Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E85AB4F1D811EFA483247D762E951A.roa
File: E2E85AB4F1D811EFA483247D762E951A.roa (raw, json)
Hash identifier: nREmsUz2EZs+/xz0STkknHtN5vddtGekiWW63LFuX2Y=
Subject key identifier: 9A:3E:75:67:18:49:37:63:5A:4A:59:6B:7A:DA:D1:55:80:5D:CB:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E85AB4F1D811EFA483247D762E951A.roa
Signing time: Sun 23 Feb 2025 11:25:30 +0000
ROA not before: Sun 23 Feb 2025 11:25:18 +0000
ROA not after: Wed 26 Mar 2025 11:25:18 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88919 (0x15b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 23 11:25:18 2025 GMT
Not After : Mar 26 11:25:18 2025 GMT
Subject: CN=67bb05aa-87ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:08:3e:e2:21:0c:ab:63:95:b4:65:55:d1:
2c:cf:2b:f1:bd:5f:9d:c0:46:7c:59:14:1f:7e:88:
4a:c6:9c:b2:b7:4f:76:b4:ca:4e:e4:2e:ac:33:16:
b2:c3:55:50:5a:99:68:3f:3b:ec:2f:d4:a4:dd:90:
6f:b4:04:1c:e2:6e:60:90:b1:58:ab:b7:67:4d:5e:
71:09:50:9c:fb:fc:9a:c7:8a:64:be:45:bd:71:7a:
ef:ce:cf:d7:9f:41:a2:44:19:0f:06:f2:64:78:cd:
9a:4d:be:d7:c9:3c:d9:72:8e:93:ff:a6:d9:21:27:
4c:6e:1c:aa:61:a8:5d:40:ac:43:ae:18:a7:20:da:
90:21:48:c4:a0:8f:5b:17:ed:3f:eb:47:b7:24:d9:
1a:e5:8a:9d:a7:6a:cd:7c:19:9f:e4:47:24:8e:db:
81:9f:0a:db:a0:c8:a8:7a:81:21:0f:bd:77:db:4d:
cb:ab:aa:e3:ef:8c:35:87:2b:84:29:7b:c1:af:42:
f1:73:80:7a:16:27:98:4f:a7:e3:97:41:2b:db:ef:
0a:4e:c5:04:a8:19:17:55:b6:ea:ce:68:b9:08:d1:
53:f6:83:3a:79:44:e8:6e:60:26:87:29:64:74:92:
51:ca:89:02:91:17:71:5f:dc:35:7a:71:65:26:75:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:75:67:18:49:37:63:5A:4A:59:6B:7A:DA:D1:55:80:5D:CB:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2E85AB4F1D811EFA483247D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
63:a6:eb:49:b6:72:1e:b7:5c:09:a7:11:37:f9:33:e7:f0:e6:
04:96:72:20:0d:64:c0:96:da:12:2a:3c:2d:ec:d8:de:57:62:
57:31:69:15:4c:19:b7:7d:0a:e7:4e:b8:bc:4e:d8:1f:6f:f5:
9c:a2:7a:67:79:5a:2b:3c:ec:a8:1d:8a:ca:d2:4a:a4:96:e8:
98:0f:20:4a:14:a3:4e:c5:b5:a1:99:a9:32:92:2e:f1:3b:ad:
a7:a8:ad:c5:e8:ea:ae:9e:a9:a8:9d:b7:b4:d5:76:53:6d:ec:
a3:16:a3:b8:93:3c:50:89:6e:7e:d6:29:3a:6a:2b:cd:5c:11:
8c:a1:f7:85:d6:89:f7:c5:53:66:08:67:64:5e:da:64:b6:c1:
78:a9:d1:a5:db:0f:9c:1a:a3:17:eb:8b:f3:74:69:ca:6e:a2:
c8:1c:73:ee:c9:95:07:46:62:cd:c0:98:31:db:82:d8:76:4f:
cb:54:59:c9:e8:ae:d4:59:f4:b9:98:6a:06:cd:e8:e5:c7:53:
d7:49:46:b1:6b:63:15:df:37:80:5a:45:ce:a4:e6:3e:5a:c0:
36:d1:d5:09:92:ae:13:fb:83:b6:e8:f2:c3:e0:4f:1c:9e:fa:
26:fb:09:8b:0d:15:96:9e:15:64:01:87:c2:45:db:3c:4a:af:
cc:fe:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:18:50 2025 by rpki-client