Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51BA284F47211EF962F5BA7762E951A.roa
File: B51BA284F47211EF962F5BA7762E951A.roa (raw, json)
Hash identifier: PXmp4OYAgCFf2SoKOq7qCcqYx7YAEJ2BiWLCvMdLGlY=
Subject key identifier: C7:86:20:BD:07:D4:A0:18:98:73:AF:FA:1C:A7:AE:65:A5:E1:B5:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016570
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51BA284F47211EF962F5BA7762E951A.roa
Signing time: Wed 26 Feb 2025 18:51:37 +0000
ROA not before: Wed 26 Feb 2025 18:51:34 +0000
ROA not after: Sat 19 Feb 2028 18:51:34 +0000
asID: 17561
IP address blocks: 154.218.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91504 (0x16570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:51:34 2025 GMT
Not After : Feb 19 18:51:34 2028 GMT
Subject: CN=67bf62b9-dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:ec:a3:6a:42:02:55:d7:aa:b3:c6:bf:b2:
a1:a3:45:c3:52:f1:b4:f9:30:60:4b:22:3c:89:75:
a1:37:54:ca:d8:d9:34:f4:f9:90:30:bb:17:70:ea:
9e:ab:f2:4b:eb:0c:ff:c1:75:73:5d:a3:f6:92:0a:
0d:a9:55:8c:6e:c1:da:79:df:5f:8e:6d:58:1f:b2:
eb:f4:a2:e5:3f:b2:6b:6c:bc:18:6d:4d:9a:67:be:
51:d6:df:c0:81:aa:e7:cf:b6:40:f7:5d:21:42:47:
7c:24:d1:f0:99:7c:b9:e3:27:93:c3:f8:d5:0d:94:
4e:d2:ea:d5:c4:85:8e:64:d4:8d:21:e0:fc:90:d4:
96:fd:8d:cf:c0:15:39:98:f5:02:56:13:b4:a4:a4:
69:93:db:f0:87:12:c4:28:30:1f:f5:ec:c2:cf:dc:
8c:dc:0e:42:bf:a3:56:9c:95:52:83:c2:30:98:74:
73:9d:56:fb:2a:93:ef:f1:52:cf:97:7b:49:16:ee:
90:b7:bf:06:fa:b3:ca:a8:db:34:6e:69:ae:e6:88:
5d:0e:2e:6a:d9:cc:81:8f:b3:76:0b:e8:85:f1:3e:
69:91:f9:9e:ea:7e:fc:ca:8a:23:95:d3:b3:12:f7:
04:0c:9f:ab:4b:2e:f4:42:4e:e0:e3:22:2a:08:96:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:20:BD:07:D4:A0:18:98:73:AF:FA:1C:A7:AE:65:A5:E1:B5:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51BA284F47211EF962F5BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.14.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ed:1f:45:48:22:34:87:df:b1:aa:a4:73:48:37:e1:60:3e:
6a:5a:02:c4:88:4d:db:9c:bf:e0:55:fd:59:9e:10:26:89:e7:
a9:c0:34:65:bc:e2:d3:c4:cb:e2:a2:fa:cc:9a:1e:c4:59:b3:
09:05:e1:f1:ca:28:11:73:a0:66:ab:77:55:60:98:f1:32:27:
40:77:56:bb:17:d6:e8:7d:0f:d5:68:ec:f0:9a:bc:91:29:34:
e0:cf:21:35:46:40:60:d1:83:b3:86:ab:2a:ea:fc:a0:18:fc:
f2:70:f0:d8:98:81:38:1b:61:2f:2f:e8:dc:6a:79:75:b2:c3:
3e:be:30:4d:d9:40:5f:3a:56:04:2d:08:54:e6:f6:6a:fe:f8:
bd:bb:99:e5:7b:6f:17:40:09:75:0b:3d:c5:6b:a0:b4:69:f4:
dd:0f:92:42:3d:73:aa:0e:76:78:c2:fb:85:e8:22:c0:cd:78:
cd:65:77:4a:42:e2:a8:a2:06:0b:71:aa:23:e3:ca:ff:cd:5b:
81:76:c9:f6:ce:03:61:0d:93:da:49:11:78:37:09:fc:ce:ec:
4c:c4:88:d7:52:8b:50:79:15:a0:2a:a0:c3:5c:b2:21:36:94:
b9:5c:15:92:70:a8:cd:58:c4:3d:73:e5:c8:60:c7:92:31:90:
08:58:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:41 2025 by rpki-client