Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD93548AF35D11EF88DC90B6762E951A.roa
File: CD93548AF35D11EF88DC90B6762E951A.roa (raw, json)
Hash identifier: aaSIEXOJjBr0O+eTs6lWe30VBTRpC8+rlZYz12Q9mZY=
Subject key identifier: B4:49:51:EC:B8:2E:F6:D6:EA:4B:B6:27:95:99:93:AB:30:87:A0:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD93548AF35D11EF88DC90B6762E951A.roa
Signing time: Tue 25 Feb 2025 09:49:28 +0000
ROA not before: Tue 25 Feb 2025 09:49:24 +0000
ROA not after: Sat 19 Feb 2028 09:49:24 +0000
asID: 17561
IP address blocks: 154.83.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89622 (0x15e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:49:24 2025 GMT
Not After : Feb 19 09:49:24 2028 GMT
Subject: CN=67bd9228-0ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:6f:97:f4:b0:5b:03:87:45:ca:bc:40:b1:
79:38:70:15:2d:e7:0a:2a:b1:fd:0b:f7:26:ca:c9:
6f:47:a3:e3:03:3d:a9:8b:c7:3e:30:f8:97:95:b7:
2b:68:ae:25:a0:a3:dc:04:fc:80:79:2a:44:dc:be:
27:95:a1:0e:d4:95:b1:8b:39:0c:51:73:1c:5d:3a:
93:f0:6a:c7:3c:d0:b7:dc:31:02:58:ee:e3:35:b4:
c3:4f:03:9d:86:a2:fd:97:41:d2:dc:61:d2:3e:2b:
f0:bc:4e:81:2e:04:23:fd:86:b8:63:78:d7:20:0f:
cf:0c:56:1c:95:39:60:c8:13:8c:1d:76:2a:71:17:
10:fe:8e:ea:d1:34:5b:7f:3a:7b:a7:bf:86:12:26:
e2:b0:69:df:0c:5e:d9:84:62:77:fe:c0:43:e0:94:
06:44:ff:49:4a:01:69:94:1a:00:ba:fe:d2:31:c5:
ed:a9:56:8f:23:a3:7c:a0:6a:54:4b:16:a8:36:5b:
cb:f3:91:a1:56:e5:7c:c1:c1:d2:e0:71:88:2c:7e:
80:ec:0c:e5:8e:e1:e2:d1:c3:fe:37:59:d3:80:d2:
4a:54:77:67:bd:1d:41:06:cf:c0:80:36:e8:3c:ff:
77:ef:cc:ca:56:45:f6:cc:04:c2:74:cf:54:b8:49:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:49:51:EC:B8:2E:F6:D6:EA:4B:B6:27:95:99:93:AB:30:87:A0:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD93548AF35D11EF88DC90B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.82.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9c:00:e4:59:64:88:ac:94:40:95:7d:1d:45:e5:52:b6:2f:
f6:03:96:85:f2:67:f1:e0:46:b3:ae:65:48:ec:9e:d9:12:70:
4d:f5:7a:dd:c5:a4:58:ca:dc:b2:b6:d0:a8:f1:fc:97:03:fe:
df:53:8a:dc:e0:aa:ee:8c:16:9d:f7:8a:01:ea:a7:62:7d:fd:
ea:ef:6c:4b:22:86:44:6b:c6:3a:12:57:11:63:81:9f:e4:fc:
ca:49:f5:24:a8:c8:17:a7:e5:32:6a:94:af:64:b9:1a:79:bd:
f9:6b:c2:a5:97:f3:ba:3a:40:fd:52:33:3e:64:ec:47:d0:0f:
ac:6c:d9:22:9f:d9:85:82:35:62:3e:42:86:1a:1b:fb:48:2f:
d3:cb:e6:85:ae:ed:6c:82:70:be:54:f7:85:cd:a0:12:41:5c:
a3:9e:c0:68:df:d4:18:3a:3c:5a:d9:bd:fb:9c:79:f3:c9:6d:
41:de:fa:ed:8e:b7:08:95:c5:48:39:61:03:17:e7:51:3c:4d:
3a:f2:4e:18:be:d6:06:73:9c:2f:42:22:73:9f:ca:c1:e2:b1:
01:71:37:ff:08:91:58:26:03:a0:ef:39:82:2a:e7:2b:3a:e0:
1e:ab:5a:d3:75:e5:db:53:30:5b:44:d5:37:9c:d0:0c:d6:57:
1c:fd:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:20 2025 by rpki-client