Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA39F334F81511EF92DABE89762E951A.roa
File: EA39F334F81511EF92DABE89762E951A.roa (raw, json)
Hash identifier: aWahn0f8dN8Q1gi6YqvWxVM9iq6vpR1VrAtnGCLUZbY=
Subject key identifier: B7:9D:A0:FB:FA:C7:D5:00:46:BC:B8:F3:15:43:98:30:7E:CD:FB:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA39F334F81511EF92DABE89762E951A.roa
Signing time: Mon 03 Mar 2025 09:57:28 +0000
ROA not before: Mon 03 Mar 2025 09:57:24 +0000
ROA not after: Wed 30 Apr 2025 09:57:24 +0000
asID: 63139
IP address blocks: 154.94.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94177 (0x16fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:57:24 2025 GMT
Not After : Apr 30 09:57:24 2025 GMT
Subject: CN=67c57d08-2b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:0a:a2:79:9a:a1:dc:76:ee:8e:09:66:bd:
05:ce:79:d7:74:e8:dd:e1:3b:21:36:8c:f6:1b:35:
bc:de:e3:f5:30:88:e8:3b:3f:d4:4c:91:f0:31:3f:
13:e4:95:28:46:51:9b:a7:84:fe:cf:fb:52:26:2d:
4c:8d:8e:11:bd:0b:4b:34:57:3a:2a:ef:a3:a8:b2:
b1:a3:ff:81:04:31:00:08:f6:4c:97:e5:c5:ca:73:
2d:8c:a6:df:8d:eb:7e:e2:42:9e:c8:9e:16:2c:78:
83:91:b9:14:b1:65:f4:2a:c2:84:b6:b2:7d:54:f6:
c8:c4:dc:1d:37:80:e7:75:0d:f2:48:f7:c6:8e:68:
b6:9e:8a:a5:d0:74:c6:7e:e9:cc:7d:e8:dc:16:72:
b0:c7:6a:57:f8:79:95:bc:d4:e8:d8:d8:08:c3:b6:
81:79:f8:cc:f3:00:99:44:29:d8:94:a8:3c:5b:60:
31:79:6a:81:ae:36:94:dc:df:f7:0e:b1:7e:b3:0c:
f1:50:bf:58:7f:ac:31:28:4a:ec:51:16:7b:10:d7:
71:eb:b4:49:fa:5d:ee:1a:7a:3c:8d:5e:b6:48:c3:
4b:8b:2a:5c:9a:22:cb:52:13:b1:10:55:9f:9c:92:
3d:c1:dd:13:d2:4f:8b:b7:7f:19:e6:4d:62:9e:d3:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:A0:FB:FA:C7:D5:00:46:BC:B8:F3:15:43:98:30:7E:CD:FB:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA39F334F81511EF92DABE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fe:df:55:6f:65:96:01:5b:f3:2e:28:c1:8e:3a:54:de:62:
2d:bb:5a:39:fb:65:bf:4e:fb:b1:37:92:e0:84:ac:64:e6:b1:
0d:0d:6f:9a:4d:2a:57:64:0c:f3:b8:74:ce:e0:2c:3a:2e:fd:
99:10:fd:27:24:af:c1:46:5e:2d:0e:97:f5:0a:20:ad:53:a7:
0a:ca:5d:03:f8:d2:22:d8:4e:8f:be:f0:d9:ba:5b:5f:73:4b:
31:53:d9:14:6a:2a:df:49:20:33:9c:c9:35:a9:d0:bb:57:3d:
53:c9:48:df:21:6d:d3:df:1f:4c:cd:fa:79:75:02:d9:b0:3f:
8a:79:33:a1:0e:fa:d6:cc:36:21:3b:64:0b:20:c6:f8:9f:b7:
c7:ee:d1:fa:6e:8f:82:2a:8d:b7:45:12:24:05:df:28:84:b8:
ae:c8:67:4f:c4:fc:1f:f9:67:83:02:9b:e8:7e:1a:6b:94:a7:
68:09:8e:ee:d8:e9:45:27:d7:7d:c4:b7:8a:8a:60:28:df:b1:
f3:f2:9a:7c:51:64:c1:c9:c0:53:ed:b3:45:69:69:e9:87:6c:
b4:e6:23:53:ae:f5:b5:f4:2f:18:04:34:cd:e3:5a:2a:27:5b:
fd:1f:74:ff:bc:d8:93:d3:80:08:6c:14:bf:ba:ae:9e:e6:65:
bb:3f:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client