Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91A50E2CA11EF86D9C489762E951A.roa
File: EFD91A50E2CA11EF86D9C489762E951A.roa (raw, json)
Hash identifier: 5XH8Xqr2fuUh9Y8AR2sSV1IYMivKJPVZ+4sq/lkNAQY=
Subject key identifier: 98:D4:A1:AA:DF:DE:D7:FF:DA:FE:8D:1C:AA:9D:DA:18:D4:8B:B6:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01507E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91A50E2CA11EF86D9C489762E951A.roa
Signing time: Tue 04 Feb 2025 07:37:51 +0000
ROA not before: Tue 04 Feb 2025 07:37:47 +0000
ROA not after: Wed 30 Apr 2025 07:37:47 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86142 (0x1507e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:37:47 2025 GMT
Not After : Apr 30 07:37:47 2025 GMT
Subject: CN=67a1c3cf-8aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:f1:d4:f1:80:36:c4:20:83:42:1b:88:06:
9d:db:8a:a5:08:a7:17:8f:8b:b1:45:a1:f6:d0:8f:
b4:17:1f:eb:25:67:68:d0:d5:33:c3:15:63:41:d3:
4e:e2:f3:07:c9:b9:0a:de:b4:ce:b6:62:eb:19:1f:
77:55:de:8c:6b:aa:34:3e:e2:3e:18:10:61:ca:36:
22:99:f7:a9:11:46:86:92:7b:48:ed:3c:c6:83:35:
fb:c5:85:47:bf:c5:49:e4:99:db:9a:c4:5f:a1:48:
62:40:9f:20:3b:06:ee:fe:48:90:c8:b4:a2:91:b3:
69:16:bf:6d:89:db:25:b8:27:54:6b:53:e7:d3:0b:
43:9f:f9:10:63:89:77:08:e1:d0:a3:b3:f6:73:78:
16:c2:b3:d6:62:1a:5d:65:95:c4:58:54:b3:ce:72:
38:61:b7:1c:0d:ec:01:0c:9e:f6:78:0b:ab:80:a6:
10:00:2d:71:6e:82:ce:5d:4f:eb:04:38:ea:de:1a:
f7:d9:53:ba:43:e0:d7:01:3a:b8:36:2b:32:26:94:
a6:0c:f9:53:7e:c5:b5:01:4c:ee:f9:ed:86:c8:57:
f8:b3:f4:c4:df:34:37:2e:6a:fc:53:55:85:48:3b:
11:0e:c2:c6:5f:07:2a:9c:02:8f:3b:a7:7c:61:25:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:A1:AA:DF:DE:D7:FF:DA:FE:8D:1C:AA:9D:DA:18:D4:8B:B6:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91A50E2CA11EF86D9C489762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:26:15:d7:5f:1c:db:13:ce:59:10:7a:e1:33:44:c1:11:9f:
99:04:5e:0c:88:b7:07:e0:f5:19:3b:49:14:de:86:6c:37:a4:
e1:d3:12:3e:65:41:7d:b6:80:c9:25:40:5a:44:3d:56:6c:bb:
74:bf:62:ba:cf:5d:83:ae:62:f3:b4:12:8a:d9:61:76:e5:07:
1d:9d:43:23:5f:0a:3f:8f:41:e8:69:77:aa:36:f0:ff:ae:c8:
95:88:bd:1f:f7:74:b4:e6:cb:92:22:94:72:cb:59:11:d6:18:
d6:01:b7:f5:f2:e8:56:9e:2d:38:55:9e:e8:11:53:26:ae:f3:
62:ea:2b:40:83:63:8f:40:24:a5:85:e5:de:4d:e1:64:74:f6:
37:bf:2b:c6:b0:41:f9:9e:a6:d4:89:78:cb:4e:f2:43:7c:dd:
ed:17:9b:50:4e:e5:ce:18:d8:d8:40:b1:29:94:a8:c4:f0:ce:
8f:49:f0:88:38:5c:2e:d3:a7:15:08:57:a9:9e:ab:f7:38:ce:
0f:9e:ec:fa:ec:4f:49:c8:5c:9d:13:21:35:0a:1e:92:48:15:
06:59:e9:09:ac:da:73:8e:83:36:75:55:6b:1c:ec:44:d5:cd:
d8:b0:c1:e8:d6:8c:3b:cf:cb:07:46:ef:6b:23:28:99:63:61:
23:38:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:15 2025 by rpki-client