Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2C0BE4FA6411EFB08243AC762E951A.roa
File: BB2C0BE4FA6411EFB08243AC762E951A.roa (raw, json)
Hash identifier: sF6A+/CL+a+tmWC4z9BiUiztzIaNOVi5NQhekv5CK2U=
Subject key identifier: D5:F6:48:D5:F3:FB:44:4D:17:19:CE:CA:A8:F1:61:D6:0A:16:BC:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017294
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2C0BE4FA6411EFB08243AC762E951A.roa
Signing time: Thu 06 Mar 2025 08:26:42 +0000
ROA not before: Thu 06 Mar 2025 08:26:38 +0000
ROA not after: Tue 15 Apr 2025 08:26:38 +0000
asID: 20473
IP address blocks: 154.196.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94868 (0x17294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 6 08:26:38 2025 GMT
Not After : Apr 15 08:26:38 2025 GMT
Subject: CN=67c95c41-ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:df:92:9e:eb:1e:e2:f1:29:3f:6a:c3:2c:
04:14:df:02:24:a1:cf:17:75:0a:cc:6c:71:77:1b:
34:5f:9e:0b:d3:84:09:f6:da:93:b3:b1:9c:be:fe:
e3:43:63:05:40:2f:c0:c9:64:6e:3e:27:16:48:57:
f6:9a:89:1b:6b:ea:36:74:76:e8:e2:3a:70:3d:c5:
88:15:b3:30:71:89:21:8c:ca:5a:fa:ae:0d:bc:39:
9f:ed:91:e6:da:35:f0:c1:ba:3c:72:9a:d5:d7:fd:
03:2b:21:bf:a8:b8:ae:4c:14:d9:72:5b:1c:6c:1d:
72:8a:5d:7d:d5:a9:1c:d7:9e:5c:c6:86:9d:a9:31:
b3:ce:49:8a:ff:d1:7c:d6:2e:d7:f3:db:56:22:08:
c9:0c:35:fa:00:f6:7a:a1:b4:37:31:9b:f7:8b:95:
6d:fd:27:54:f5:8f:d7:97:dd:a9:34:10:b8:19:45:
cb:d3:ac:9f:3b:47:eb:48:fb:25:2f:b3:85:c5:51:
c4:f1:95:35:68:56:34:6c:03:84:2f:8e:af:b0:da:
a0:78:cd:b8:37:69:85:45:a9:e2:9f:84:50:1c:8e:
df:dd:f0:97:25:40:b0:44:b5:2f:1d:e0:c9:a0:0f:
82:a0:a0:6d:be:ae:85:ca:ba:a9:59:e4:f4:39:45:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:48:D5:F3:FB:44:4D:17:19:CE:CA:A8:F1:61:D6:0A:16:BC:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2C0BE4FA6411EFB08243AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.137.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:0f:0b:4b:be:e2:b3:71:ea:ab:69:4f:0a:39:bf:8b:fb:29:
07:0e:d0:12:40:32:92:23:41:a7:39:62:38:31:5f:7c:0c:6e:
66:4d:1c:32:8b:05:53:01:0f:a5:0d:65:96:c6:64:35:bf:9a:
ef:c3:04:af:28:68:68:2f:ac:20:e0:85:52:e2:8b:60:74:e8:
9f:05:40:34:7d:00:50:2f:9e:d6:08:ab:65:5c:aa:ad:7f:08:
f9:90:37:2e:3d:c3:0d:a0:b1:70:11:6a:a4:bd:92:24:10:06:
8b:37:4d:fb:18:39:73:11:64:38:2f:b0:12:b0:17:f0:ee:c0:
c4:8a:23:0e:77:64:cb:b3:ef:47:09:be:05:d5:04:d8:90:44:
67:43:b1:0a:8f:de:15:29:af:77:75:73:61:2d:45:73:76:91:
69:f4:73:f3:8b:99:00:ea:15:0c:bf:e4:bd:a3:a4:97:a4:3b:
0a:5e:54:44:eb:39:ec:a9:95:54:c8:0a:0f:ec:8e:95:f5:4b:
55:46:81:21:9e:94:9b:0f:43:2f:9d:13:62:b4:cc:e2:fb:e0:
a8:78:a7:e5:35:02:c0:6e:86:c8:43:6b:49:05:13:b3:e5:bd:
f3:b2:6a:bf:36:a3:fb:3d:f3:4f:62:4b:54:e1:69:de:52:88:
c5:8a:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:51 2025 by rpki-client