Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45A81BAF5C411EFAC994D45762E951A.roa
File: F45A81BAF5C411EFAC994D45762E951A.roa (raw, json)
Hash identifier: ri/3YKqtH4I1w/i+l6UA3kAU6BtLAZWNEO8b5TX/dGM=
Subject key identifier: 48:E7:A2:96:58:0C:F3:2A:92:46:C4:2C:10:A4:FE:0D:94:6C:9D:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45A81BAF5C411EFAC994D45762E951A.roa
Signing time: Fri 28 Feb 2025 11:12:54 +0000
ROA not before: Fri 28 Feb 2025 11:12:48 +0000
ROA not after: Fri 11 Apr 2025 11:12:48 +0000
asID: 63139
IP address blocks: 154.203.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92884 (0x16ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:12:48 2025 GMT
Not After : Apr 11 11:12:48 2025 GMT
Subject: CN=67c19a35-e215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:5e:32:32:19:9d:63:2a:79:54:0c:8e:6a:
a2:21:a6:e1:48:d6:b9:3d:71:88:c5:d0:8f:67:29:
18:95:74:8e:47:a6:c6:af:04:03:09:ce:40:56:e0:
44:e3:81:5f:2b:f1:17:75:91:99:ba:4e:1f:93:2b:
08:04:5a:83:ca:7f:1b:3e:e3:da:f5:c0:7d:2c:74:
f7:4b:69:ad:31:49:cc:19:b9:74:d9:e0:32:48:95:
0e:e9:3a:60:44:bf:1f:e9:c4:12:a0:12:8b:9f:60:
65:b8:cd:f5:17:48:24:82:24:b7:b9:9e:56:0a:82:
bc:e8:7d:cd:a3:a7:21:25:d7:99:3b:c2:27:cd:1e:
98:75:52:ca:33:dc:be:92:69:02:a6:8e:be:93:76:
f1:3a:d8:d3:5a:f9:c2:df:f9:3c:0c:e9:20:e5:b9:
a1:ef:c7:1d:3d:78:3b:62:06:a6:bd:29:22:2f:3d:
5d:e2:36:9b:80:a9:55:0d:75:ed:25:a2:da:8f:b5:
5c:8a:a8:ee:bc:c2:72:35:52:db:3a:76:0a:9d:d3:
38:0f:68:6d:6c:2e:d1:87:36:be:25:6b:39:34:92:
0e:b7:7f:f1:4b:bb:7b:23:0a:74:ef:23:8c:38:7f:
48:dd:4a:66:c6:43:bd:54:f0:9e:e7:21:db:aa:87:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:A2:96:58:0C:F3:2A:92:46:C4:2C:10:A4:FE:0D:94:6C:9D:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45A81BAF5C411EFAC994D45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.168.0/24
Signature Algorithm: sha256WithRSAEncryption
be:3e:1f:ec:9c:dd:45:e1:e1:14:d6:be:73:be:34:74:85:a9:
2a:eb:7f:f6:57:fb:ef:49:78:85:7f:33:6f:73:07:15:75:d6:
3e:14:92:83:e1:03:a2:48:2a:15:d9:0f:f0:c4:e3:bf:52:ef:
9a:57:5a:5a:32:64:a2:3f:9b:01:e7:02:2d:19:0c:8a:7e:05:
8c:cc:bf:c0:1a:a5:1c:3f:e3:7f:6e:b3:6e:61:89:53:2e:3f:
4a:73:92:d1:ab:20:0f:f3:55:dd:0a:62:a2:fd:5c:87:c0:d4:
03:6c:9d:c4:b8:0d:09:0c:a0:3e:2f:94:86:22:1f:47:4c:ed:
e0:e2:d5:8d:3c:45:e8:27:6f:a4:d8:38:33:35:2f:a4:51:c0:
07:f9:37:40:ce:08:9d:e1:ca:26:c6:aa:25:6e:f9:34:37:00:
8b:06:2f:a7:dd:26:10:bb:b3:73:32:aa:af:7f:5a:cc:51:f0:
a9:47:8e:e6:04:83:f7:4e:c7:e3:44:d4:c4:62:7f:51:28:05:
28:3b:47:34:1c:ff:ee:09:91:cc:55:42:3b:00:54:20:0c:76:
50:8a:a6:2b:18:3b:85:cb:9c:cd:37:63:52:46:f9:bd:10:5a:
41:b3:68:3b:7a:5e:ab:3a:6f:ae:f5:e6:df:6c:9a:ef:7d:f2:
c8:9e:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:43 2025 by rpki-client