Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47D8528F47311EFA8A3D1AE762E951A.roa
File: E47D8528F47311EFA8A3D1AE762E951A.roa (raw, json)
Hash identifier: o0fbAAnio+L8bWGidvntc24WsUjbhXn0yzor2FEiA5k=
Subject key identifier: 4E:38:4E:B3:DA:D5:F8:74:C3:CD:50:D1:BB:D0:0B:7A:E0:84:78:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016576
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47D8528F47311EFA8A3D1AE762E951A.roa
Signing time: Wed 26 Feb 2025 19:00:06 +0000
ROA not before: Wed 26 Feb 2025 19:00:03 +0000
ROA not after: Sat 19 Feb 2028 19:00:03 +0000
asID: 17561
IP address blocks: 154.218.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91510 (0x16576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:00:03 2025 GMT
Not After : Feb 19 19:00:03 2028 GMT
Subject: CN=67bf64b6-9337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:e8:45:64:9b:76:ab:4a:fb:fe:39:54:87:
0b:a8:75:98:a0:0d:85:96:4f:33:67:a1:34:ac:4d:
4c:49:a6:b5:bf:3b:c6:4e:fd:0b:15:87:be:5e:15:
93:02:63:e3:24:10:b7:56:1b:a7:76:44:19:8d:59:
4d:32:ab:e4:06:3f:2c:cb:d7:db:3f:8e:a7:a1:4e:
1b:6c:05:95:db:ba:69:83:19:04:01:43:7f:ee:17:
c4:bc:ff:bc:06:17:51:da:14:23:7a:02:48:ce:d1:
79:50:59:23:d1:a9:ae:3a:83:62:94:ed:0a:7a:b3:
60:b9:e5:80:b4:ce:5a:75:86:1a:15:b6:4c:3a:38:
0f:84:b4:9d:57:85:c2:97:bc:2b:04:5b:e8:58:0a:
d1:db:7c:3e:db:54:dc:2a:10:a6:4a:0e:bb:5e:2e:
e9:d1:bc:bd:d0:59:ee:10:e2:57:cd:68:73:9e:9f:
7b:9c:7a:e3:05:d1:d1:6c:9b:de:f1:76:ae:0e:d0:
af:77:2b:a1:49:aa:f5:db:d5:b5:60:b4:e2:47:3b:
96:e7:5c:26:54:db:0e:85:ad:30:ab:de:1c:e6:51:
2d:40:4e:b7:b0:f9:45:57:45:f5:81:8c:ad:18:d6:
5a:c2:32:03:49:30:3d:5e:0f:b8:0b:39:42:77:ad:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:4E:B3:DA:D5:F8:74:C3:CD:50:D1:BB:D0:0B:7A:E0:84:78:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47D8528F47311EFA8A3D1AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9d:f1:78:16:ed:e1:40:a4:e8:ae:6f:b1:e6:35:10:96:17:
49:fd:27:9d:99:64:3d:bf:b4:00:76:12:02:a0:08:2d:cd:97:
15:66:f3:af:3e:43:47:98:4a:cc:e2:ef:2b:73:c7:30:98:f8:
81:51:95:0b:37:e8:0f:f6:d7:a5:cc:91:78:15:45:b8:38:49:
f0:1c:1d:da:ea:84:56:5e:b3:cd:0f:f4:41:e7:af:19:41:d2:
e2:5f:c6:53:1d:ec:8c:b3:33:c5:79:be:97:c6:de:bc:2d:57:
e5:80:8d:0f:84:7f:a2:9c:0c:7b:e0:d8:e2:47:0b:0e:0a:3a:
c0:20:e6:4e:77:83:5a:5f:cd:20:7c:b9:4a:db:71:cc:21:ff:
fe:d8:49:93:14:76:91:b2:22:5b:0e:3f:a2:a8:ef:64:92:c0:
f4:d5:f6:1d:0a:f3:72:92:be:cd:e8:86:b0:0b:7c:4c:3a:b2:
d7:34:c5:80:f9:bc:18:f6:49:10:2f:d7:7d:7d:d5:9f:99:35:
ab:4d:c5:cb:d8:b1:94:b3:d8:68:37:2e:8e:aa:2a:3d:9a:67:
a6:16:59:0a:b9:bd:8d:df:e2:86:9f:5c:82:43:36:d2:d2:c4:
56:c0:74:13:d5:4e:26:6d:fa:7b:8a:bb:8b:4f:a6:3b:35:75:
0b:c2:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:53 2025 by rpki-client