Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5EC3ECF45411EFB46D3F5A762E951A.roa
File: DE5EC3ECF45411EFB46D3F5A762E951A.roa (raw, json)
Hash identifier: W0h1fCtntUAjDHDG2xAS1VLbM3d/k2q3QEgjAfEDTUo=
Subject key identifier: 0C:8B:CB:0C:FF:CC:87:50:75:FD:88:08:E3:CE:17:63:BA:54:29:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5EC3ECF45411EFB46D3F5A762E951A.roa
Signing time: Wed 26 Feb 2025 15:18:02 +0000
ROA not before: Wed 26 Feb 2025 15:17:58 +0000
ROA not after: Sat 19 Feb 2028 15:17:58 +0000
asID: 17561
IP address blocks: 154.82.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91326 (0x164be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:17:58 2025 GMT
Not After : Feb 19 15:17:58 2028 GMT
Subject: CN=67bf30aa-3961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:25:a0:b7:86:a1:cf:68:f4:0f:4a:79:a4:
b1:9f:9f:73:d6:06:35:78:d5:65:44:df:f9:14:ab:
e7:98:17:98:93:ab:99:64:a3:a9:dd:45:a3:ed:93:
1a:ae:2d:ce:0f:3b:e4:40:53:45:98:ba:7a:08:d8:
93:96:36:29:72:94:2b:4a:c1:9f:5d:8e:9e:f3:ce:
2a:b0:c2:f1:7c:9a:82:07:55:13:63:31:a9:30:d7:
02:f7:75:48:b7:d9:95:f8:21:77:4f:fa:5a:bb:7c:
d9:dd:77:b7:0b:cc:01:6c:c8:36:f5:32:36:fc:b1:
cf:84:05:68:3d:1a:bc:65:22:03:fd:b0:46:5e:df:
05:f0:4b:74:1d:62:d6:40:cf:9b:05:1b:dd:19:37:
0d:2f:de:8a:cb:db:de:1e:8b:59:31:c5:6d:12:59:
13:c5:52:5a:1c:eb:76:17:43:ec:b8:e8:62:3f:40:
10:a4:ca:4d:fd:5b:3e:3a:1b:1f:cc:19:b5:52:3c:
f3:cc:0f:c7:07:db:c5:85:38:b1:c5:01:a3:4d:04:
f8:5b:07:e1:96:7e:81:6b:ec:9d:f4:de:3a:10:d0:
54:bf:2a:5c:db:a4:49:dd:58:e3:b5:af:6a:11:70:
d3:85:9f:bb:ed:6a:bf:af:af:80:8d:ba:1c:e0:e5:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:CB:0C:FF:CC:87:50:75:FD:88:08:E3:CE:17:63:BA:54:29:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5EC3ECF45411EFB46D3F5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.230.0/24
Signature Algorithm: sha256WithRSAEncryption
04:98:31:e0:a3:77:04:8d:6f:c0:71:67:21:88:7f:27:d5:a3:
71:48:05:1b:9f:9a:73:63:d5:29:3b:ed:b0:82:84:70:fe:47:
c2:c2:1c:ee:67:c8:36:8d:5a:6a:de:5f:11:c4:7b:8e:83:07:
34:95:ae:4d:19:31:f0:e0:f9:ea:64:b9:82:f0:57:bc:be:62:
d9:43:1f:cc:c3:9b:c8:3d:ac:c1:b1:04:68:e2:83:50:bf:d2:
8a:a6:47:86:a2:e2:20:4b:45:93:8d:7b:5b:11:66:8f:99:37:
56:43:f8:6d:fe:f1:78:56:17:61:c8:07:25:21:0d:fd:bb:21:
0d:78:84:7e:e1:e6:e0:2e:80:a7:58:e4:60:d6:65:56:0e:9c:
fa:05:a2:3a:98:cf:7e:22:97:09:fd:80:48:6a:82:f9:d7:07:
a4:d5:d7:3b:23:0c:99:7a:7b:0c:b0:81:fc:fd:07:4e:db:f8:
39:e4:15:13:26:08:01:0e:db:3a:e5:ba:93:c1:6c:b4:14:eb:
17:3b:a7:42:61:93:e6:77:d3:36:5c:14:6e:e0:fc:32:64:92:
8d:f4:17:df:95:47:06:85:ae:0a:33:95:da:07:1e:68:d1:bf:
17:4d:76:ee:c7:b1:34:7c:b1:c0:6a:40:1f:54:dd:da:d9:29:
4d:e4:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:07 2025 by rpki-client