Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4FC95EE23C11EFBFCC8F44762E951A.roa
File: EB4FC95EE23C11EFBFCC8F44762E951A.roa (raw, json)
Hash identifier: wqEVPeKvbWHxgPflk9NiGcQijWPxjhMWKnz+98Zxaxg=
Subject key identifier: 9C:78:DE:A5:4E:EB:43:0B:C4:BD:1E:BE:56:97:9C:46:FB:87:80:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4FC95EE23C11EFBFCC8F44762E951A.roa
Signing time: Mon 03 Feb 2025 14:41:15 +0000
ROA not before: Mon 03 Feb 2025 14:41:11 +0000
ROA not after: Wed 30 Apr 2025 14:41:11 +0000
asID: 150008
IP address blocks: 154.210.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86036 (0x15014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:41:11 2025 GMT
Not After : Apr 30 14:41:11 2025 GMT
Subject: CN=67a0d58b-b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:f6:c9:11:dc:0b:cc:bf:e1:d2:4d:80:e3:
e5:d6:d1:b4:17:01:15:ee:ce:b4:11:fe:81:55:02:
18:e5:76:e7:87:cf:e4:51:03:4f:2c:5a:ca:be:db:
56:0d:f1:c9:a3:36:d1:c3:80:07:fd:8f:8b:02:e4:
4c:87:b2:85:86:21:78:18:50:2e:23:7d:d1:a2:9a:
d5:1c:02:8f:b9:cd:c7:08:89:e3:66:54:06:98:64:
87:4e:9b:d9:e0:16:b6:b1:9c:bd:61:f2:f8:0f:aa:
14:65:f7:72:13:85:43:31:32:ac:4e:7b:87:be:a1:
17:f1:af:55:9a:14:f3:04:14:a8:47:97:eb:e0:c6:
00:b7:2e:2d:18:34:50:75:95:4f:2e:57:26:b6:78:
e5:cd:26:79:0c:de:13:79:30:44:c0:78:31:d2:1b:
30:2e:58:a6:11:fd:f7:e6:21:ea:6a:69:8e:d9:aa:
1f:22:2d:7d:32:02:8d:3e:d6:f6:40:d3:39:ba:a6:
d9:8f:5a:3b:ce:f8:00:65:18:02:b4:14:89:2d:0c:
58:80:34:fd:b0:78:e3:bb:4f:b6:0d:07:8f:2e:3c:
20:43:d3:06:9e:13:3e:c9:07:c7:59:b1:ea:b1:31:
e5:c7:52:f4:98:1b:06:c1:da:db:74:1e:5a:c0:32:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:DE:A5:4E:EB:43:0B:C4:BD:1E:BE:56:97:9C:46:FB:87:80:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4FC95EE23C11EFBFCC8F44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.213.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c3:77:00:9f:cb:6f:12:8f:73:92:fa:0a:2f:c1:11:df:4d:
65:22:20:dc:ba:10:60:5f:0f:64:0c:d6:ea:ee:53:c5:65:75:
b6:ea:c2:53:ab:53:55:4c:4e:4c:c8:57:fe:82:f2:e7:68:65:
3e:90:92:1d:bc:fe:21:aa:9e:82:60:b5:98:bd:66:bd:21:cf:
bb:31:2b:16:56:a2:06:fb:06:04:a0:10:ac:92:7c:ef:9f:d9:
c0:33:5d:1a:e8:c4:e6:6d:9a:3a:76:22:d1:fa:5a:01:e6:03:
ee:6e:21:d6:8c:07:57:85:0d:0b:91:8e:a6:f0:af:e4:0c:13:
b9:73:c4:91:ee:fa:bd:a7:6f:29:ac:45:f1:25:d6:30:35:79:
55:82:e0:22:e0:8c:b9:d7:4e:5b:4e:41:f7:2b:94:c2:87:fe:
4a:e1:29:52:04:b4:5f:56:e2:8c:73:68:7d:a1:f8:d1:79:63:
f5:5b:dd:36:56:f2:48:99:25:db:0f:f7:58:6f:74:3b:73:7b:
31:2c:f1:13:5a:aa:81:d5:66:b5:57:ef:b3:63:fd:92:e8:63:
8b:0a:ff:da:cc:99:97:88:cf:77:df:82:86:20:95:f0:32:e1:
24:77:da:1d:b4:49:77:8f:3a:70:6f:3f:be:9d:a8:8a:f7:da:
24:ec:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:07 2025 by rpki-client