Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEE84466F69011EF840D40BA762E951A.roa
File: EEE84466F69011EF840D40BA762E951A.roa (raw, json)
Hash identifier: a9DJFOo5pINiOaE0fkdaOXPa9BiLRvGBgS2sJpRBNaY=
Subject key identifier: D7:00:81:6F:B3:0A:76:A4:E8:B0:E6:4A:2C:C5:E0:BA:DE:9E:B9:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEE84466F69011EF840D40BA762E951A.roa
Signing time: Sat 01 Mar 2025 11:33:02 +0000
ROA not before: Sat 01 Mar 2025 11:32:58 +0000
ROA not after: Sat 05 Apr 2025 11:32:58 +0000
asID: 203020
IP address blocks: 154.207.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 11:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93705 (0x16e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 11:32:58 2025 GMT
Not After : Apr 5 11:32:58 2025 GMT
Subject: CN=67c2f06d-789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:48:e8:f9:1f:41:12:e8:c9:f4:2d:18:ca:
4b:59:27:3f:bb:6e:eb:68:6d:7a:d5:20:d4:f3:8f:
01:20:41:54:a9:9a:d2:16:36:5a:e2:60:89:42:bc:
75:18:67:b4:00:6d:d3:4a:34:84:de:98:5d:97:09:
75:54:d8:7f:74:ad:71:72:22:bc:e5:b8:f6:bc:f3:
90:45:5a:30:84:c2:18:fe:c3:2e:24:c2:9c:ac:ec:
7d:38:84:0f:e7:8e:b4:04:34:fc:d7:a6:55:e6:fa:
4a:7a:ed:71:e1:e4:12:51:ea:cf:34:3d:e8:6e:e4:
12:33:cb:52:91:43:c7:29:67:eb:cc:7b:78:ce:7b:
b1:e4:ea:9c:6c:5d:ad:80:25:e2:6a:09:16:74:4e:
91:53:84:a4:fa:a8:b0:72:85:f9:bc:d6:32:2b:21:
ff:4e:ee:a4:73:c2:fd:ec:72:36:ab:2e:13:99:b4:
58:d2:43:8a:6d:bd:d4:a7:e0:8b:86:d9:3c:ff:13:
88:53:4f:dd:52:86:4d:be:9a:dd:05:2f:7f:63:15:
d3:3d:27:8e:df:a9:4b:50:45:29:89:5c:70:ca:01:
4c:80:3f:52:d0:63:36:f1:01:33:71:f6:1e:1c:7d:
2a:f2:d2:72:4b:5b:db:80:ac:99:a5:0e:f7:07:fb:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:81:6F:B3:0A:76:A4:E8:B0:E6:4A:2C:C5:E0:BA:DE:9E:B9:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEE84466F69011EF840D40BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.228.0/22
Signature Algorithm: sha256WithRSAEncryption
84:e6:4f:40:b3:a5:cd:21:68:1a:f1:d0:cf:52:62:88:48:b6:
cf:24:93:58:03:83:5b:a9:d0:15:8b:2b:5d:76:1c:ba:44:f6:
cf:a7:67:fb:fc:29:90:9e:b5:09:6a:84:94:0f:c1:72:07:f6:
f0:03:c7:b4:0d:a0:7b:a6:ca:dd:61:da:91:92:ff:13:cd:ed:
15:34:8e:eb:07:27:d9:de:ec:3b:a6:59:3a:41:89:a3:6e:23:
91:c0:3d:a6:f9:16:b1:b3:b2:c8:15:70:4c:42:1a:a7:72:aa:
22:3c:ee:bf:52:df:54:43:c4:4e:b6:94:18:cf:ff:f1:8d:0d:
f1:14:af:a1:04:85:32:0d:ba:cf:3d:b1:54:21:fc:a5:da:05:
52:2c:68:52:fd:54:38:56:b9:56:9f:e4:f1:6b:ec:ab:a2:8e:
8e:5f:6b:3a:49:01:72:1c:31:2a:c7:b2:71:56:a5:80:0f:24:
6b:77:85:03:22:20:0b:fa:8c:50:00:2d:46:15:d0:8c:43:28:
ea:b0:ab:83:0f:c2:2b:fd:a8:75:9a:8f:f5:99:ad:70:79:d7:
64:1f:16:90:ec:08:ce:42:1b:6b:df:ed:a6:4e:3b:5a:df:a7:
e3:85:fe:c0:21:91:95:c1:4c:3e:6f:e8:78:0d:c5:1d:33:a6:
dd:9b:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client