Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1975E1AF4A111EFB0952267762E951A.roa
File: D1975E1AF4A111EFB0952267762E951A.roa (raw, json)
Hash identifier: B/OTQk0N7DuRukQc5z57S/L8MtBBC4P9VNCkmwbs5t0=
Subject key identifier: E5:E2:F2:04:78:04:D6:F3:BD:7E:65:32:28:DD:F9:2A:C0:E6:54:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016605
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1975E1AF4A111EFB0952267762E951A.roa
Signing time: Thu 27 Feb 2025 00:28:51 +0000
ROA not before: Thu 27 Feb 2025 00:00:47 +0000
ROA not after: Sat 19 Feb 2028 00:00:47 +0000
asID: 17561
IP address blocks: 154.94.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91653 (0x16605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:47 2025 GMT
Not After : Feb 19 00:00:47 2028 GMT
Subject: CN=67bfb1c3-b41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:20:a1:db:50:07:28:4d:be:dd:50:a6:e4:
e3:34:0b:08:70:b4:35:03:7f:19:f4:7e:5f:ed:c7:
50:5e:9a:37:36:5c:69:6b:ef:18:83:0a:fc:49:b4:
19:01:47:4f:5f:e8:10:85:5d:ff:a6:5e:58:88:2e:
49:97:a8:63:45:fa:bc:18:4a:c1:55:a5:48:f4:2d:
5d:44:44:5b:3c:e3:f5:5f:ff:24:ec:0b:32:d3:4e:
13:6e:a1:78:b0:da:1d:7d:14:40:ad:a7:4b:af:16:
20:7a:68:a0:ad:32:79:1e:6e:0a:d6:53:48:e7:6b:
b2:95:bf:fd:4d:23:23:c4:48:eb:d6:39:ad:92:92:
2a:0e:fd:fa:59:da:8d:07:6f:e3:ae:07:7a:eb:6d:
67:b5:33:d2:3b:8f:4b:68:c1:85:cd:87:38:d2:4d:
36:56:92:25:b2:d2:e7:b4:f7:c0:32:a5:88:f7:52:
35:2d:fd:66:9d:63:55:60:9b:2b:cf:e7:aa:e2:a1:
64:b2:0e:a3:83:eb:b2:8c:96:60:f8:97:0f:b3:84:
88:4e:66:8b:f1:96:dc:71:07:12:a4:13:b4:62:67:
52:96:a9:77:cb:9a:7d:9d:d3:5b:d9:6c:e5:f5:0c:
30:4e:e3:c0:43:12:68:f5:b4:49:78:a0:54:a2:38:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:F2:04:78:04:D6:F3:BD:7E:65:32:28:DD:F9:2A:C0:E6:54:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1975E1AF4A111EFB0952267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:14:cb:08:f7:f2:3e:98:2e:41:f0:23:dc:27:a4:0c:5b:94:
10:aa:da:0e:40:3f:59:44:b6:76:b9:6e:c1:90:60:c4:64:13:
c5:53:c4:f3:a6:d9:f1:0e:76:72:1f:f0:ba:d6:63:89:d2:a5:
83:15:a3:d5:68:0c:b4:82:25:a8:f1:06:05:7a:05:84:a9:ca:
42:2a:57:57:e8:32:cc:f2:cf:bd:a8:df:62:b3:a5:e1:9d:a9:
68:e3:7d:4b:34:25:1c:d7:f8:34:7b:85:c2:e6:d3:26:de:89:
18:25:7c:31:9a:4d:6b:3e:0d:9b:c6:51:68:59:87:a0:91:14:
18:89:f6:e2:eb:b1:17:14:5f:93:50:69:a1:74:d0:40:c3:3f:
8c:fc:1c:69:50:fd:1c:47:4d:69:ce:f1:bf:ac:c7:2b:18:36:
b7:06:5b:9a:8d:90:8b:85:b2:cd:fd:37:bc:b9:33:46:bd:62:
fb:6a:24:f9:0a:6c:e2:01:18:52:aa:73:ce:cf:c6:fe:bd:09:
72:99:b3:50:77:b1:1c:d1:5d:68:dd:13:3e:0b:ca:fb:a6:25:
17:dc:4f:78:23:ae:23:2a:b3:fa:7d:12:f3:09:43:5d:be:37:
4b:6d:1a:1b:d0:7b:08:41:90:16:56:4b:e0:6c:f1:ec:61:bd:
75:cc:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:51 2025 by rpki-client