Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA722DACF35A11EF869BF7A3762E951A.roa
File: BA722DACF35A11EF869BF7A3762E951A.roa (raw, json)
Hash identifier: myAbSQxZ57hvxkWp+MZm2Nty1aAEVPqR1t2bNgWfm3g=
Subject key identifier: 6A:E3:9A:63:80:39:4E:58:E0:58:CA:4B:47:39:9E:BA:54:5A:CF:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA722DACF35A11EF869BF7A3762E951A.roa
Signing time: Tue 25 Feb 2025 09:27:27 +0000
ROA not before: Tue 25 Feb 2025 09:27:23 +0000
ROA not after: Sat 19 Feb 2028 09:27:23 +0000
asID: 17561
IP address blocks: 154.83.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89604 (0x15e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:27:23 2025 GMT
Not After : Feb 19 09:27:23 2028 GMT
Subject: CN=67bd8cff-3a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:86:05:4b:cf:43:fc:50:31:e2:5b:f1:75:
e8:df:c3:7d:0f:c9:34:ad:4b:70:55:f7:da:21:29:
73:47:ca:ad:95:87:ef:76:52:57:09:41:ef:d8:9a:
09:0e:61:5f:42:61:13:64:39:1c:bf:ec:a9:21:7c:
64:0a:43:9a:48:7f:74:50:9a:1f:d0:5e:c6:53:ac:
e3:64:ef:93:82:9e:f6:69:a6:e4:68:ef:35:9d:14:
a8:2a:96:41:38:2f:3b:7a:82:a7:b6:e7:6a:2a:0b:
f9:41:3f:e7:26:74:0c:77:0a:6f:db:29:53:7d:36:
56:04:0b:7c:68:77:6e:44:05:83:8b:8d:88:b9:ef:
de:4a:0a:6e:70:2e:39:43:00:19:72:b1:3d:99:c4:
7a:bc:ad:4e:9c:b4:31:de:50:6c:8f:6e:7f:e7:24:
ba:63:03:2e:99:24:be:1f:c2:40:5a:23:be:f4:3e:
b3:e0:06:29:5e:26:26:66:79:b2:59:60:2c:41:f3:
9a:9b:70:ea:5d:cd:71:1a:96:4a:fd:ae:40:5d:0c:
d1:9d:a2:13:0c:cf:d2:81:2f:ea:1f:86:2f:d6:35:
68:48:2d:4f:da:b4:e0:b6:55:08:25:5f:c2:be:86:
00:e1:0e:2f:f9:41:2f:5f:aa:d6:75:95:e5:25:3c:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:9A:63:80:39:4E:58:E0:58:CA:4B:47:39:9E:BA:54:5A:CF:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA722DACF35A11EF869BF7A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.43.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:fe:33:3d:6f:be:ae:7c:04:e9:f7:65:08:3a:30:88:e2:c7:
fb:fe:fa:f6:18:08:06:2f:04:23:ed:2e:8c:44:4e:33:d4:ba:
3b:b4:fa:4d:88:70:15:3f:c6:52:79:8a:96:e1:15:d1:3c:68:
f4:48:9b:d2:8b:42:5f:09:43:ca:f4:55:ef:dd:56:f4:ff:90:
8a:5a:a2:f3:1a:98:6c:57:8d:b7:39:1f:87:07:ea:9f:0b:0a:
1f:6d:a8:40:05:04:e8:0b:e3:d6:a9:6d:a4:74:4b:fc:28:34:
cc:a9:1a:26:87:94:a3:c9:dd:3a:b1:da:d2:5d:9c:f4:08:e5:
d1:00:1a:ff:d8:79:91:2f:f5:6f:44:1f:2f:3d:27:2a:e7:1b:
80:de:22:21:cf:46:f3:a9:b8:30:19:dd:27:74:be:aa:94:d6:
a6:d0:37:fd:20:ff:0b:3f:fa:2c:23:f5:57:07:19:68:60:5e:
34:27:4c:7b:cf:6d:e6:08:25:75:65:9a:7c:9f:d6:84:f6:55:
05:5f:50:8d:14:18:d4:b2:7e:08:40:2c:ea:ae:c9:9f:8d:d7:
04:a0:95:7e:bd:5c:38:7c:be:0f:f4:13:36:69:99:2a:02:b9:
87:af:9f:65:94:0a:2d:2d:14:9e:29:b8:82:67:a3:2a:9b:99:
06:67:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:37 2025 by rpki-client