Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8C3C2CF81111EFAED8B26D762E951A.roa
File: BF8C3C2CF81111EFAED8B26D762E951A.roa (raw, json)
Hash identifier: qL5Jl8dIHYKEVl7BcoN7QrdrHJ0eYyW17S7btyDPAB4=
Subject key identifier: 80:90:4E:B1:DF:6F:75:C3:11:6B:64:E3:B2:C8:F2:56:81:22:42:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8C3C2CF81111EFAED8B26D762E951A.roa
Signing time: Mon 03 Mar 2025 09:27:38 +0000
ROA not before: Mon 03 Mar 2025 09:27:34 +0000
ROA not after: Wed 30 Apr 2025 09:27:34 +0000
asID: 63139
IP address blocks: 154.94.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94137 (0x16fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:27:34 2025 GMT
Not After : Apr 30 09:27:34 2025 GMT
Subject: CN=67c5760a-004c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:4f:8a:11:66:af:66:2c:3a:61:eb:49:a7:
f3:68:bf:ae:b4:ef:23:55:42:69:3b:3c:8f:28:99:
af:57:4c:94:21:b5:e0:eb:c0:b6:77:1e:9c:1e:1b:
cc:72:2d:46:8b:fa:2a:b7:9c:ed:22:bc:19:4f:eb:
a4:ab:25:8e:00:62:7c:54:f5:e5:e7:9b:77:5b:46:
3d:48:8f:69:23:a4:33:13:85:ba:f7:d0:27:d8:78:
3f:70:6c:15:1d:e3:29:26:2d:40:10:23:b6:ef:1c:
e5:c6:b6:ea:e0:66:8c:72:45:a8:6e:6c:67:b0:b5:
a3:e4:39:51:52:1d:9a:28:76:fb:a0:b4:2e:b8:c6:
06:ef:3d:73:c5:a1:0d:92:13:87:c1:75:e4:d8:7e:
cd:29:c0:bd:6e:14:02:5e:13:e3:75:74:3e:ca:a1:
60:84:97:12:65:6e:f9:d3:d5:28:6e:b3:d3:94:28:
05:41:2c:71:d3:01:3c:e3:2b:ee:3b:72:c3:78:9d:
03:b0:c3:62:ae:86:00:da:4d:66:b2:45:32:1b:7e:
fa:ca:da:7f:ee:91:3c:51:43:36:2e:1f:ce:df:51:
a7:28:85:05:15:d6:77:27:65:3d:c2:5d:3b:3b:83:
5f:af:03:18:27:e7:99:7a:b7:b7:6b:0d:16:d2:d8:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:4E:B1:DF:6F:75:C3:11:6B:64:E3:B2:C8:F2:56:81:22:42:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8C3C2CF81111EFAED8B26D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7f:92:74:dd:b8:7d:a8:bb:25:e3:f4:73:79:d1:4f:57:bd:
1c:60:b8:52:36:1f:e5:d3:45:fa:fb:0a:16:c1:c7:b3:ff:10:
e3:6a:49:00:3a:8b:5f:e2:8f:0f:cf:e4:f1:82:4f:57:7e:6b:
8e:a3:4a:fe:83:cb:2c:16:d2:97:50:6f:91:12:9f:59:bc:2e:
e2:22:66:dc:8c:47:fb:6e:38:20:93:eb:d9:8c:6f:a7:95:7c:
9d:ae:18:1b:71:07:ac:7e:0e:6d:5a:02:3f:39:66:58:cb:c5:
d8:4a:c0:8b:68:5d:74:ee:8a:f9:68:b1:e5:c4:99:70:b8:e3:
b3:b0:8b:95:3f:e9:6b:3e:b9:ca:18:94:2b:fb:62:9b:dd:2a:
71:36:ad:5b:87:0d:7c:d5:f4:e9:14:b6:65:0c:e2:12:fc:d6:
73:d9:39:10:87:c5:6f:1b:f7:7c:2b:17:cf:b5:4b:31:a2:4e:
d5:80:04:0a:0b:1b:49:f1:0a:11:da:bb:0a:7e:4e:5e:51:58:
ed:48:17:47:f9:7f:49:ef:4c:33:ea:a5:01:bb:18:c6:00:cd:
c0:49:df:4b:a1:16:ac:6d:bc:3d:ff:84:b7:a9:12:aa:39:47:
bc:32:a8:82:20:75:6d:aa:0c:1d:73:f6:91:ab:0a:78:6f:fe:
3a:25:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:35 2025 by rpki-client