Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0FD9B06C93811EF8F30C9A1762E951A.roa
File: E0FD9B06C93811EF8F30C9A1762E951A.roa (raw, json)
Hash identifier: 8cfQsAPHnsvf436YS/c9hmhfOPh/qO08VuyBv1kreag=
Subject key identifier: 4F:ED:ED:CD:6F:89:B3:32:66:24:8B:A3:CC:35:91:E3:3A:10:45:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0FD9B06C93811EF8F30C9A1762E951A.roa
Signing time: Thu 02 Jan 2025 18:39:20 +0000
ROA not before: Thu 02 Jan 2025 18:39:17 +0000
ROA not after: Mon 13 Dec 2027 18:39:17 +0000
asID: 17561
IP address blocks: 154.223.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78825 (0x133e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:39:17 2025 GMT
Not After : Dec 13 18:39:17 2027 GMT
Subject: CN=6776dd58-5558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:0d:74:ac:69:0f:7c:79:fa:59:5f:09:e4:
79:69:62:ea:59:b9:5a:13:1d:0d:87:82:dd:ff:7c:
54:06:49:18:f6:4f:ef:a3:de:8e:e0:16:63:e7:b1:
93:0c:41:ad:d1:88:0e:c1:39:60:56:1a:31:74:3e:
1c:d5:c8:50:b5:13:74:19:bf:e4:fc:87:d1:b2:69:
21:fc:9d:6b:f2:ba:13:e7:64:eb:c5:31:2d:12:ff:
9a:19:e0:1f:49:d4:db:4f:a9:58:69:c8:b0:f3:d6:
e8:21:f8:dd:15:70:80:5c:c0:b2:5b:cd:51:af:d1:
3a:f8:ee:7e:9b:26:51:e7:1e:10:46:69:c7:8c:49:
56:37:1e:26:c0:e2:00:38:a1:9d:d2:d2:9e:5b:a2:
fa:0b:04:a2:89:9a:37:aa:d8:31:77:be:e1:52:17:
86:d1:a6:80:9c:2d:90:50:e2:c4:47:25:fa:32:e6:
f9:90:18:c2:c6:10:b5:a9:fd:d4:78:8b:dc:07:d4:
a0:98:45:f0:1e:f8:f7:5d:c1:d8:02:2b:56:2f:39:
6d:82:c4:99:26:98:0a:89:06:ff:e6:c4:18:c4:39:
6e:7b:2c:47:16:1c:2a:53:ab:04:e2:20:63:ca:b2:
54:8b:fc:cf:7e:3a:98:9c:29:f9:7b:aa:97:ea:a2:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:ED:CD:6F:89:B3:32:66:24:8B:A3:CC:35:91:E3:3A:10:45:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0FD9B06C93811EF8F30C9A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.95.0/24
Signature Algorithm: sha256WithRSAEncryption
24:df:c0:91:65:aa:ea:86:f3:23:9b:08:bc:99:4d:3c:58:5d:
97:58:31:35:88:3f:a3:36:06:e6:b6:d5:89:8d:19:78:95:e3:
75:0b:8f:20:ab:f7:f2:3c:21:91:44:fc:5a:05:88:fb:01:ba:
81:80:77:97:84:af:88:c3:32:ae:ed:0c:4d:4c:4b:a2:70:3e:
6c:d6:bd:a3:54:93:e2:96:bd:d5:cd:25:e9:0a:a3:19:3f:30:
67:bf:fb:a8:31:eb:98:78:96:cf:e7:e2:ea:3b:dc:ad:8f:78:
e8:40:39:b2:b7:40:67:fb:65:75:a6:ed:6f:07:3f:54:73:68:
60:56:a0:cd:3b:63:ce:51:0d:2d:51:91:40:1c:b0:e9:6c:74:
cb:99:c6:04:6a:b9:44:22:69:39:18:bf:4b:09:b8:ee:c6:8b:
7d:1e:25:30:0d:82:fa:0d:86:97:ab:9c:bd:0e:c2:bc:7b:21:
8e:bc:49:2f:08:67:c7:a7:59:7a:12:da:e9:4b:82:4c:8c:79:
34:c6:16:92:2e:8b:c9:94:3b:f9:17:e8:11:67:21:b6:fc:61:
e3:18:a7:e2:ab:f0:7b:ee:5e:01:8d:36:84:0f:b0:ef:37:79:
62:3b:e9:9e:97:9c:48:70:e2:7d:03:0c:9c:e0:3a:e4:90:c9:
d4:dd:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:40 2025 by rpki-client