Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F887AFACF62711EFA9FCEA61762E951A.roa
File: F887AFACF62711EFA9FCEA61762E951A.roa (raw, json)
Hash identifier: pzlWfZn3YarJUUWzyqnepBFU/sLoLOqZUfw+7Ks2LRo=
Subject key identifier: C5:58:19:04:55:38:00:C3:D8:69:19:F4:90:54:A1:35:ED:86:F7:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F887AFACF62711EFA9FCEA61762E951A.roa
Signing time: Fri 28 Feb 2025 23:01:41 +0000
ROA not before: Fri 28 Feb 2025 23:01:37 +0000
ROA not after: Sat 19 Apr 2025 23:01:37 +0000
asID: 138915
IP address blocks: 154.90.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93355 (0x16cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:01:37 2025 GMT
Not After : Apr 19 23:01:37 2025 GMT
Subject: CN=67c24054-ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:4c:5e:09:6d:3f:a9:b5:0b:bd:4a:43:fa:
50:fc:f9:50:12:3a:ba:e1:75:93:d0:92:c1:4b:88:
25:60:57:17:e8:8e:d7:5e:5e:4c:33:b5:dc:05:f2:
23:56:d2:c2:d0:4d:76:6e:ba:55:dc:2c:de:6f:a5:
c9:71:50:b4:15:23:36:55:66:db:25:f0:d3:e9:d6:
6d:ff:95:69:c6:82:fe:0a:39:69:38:8a:ec:f7:c7:
17:55:d3:3f:a9:6a:8d:cf:60:55:b4:4d:2f:1e:97:
37:b9:06:d4:b3:50:29:58:b8:20:a5:97:8c:da:36:
5b:3e:31:48:4d:c8:6a:31:d5:ca:22:c7:33:b1:25:
41:92:c7:35:11:f6:6f:4f:c4:d6:85:be:35:aa:0b:
d7:6c:bb:3d:ad:7a:8b:25:2a:7f:ac:cd:73:1d:48:
ce:e6:95:eb:e5:ac:a5:7c:e5:18:dc:de:ec:53:b3:
0b:d8:40:dc:c7:8a:b2:79:83:38:a4:37:ea:0a:8d:
49:1a:ad:0b:ec:f0:77:79:88:02:30:98:e1:08:54:
cc:25:64:1a:23:79:2f:00:50:02:b1:60:4e:b6:dd:
30:d1:31:2c:05:2a:14:4e:3c:a1:b0:c2:41:8f:6c:
95:30:0b:a9:99:6b:52:04:82:b1:b0:a9:64:ba:e9:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:19:04:55:38:00:C3:D8:69:19:F4:90:54:A1:35:ED:86:F7:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F887AFACF62711EFA9FCEA61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.62.0/23
Signature Algorithm: sha256WithRSAEncryption
29:71:ba:4d:e6:d8:ff:89:26:e1:9c:c2:63:5f:48:85:e5:f5:
74:2e:9a:d6:0f:e9:cd:94:1a:79:c5:02:4f:e4:80:0c:1d:ae:
a3:1a:67:0f:01:5b:5e:d0:d0:09:ad:db:e7:bd:45:f9:a6:f3:
91:fd:bd:09:5a:c0:a4:91:37:35:d2:c3:37:9c:2e:3a:53:dd:
f9:ac:8c:51:e3:df:f2:da:ea:29:8b:ff:aa:a5:79:db:15:a2:
b9:08:0f:9b:58:aa:8a:82:0b:9c:5a:38:fd:63:3a:b2:7a:47:
54:12:70:f6:93:f9:6a:17:29:66:95:aa:8a:5d:b6:b5:22:47:
ec:80:af:42:37:b9:d3:8d:c8:8c:49:5d:ef:26:45:f4:54:f3:
dc:74:0f:03:97:bf:c4:d1:f9:b5:5a:63:3d:e0:54:a0:30:b4:
5a:ac:d1:85:f5:2e:7c:f1:ac:e5:3c:ef:21:4b:fe:d7:e0:00:
3b:75:76:11:49:da:2d:ee:a1:1d:73:be:48:c9:0e:64:be:8f:
da:70:43:29:7a:10:64:78:01:cc:c5:92:92:b0:12:ab:3e:f8:
7e:b5:4d:87:89:98:75:3e:e0:4f:a5:0e:00:6c:d1:ca:f1:59:
5e:b0:ba:39:04:07:cb:62:69:3c:3f:88:39:76:1c:01:9d:7f:
e7:fc:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:47 2025 by rpki-client