Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FDE320F47F11EFA6B7AB82762E951A.roa
File: D9FDE320F47F11EFA6B7AB82762E951A.roa (raw, json)
Hash identifier: AmcpLcn50nQadmWEjQGWBPyTAZ7Dq5XVQpCKD+bNzwI=
Subject key identifier: 4B:06:4C:D6:5E:BA:94:83:C2:9D:28:10:2C:8C:A7:71:97:CD:A4:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FDE320F47F11EFA6B7AB82762E951A.roa
Signing time: Wed 26 Feb 2025 20:25:43 +0000
ROA not before: Wed 26 Feb 2025 20:25:39 +0000
ROA not after: Sat 19 Feb 2028 20:25:39 +0000
asID: 17561
IP address blocks: 154.221.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 13:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91627 (0x165eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:25:39 2025 GMT
Not After : Feb 19 20:25:39 2028 GMT
Subject: CN=67bf78c7-b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:c9:1b:ec:b4:e4:aa:a7:e0:1e:e0:1b:b0:
af:82:22:bb:b7:fd:04:27:cb:e4:d0:83:9c:74:84:
db:9d:67:66:d5:32:b4:ea:f9:73:31:40:9c:d5:61:
f1:ad:96:9b:a9:01:20:1a:06:ae:46:39:b9:16:cf:
cb:fe:70:2e:5f:e2:4d:dd:fa:75:28:1f:08:d3:d6:
4d:8b:6d:0d:d5:d3:fc:ab:2e:cf:1e:e9:b5:bf:1e:
74:19:e2:ec:69:18:c4:55:64:70:36:b6:40:2e:ee:
17:03:52:aa:3c:1e:85:b5:52:1e:e4:59:41:1d:40:
21:69:16:54:be:b1:2c:28:a5:94:14:b9:99:d3:54:
22:32:3d:ce:49:35:d6:bd:62:70:fc:33:9f:a0:f4:
9c:27:03:92:47:2b:3d:f2:ee:3e:38:83:ef:ef:b8:
5b:9c:7b:dd:56:57:48:07:38:6c:d5:99:9e:f2:66:
5f:7e:29:96:47:f8:60:30:60:01:65:4e:6f:fe:61:
62:5c:fc:a7:97:50:62:fb:d6:68:21:a0:94:c4:9e:
c2:f5:56:13:d6:15:9e:2f:e3:13:5b:f6:25:d9:88:
25:55:75:14:f1:95:aa:5e:f7:42:1d:c4:67:94:90:
fb:68:4f:02:15:ad:65:91:ed:7d:99:d1:9a:fc:a3:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:4C:D6:5E:BA:94:83:C2:9D:28:10:2C:8C:A7:71:97:CD:A4:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FDE320F47F11EFA6B7AB82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:99:c3:c1:af:73:d8:f0:98:33:8f:ae:1a:da:2a:61:cb:20:
c6:b7:25:17:44:95:7f:34:7c:f7:cd:99:e6:ff:2e:41:7c:da:
d4:0b:1e:2c:71:ef:e3:3e:1a:e6:b5:b8:1c:e9:17:cc:7a:6f:
38:d5:30:a1:c4:a7:81:96:5a:2d:16:3a:de:4f:c6:8f:2a:8f:
d7:55:a6:9b:71:1e:12:c8:97:e3:34:76:26:4d:0e:39:6a:02:
f9:50:97:21:7c:7d:c4:cf:8f:ae:33:71:20:06:82:40:12:1c:
52:b0:0d:03:45:bc:90:f0:65:48:10:4f:5b:64:a4:76:ea:b8:
89:2f:00:c3:82:23:5b:22:49:dc:77:e0:1b:4d:1d:2f:dc:87:
5d:07:1f:a7:9d:2b:dc:07:77:74:06:17:0d:8a:25:a3:9a:8b:
77:ab:9e:9a:a9:5d:d0:74:56:02:2a:c4:fc:cf:d6:a2:59:aa:
e3:d2:3f:0b:be:c0:56:6a:91:15:e6:96:34:a2:2e:23:ba:8d:
ad:f6:c7:dc:3e:33:b8:e5:8a:25:b4:6d:ac:a2:75:64:01:d2:
fd:a1:64:d9:33:89:aa:48:a1:f1:6e:34:2f:b1:4d:a1:4a:12:
a8:32:88:96:5a:63:9c:2a:5b:c4:e1:1e:44:ea:e0:08:79:fa:
30:97:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:55 2025 by rpki-client