92511EF9DF829A9762E951A.roa
File: AD334AF4C92511EF9DF829A9762E951A.roa (raw, json)
Hash identifier: csrnpvutUg9BkAVXLG0hBcS7LvjL99Kvofeig70snkE=
Subject key identifier: CB:EC:A4:54:C8:85:FA:4A:BD:D9:04:84:3E:6B:9D:3F:BF:0A:B0:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013351
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD334AF4C92511EF9DF829A9762E951A.roa
Signing time: Thu 02 Jan 2025 16:21:53 +0000
ROA not before: Thu 02 Jan 2025 16:21:49 +0000
ROA not after: Sat 13 Dec 2025 16:21:49 +0000
asID: 984
IP address blocks: 154.222.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78673 (0x13351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:21:49 2025 GMT
Not After : Dec 13 16:21:49 2025 GMT
Subject: CN=6776bd21-12c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:e2:88:63:fa:c4:ca:8c:c5:d5:2d:b7:ab:
af:46:58:4e:07:d9:91:e7:13:56:bc:b4:b8:56:49:
2c:a1:5e:9c:b6:b4:fd:7f:03:95:b2:75:31:96:e5:
19:b9:24:03:84:c6:32:bf:14:0f:22:41:8b:2e:d1:
01:db:09:60:50:6b:ae:b5:42:74:0a:b2:7d:8a:42:
2d:57:67:46:3d:a6:2b:33:32:12:fb:96:15:ed:15:
98:1e:63:39:d7:22:e5:42:f4:79:95:1a:0d:00:22:
6b:b9:88:3b:11:80:96:68:ce:bd:20:d7:e2:49:6c:
e9:36:d1:4e:4e:52:0c:bc:08:3d:a3:51:22:12:e8:
06:cb:dc:71:62:e9:4f:66:76:01:1a:13:54:17:40:
5d:37:1d:e1:a9:ea:7d:f4:88:2e:bc:48:b5:a7:ea:
bc:7e:ae:1a:7e:92:49:0d:24:1d:26:56:a0:26:56:
a5:25:8b:10:76:04:6b:03:b7:98:84:a6:e1:ae:c3:
82:68:fb:56:d0:44:bf:32:8c:bf:11:65:cc:f1:8e:
2a:dc:05:4e:10:09:b6:2e:5e:fc:0d:25:13:7d:60:
98:eb:d8:e6:e0:2f:7d:19:f2:4b:86:8d:8a:44:8a:
e4:fb:11:0b:a6:78:74:a0:18:4e:d2:10:3f:b6:0f:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:A4:54:C8:85:FA:4A:BD:D9:04:84:3E:6B:9D:3F:BF:0A:B0:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD334AF4C92511EF9DF829A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.113.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c0:ce:85:2d:d1:c3:7c:d8:62:c0:3a:29:e8:68:c6:13:d7:
68:93:32:c4:b9:64:e5:d5:37:60:12:8e:89:9d:5e:42:61:69:
3e:b2:33:80:fe:78:00:57:82:e1:03:27:b4:73:7e:fd:61:b1:
d7:d8:fd:48:67:03:17:97:d4:7a:64:0b:64:3f:32:cc:e1:1f:
75:85:b1:54:34:3a:2a:0e:2b:ba:d9:e2:f7:f8:a5:80:a8:d9:
69:34:69:e1:d9:49:5a:74:93:10:56:70:db:09:e6:f5:be:62:
43:a2:29:00:0c:ec:5c:cf:a3:b5:64:30:20:95:5b:16:51:da:
66:40:77:c7:0e:19:be:97:ff:04:53:a7:70:a1:14:84:07:38:
2c:55:30:12:77:45:ff:67:4c:0a:0c:c3:a9:26:ca:31:3a:f2:
87:94:e8:cd:7f:c3:9a:3b:9d:90:09:37:73:57:22:a5:74:36:
8b:7a:59:be:c8:84:2e:4d:50:e8:25:93:8a:c5:9d:65:fd:d6:
8a:3e:72:8b:a5:42:99:d2:2c:28:99:8a:72:43:73:b5:2c:7e:
44:8f:5f:bd:91:7f:11:40:8f:e4:4f:5d:a1:80:81:f0:c4:24:
5d:32:95:68:6c:90:8e:8f:7a:3d:79:80:ee:e5:db:0a:d5:9f:
58:b3:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:43 2025 by rpki-client