Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47C0394F39A11EF8DF90E52762E951A.roa
File: E47C0394F39A11EF8DF90E52762E951A.roa (raw, json)
Hash identifier: VEI7InLpRAS+gZ843PAsAVkJN2dV/BLBUJB7dQvqba0=
Subject key identifier: B8:15:37:CD:CF:A5:24:10:D9:E4:EC:E6:A0:0A:D6:19:A3:E1:D7:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47C0394F39A11EF8DF90E52762E951A.roa
Signing time: Tue 25 Feb 2025 17:06:45 +0000
ROA not before: Tue 25 Feb 2025 17:06:42 +0000
ROA not after: Wed 09 Apr 2025 17:06:42 +0000
asID: 138915
IP address blocks: 154.95.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90032 (0x15fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 17:06:42 2025 GMT
Not After : Apr 9 17:06:42 2025 GMT
Subject: CN=67bdf8a5-c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:58:ff:9f:83:35:a9:16:42:63:ae:b8:fd:
1d:60:2c:c5:c7:fc:c6:a1:60:b7:3e:8e:89:79:46:
92:d7:ac:7c:91:1b:c6:17:c0:a3:01:48:93:4e:80:
2b:e0:78:f2:7e:2c:05:ee:c7:27:e2:aa:04:5b:7a:
3e:91:7c:67:78:7b:dd:9d:f7:c4:5a:3e:3d:33:b7:
29:a8:2e:4f:cf:88:49:a6:52:5d:41:66:f2:3c:75:
16:24:66:e6:09:d3:ba:34:c5:8b:8b:eb:3f:da:7b:
83:c5:1e:be:e7:c7:03:f3:9a:67:2d:b0:f0:39:55:
66:03:06:87:f6:2d:69:d1:9f:fa:3c:04:f7:55:9b:
fd:a5:f7:b0:e0:d2:90:d7:13:fc:5b:e6:7a:1e:b3:
e8:44:f4:3e:9b:07:50:c6:8c:e7:e9:76:39:c0:e3:
40:78:c2:d0:9c:a8:c4:5a:d4:7a:35:34:d6:25:84:
57:16:71:9b:d1:d4:35:68:c8:bf:b2:7d:ce:81:45:
b1:b3:9f:66:62:44:ca:69:cb:ba:10:c2:bb:16:2d:
2a:64:eb:55:db:bc:ee:b0:9d:fd:27:7b:ac:93:5c:
03:71:b7:65:53:56:e7:04:4a:2c:2c:97:bd:bd:b4:
08:6d:a5:72:ca:f7:a2:26:bd:01:be:db:75:b6:fb:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:37:CD:CF:A5:24:10:D9:E4:EC:E6:A0:0A:D6:19:A3:E1:D7:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47C0394F39A11EF8DF90E52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.92.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0c:55:76:0e:4c:d9:92:1b:d9:4a:ed:8c:f8:50:13:bd:44:
13:08:01:56:7d:a5:35:6d:ef:e0:12:7e:d1:5c:62:f9:0d:fd:
d9:6d:05:56:77:d9:b1:de:a1:ad:ba:9a:47:e1:44:c0:2f:1b:
f8:3d:8f:7b:35:55:e5:03:6c:21:71:3c:2a:f2:98:27:26:8c:
06:a0:87:59:2f:ad:af:ed:4f:b7:ba:f2:a5:ae:cb:2e:cd:28:
42:61:73:c7:d8:f1:c7:7d:06:eb:68:56:0f:79:f0:4e:8e:6c:
8c:de:86:21:cd:cb:7e:86:c1:3b:0e:ee:f5:03:5b:ba:8c:12:
63:d8:66:4a:ee:cd:67:00:7e:84:52:83:3f:c4:a1:ca:20:46:
a9:d4:48:d2:7f:02:38:08:44:e7:75:ef:a0:5e:49:7c:6d:2d:
46:ad:6c:b8:f1:43:70:0f:b4:88:17:b0:d2:21:d1:ab:c2:38:
89:7c:d3:30:0f:47:7d:e0:94:09:1e:da:e7:43:d6:42:0a:0f:
54:01:b3:9a:b3:c9:06:9d:65:07:40:59:78:d0:6a:22:78:cb:
5f:6b:cc:a7:a3:ce:eb:4e:80:9f:4b:a1:e0:7d:79:31:ea:37:
c6:6b:30:b6:26:e4:bb:e2:c4:17:8c:c9:c8:25:a4:17:ff:a0:
df:57:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:47 2025 by rpki-client