Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19EEECEF16511EFA0FFC5B6762E951A.roa
File: F19EEECEF16511EFA0FFC5B6762E951A.roa (raw, json)
Hash identifier: KxgiqCC4LkGhjb4vidHEYrddKLv6Y1+JAqnV661O+KI=
Subject key identifier: 22:AC:40:D4:56:77:3D:11:9B:57:8A:40:E7:68:B1:75:02:77:E4:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19EEECEF16511EFA0FFC5B6762E951A.roa
Signing time: Sat 22 Feb 2025 21:42:42 +0000
ROA not before: Sat 22 Feb 2025 21:42:38 +0000
ROA not after: Wed 26 Mar 2025 21:42:38 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88727 (0x15a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 21:42:38 2025 GMT
Not After : Mar 26 21:42:38 2025 GMT
Subject: CN=67ba44d2-5f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:30:99:c3:cf:8d:71:7a:55:85:91:82:c0:
81:f9:8a:28:23:31:37:62:0c:6f:ef:e3:d2:5b:65:
e7:ca:04:99:de:8d:fd:08:61:83:76:9e:f6:a6:83:
b1:0f:70:79:95:1c:2c:0e:91:4a:c4:8c:5b:77:71:
1c:8c:68:94:6d:50:d2:3e:96:f8:61:9d:0e:2d:c7:
51:4f:db:36:dd:79:bb:0d:27:33:8d:cb:ca:a4:d8:
db:aa:ee:64:cd:ef:3f:0d:59:45:64:b2:a7:c0:fd:
db:f8:65:ef:67:b8:f0:3d:26:05:d3:e4:b6:20:71:
36:30:fe:29:84:38:61:f7:ab:15:82:47:d8:70:3e:
50:30:1a:f6:db:a0:40:91:ae:81:7f:ec:9f:a3:9f:
ce:2b:b8:1b:28:89:9a:5f:2f:da:55:11:ca:29:08:
b7:4c:62:c2:e3:06:62:8b:c3:89:5f:ac:c2:be:9d:
9e:0a:5e:21:47:54:b8:85:5f:54:1c:e7:7a:11:b3:
f7:db:26:1c:73:2e:1e:e6:05:cb:e4:15:af:af:96:
85:f4:2b:be:9a:1e:42:b9:03:96:43:cf:0b:51:70:
55:62:a7:e9:5b:c3:94:70:66:70:15:95:ff:ff:79:
2b:91:26:2b:2c:17:ed:20:09:38:84:41:89:51:bc:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:40:D4:56:77:3D:11:9B:57:8A:40:E7:68:B1:75:02:77:E4:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19EEECEF16511EFA0FFC5B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:93:24:ab:42:43:fb:86:5c:54:81:ce:7c:8c:83:32:91:b4:
34:49:a1:3f:ae:2b:34:00:51:4c:43:bc:bb:b2:69:db:11:fa:
09:86:7d:bf:94:ae:6e:ae:82:98:34:e5:61:43:ad:45:7a:db:
ea:17:b0:47:b5:b7:9c:9a:a7:5a:18:7d:48:d7:23:22:50:ba:
55:15:39:14:2b:12:8d:5d:62:a9:67:75:e8:d9:03:27:96:95:
b1:88:0b:01:4b:04:69:8d:13:3c:f3:03:50:3d:c1:e4:8b:f7:
e5:e6:29:e0:a5:95:8f:c8:a4:16:fb:1e:f4:5c:8b:f2:79:ff:
12:4d:bf:68:f7:c7:c9:60:8c:23:a6:41:24:f0:e0:a3:40:09:
e1:93:71:52:22:b0:df:53:de:9d:9a:c1:99:1c:fa:57:42:f6:
20:c8:50:4e:a9:b2:33:fd:8d:8d:b7:b4:4c:da:11:50:a1:02:
8f:2f:2b:a4:0c:01:d4:97:95:a2:bf:9a:80:bd:3d:81:b0:52:
b1:93:c9:ce:58:e8:8b:2a:0b:4a:74:6a:35:16:0b:c6:8e:05:
ec:ba:2f:02:62:0e:88:4b:e1:f8:b5:cd:f3:88:56:d4:80:aa:
3f:f4:d0:82:8d:9a:a8:e8:1f:dd:d3:ca:e0:61:04:33:b9:01:
d8:dc:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:33 2025 by rpki-client