Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF22BECF61911EF8AF1B680762E951A.roa
File: CBF22BECF61911EF8AF1B680762E951A.roa (raw, json)
Hash identifier: 4zaOUk5AkiVbC1OMxqlC9luHaQ3JUo1PvpMEufgnaE4=
Subject key identifier: 0C:95:28:5B:45:13:80:5E:C3:58:3E:11:44:45:D1:30:E3:33:A1:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF22BECF61911EF8AF1B680762E951A.roa
Signing time: Fri 28 Feb 2025 21:20:13 +0000
ROA not before: Fri 28 Feb 2025 21:20:09 +0000
ROA not after: Sun 13 Apr 2025 21:20:09 +0000
asID: 138915
IP address blocks: 154.206.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93238 (0x16c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:20:09 2025 GMT
Not After : Apr 13 21:20:09 2025 GMT
Subject: CN=67c2288d-ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:67:65:ed:24:83:69:b4:b1:7b:28:e2:0b:
3c:6f:a8:f5:26:7f:f2:af:f5:57:ef:1e:1a:5c:bd:
17:66:38:5d:fc:7c:cb:d8:89:88:eb:03:85:7a:24:
50:f8:cd:7e:09:3c:b5:66:d4:19:f9:45:87:24:82:
70:74:fb:39:d3:f3:00:3c:30:69:09:2d:13:20:aa:
b2:44:e6:51:00:31:74:dc:b1:0e:f4:f0:45:9b:83:
88:04:24:4d:4d:cf:b3:5d:f1:ed:99:7c:06:d1:3d:
8c:04:30:8c:ef:56:31:b6:1f:68:ab:e6:d6:a0:f9:
b6:84:74:73:fa:d7:ac:9f:69:04:52:b9:45:23:36:
87:ff:5c:a5:4b:4d:f5:e3:be:96:a9:55:2f:eb:0d:
59:9b:60:24:9c:51:a1:c6:df:75:47:40:94:c0:28:
3e:6a:67:de:5a:28:c7:47:28:7f:92:3a:bf:b0:d9:
8e:2d:e2:82:cb:4f:2e:f1:41:33:0a:a5:c3:98:5e:
38:f2:93:ef:d0:ed:dc:5e:e9:4a:4c:4a:30:50:28:
01:ef:31:6c:3b:05:a6:8a:80:03:85:40:19:9d:0b:
6a:54:01:fe:46:8a:00:3f:2b:86:03:0a:23:3b:f4:
2b:cc:96:d9:ed:b0:00:7f:d9:91:7f:07:a5:88:fd:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:28:5B:45:13:80:5E:C3:58:3E:11:44:45:D1:30:E3:33:A1:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF22BECF61911EF8AF1B680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.98.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:8a:73:dd:c3:35:c6:26:14:9e:56:44:61:3c:7a:12:a0:86:
c1:24:bf:4f:5d:ff:24:52:6f:7b:6f:90:d6:e5:03:df:d1:89:
d9:b9:6c:32:b6:65:08:be:6e:17:de:32:9c:a3:e8:68:42:86:
5a:29:a3:22:d3:34:d6:92:3e:f4:b5:fd:f6:be:51:32:c6:4b:
91:cf:00:c5:66:19:7e:d6:da:ba:fd:41:36:1e:00:fa:20:51:
11:6d:64:3f:a3:52:b4:03:00:44:e9:e1:7f:5e:49:f4:49:f3:
17:fd:48:55:65:11:46:9e:ee:ee:7d:8f:63:17:98:53:7b:ac:
c7:73:13:43:09:f1:4f:a3:73:42:43:b1:98:10:fb:31:8f:cf:
c2:71:cb:a2:4f:8d:4d:a0:3a:a3:00:9c:d1:ce:cb:32:a7:70:
75:05:36:5f:7a:e4:c6:29:4f:98:a1:d2:bb:a0:2b:63:e5:78:
6e:e2:69:ef:05:4f:e9:96:41:e7:f4:1b:a6:fe:79:64:a7:82:
27:d9:a1:58:67:04:f2:5c:63:ef:68:50:5e:3b:9c:53:a8:41:
ac:d1:0c:6d:21:3c:70:e7:03:2b:d4:18:af:a8:d1:0b:9c:4d:
f7:ee:d4:f8:67:89:c7:a9:9f:8d:85:5d:5c:45:9f:50:b3:f9:
ae:8a:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client