Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F6A05CF5CA11EFB288416B762E951A.roa
File: E6F6A05CF5CA11EFB288416B762E951A.roa (raw, json)
Hash identifier: 5t2eOmFnY3FeukJcVbX+gOfWqEd8PmXsB7gIzdXE7z0=
Subject key identifier: 75:3D:4B:60:D3:5E:22:6B:BC:A8:E6:9C:83:1F:E1:39:BC:72:EE:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F6A05CF5CA11EFB288416B762E951A.roa
Signing time: Fri 28 Feb 2025 11:55:28 +0000
ROA not before: Fri 28 Feb 2025 11:55:24 +0000
ROA not after: Fri 11 Apr 2025 11:55:24 +0000
asID: 138915
IP address blocks: 154.203.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92934 (0x16b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:55:24 2025 GMT
Not After : Apr 11 11:55:24 2025 GMT
Subject: CN=67c1a430-6c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:62:99:40:06:4b:89:29:5b:e0:38:d7:41:
bd:47:6a:62:4c:65:9f:2a:36:59:a4:e1:6e:aa:ee:
8b:58:10:73:b5:f2:23:77:ce:19:ca:17:90:95:c2:
ee:1f:ea:42:2f:e5:f3:1c:74:ed:21:71:30:4d:d5:
2e:99:15:4c:1f:44:1c:c3:54:b7:ce:0c:02:2d:a5:
9f:f2:da:83:60:3a:ec:34:96:1d:72:9b:9b:08:bd:
fe:db:06:49:3b:4b:73:93:e3:8f:37:e3:61:16:ad:
45:65:a5:08:3c:fd:1c:16:72:ad:97:ba:6a:59:53:
da:c5:2d:ec:1c:ef:ec:4a:22:1b:db:af:54:87:c9:
bd:55:4c:c4:37:41:21:08:c3:6a:a7:c9:d7:6e:01:
4b:dd:83:40:68:21:b3:bc:69:af:9d:ad:b6:20:62:
ad:65:2c:61:61:88:2f:6a:c4:fd:61:3b:96:a2:68:
4a:3b:34:91:d7:f0:ef:e9:0b:4a:b9:e1:b3:ac:6c:
dc:fc:3a:af:d2:34:55:71:d9:5a:43:85:ac:1a:b8:
55:5d:16:d2:ce:69:e1:10:70:45:b6:d9:28:28:b3:
57:ee:92:6e:8e:5b:00:fa:a6:d1:e6:b9:fa:d7:2a:
1b:75:eb:d8:4c:c9:12:35:95:4f:fc:e8:ad:15:6b:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:4B:60:D3:5E:22:6B:BC:A8:E6:9C:83:1F:E1:39:BC:72:EE:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F6A05CF5CA11EFB288416B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.157.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6a:f1:31:7e:23:7f:5c:aa:fd:a2:8d:cf:8f:d6:b1:5a:45:
55:5c:2f:68:36:02:4f:00:79:a2:59:8b:ce:94:59:e0:a5:cf:
71:f8:c1:36:a0:e1:35:8d:8c:bd:9d:0a:c4:c3:c9:9a:59:7a:
90:22:2b:34:e3:bd:20:49:eb:3c:36:8f:a3:f1:fb:75:c6:24:
61:1d:82:a3:ea:a6:67:e3:a7:73:9b:d6:12:f5:d9:49:e3:fb:
83:0c:20:e8:b2:88:40:cd:db:53:e2:a6:d8:ca:d5:50:ac:ec:
fb:7c:8a:5f:f7:8f:74:94:a7:02:aa:19:83:05:47:89:39:32:
48:7a:0f:aa:32:d4:23:a1:64:a0:9f:9c:49:1b:18:40:be:4f:
45:f4:2e:03:63:23:df:df:0f:9f:12:ec:4f:e9:91:fc:1e:c5:
f7:75:0e:7b:a3:f9:b5:23:8d:0b:45:8f:93:f5:54:7b:f2:ef:
d7:e1:98:6e:1c:2c:cd:de:dc:b5:15:47:ec:ee:93:4f:6a:73:
52:c1:f7:7f:ff:73:fa:47:6f:09:85:b5:81:db:7b:90:1d:ec:
e4:89:25:23:d5:06:db:16:fd:4a:1e:db:90:2b:b1:03:88:96:
08:9a:d8:24:32:fd:82:ff:a1:50:ac:32:7a:35:97:e7:6a:09:
9b:1f:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:44 2025 by rpki-client