Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E541A486F47C11EFAB2F546E762E951A.roa
File: E541A486F47C11EFAB2F546E762E951A.roa (raw, json)
Hash identifier: kYmlO+3VtQxhoaWksBFCO1KkUkvR5/f3weuDTxNxEW4=
Subject key identifier: F0:70:3F:C8:0B:A5:4A:A8:FB:12:68:72:E6:6A:EA:7B:7A:E6:33:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E541A486F47C11EFAB2F546E762E951A.roa
Signing time: Wed 26 Feb 2025 20:04:33 +0000
ROA not before: Wed 26 Feb 2025 20:04:29 +0000
ROA not after: Sat 19 Feb 2028 20:04:29 +0000
asID: 17561
IP address blocks: 154.218.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91611 (0x165db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:04:29 2025 GMT
Not After : Feb 19 20:04:29 2028 GMT
Subject: CN=67bf73d1-ee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:ad:92:7f:04:62:91:88:6f:5e:59:cd:0b:
40:22:e2:d6:76:d2:ef:3a:bc:92:87:bc:a0:d6:43:
3a:56:10:c5:03:3e:50:08:24:85:06:30:da:f5:fa:
03:11:73:5b:4c:db:a8:f1:74:3f:e3:b5:33:e1:20:
fb:8e:48:3a:94:58:c9:bf:b1:fb:41:18:4f:ff:20:
dc:e1:3f:51:07:28:38:82:e1:18:2b:60:65:f3:9a:
4b:98:5e:4c:01:85:a1:d7:80:c8:6e:76:4f:e6:bf:
9f:97:65:ae:52:f6:44:7d:30:79:a3:cb:cb:b8:31:
5a:4a:80:72:33:62:dd:c3:22:2f:6a:d5:c1:8e:67:
e2:c4:4e:09:e9:11:1c:15:39:bb:9c:ae:0f:e8:10:
7b:7a:5d:26:3f:20:56:3e:9a:da:b0:a4:56:e9:89:
02:99:bf:a2:68:75:72:74:df:0f:62:9a:6d:d2:67:
17:77:6f:8d:dd:30:d8:bd:f3:5b:f1:ea:64:97:38:
b0:43:ef:c1:0a:8d:ce:e8:b5:f9:af:76:ab:a4:3a:
8e:e9:c5:3f:15:76:91:4e:7c:dc:64:c7:2c:fd:33:
63:28:51:43:9b:9c:4a:38:ce:ce:9c:08:38:53:41:
9a:03:a1:6c:5e:63:a1:54:28:b2:2c:8d:e9:04:e5:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:3F:C8:0B:A5:4A:A8:FB:12:68:72:E6:6A:EA:7B:7A:E6:33:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E541A486F47C11EFAB2F546E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.58.0/24
Signature Algorithm: sha256WithRSAEncryption
21:53:df:46:66:cf:9d:1b:05:74:1d:66:00:1c:d5:6c:10:2e:
04:79:91:d1:6d:d9:39:18:60:01:2d:da:0d:36:d8:2a:cf:5f:
53:c4:8a:f0:2e:b7:28:7d:93:f3:d4:c5:4d:6c:b5:e1:f0:fc:
4e:76:65:f6:c2:09:af:d6:c5:75:e5:c9:c9:c7:74:45:22:69:
43:05:1f:46:71:5a:3e:a1:b3:a3:fe:c2:6b:ff:3d:6b:06:6d:
a4:8b:56:09:58:41:2e:32:7e:3c:34:5b:cb:a1:dc:d7:e6:c8:
eb:08:91:d9:f3:9f:e0:f6:b9:c2:8b:c0:81:dd:e5:af:d2:5f:
fc:1c:6f:e4:fe:65:99:dd:d5:7a:bf:54:5e:32:aa:7c:52:5b:
36:4f:07:e0:86:17:a4:d0:c3:e6:0c:06:cf:e9:f5:a4:65:91:
a0:7f:cb:25:3c:95:88:a2:ca:b5:2e:08:8f:d8:30:44:69:d9:
15:e5:79:2b:65:fc:b0:1a:81:23:81:42:8c:24:8b:f3:42:38:
c2:b5:37:bb:d2:1b:73:bb:b3:2f:00:39:d2:41:11:17:9e:7a:
26:c0:ee:ce:68:8d:d4:bb:6a:7e:ca:84:48:20:24:c2:b2:a1:
2d:44:93:16:09:dd:ea:9d:8f:9f:e0:58:97:7c:16:30:69:3d:
1d:3b:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:39 2025 by rpki-client