Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1AD7ACC8BA11EFB9CA818F762E951A.roa
File: FB1AD7ACC8BA11EFB9CA818F762E951A.roa (raw, json)
Hash identifier: +5XIM+u+Z8PiOziSplsiW2g/ykhtPkHeJaqNGkTqSMo=
Subject key identifier: 34:4D:78:C5:9D:17:19:E9:A8:47:4D:EB:CF:06:92:3B:DE:25:BA:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1AD7ACC8BA11EFB9CA818F762E951A.roa
Signing time: Thu 02 Jan 2025 03:38:07 +0000
ROA not before: Thu 02 Jan 2025 03:38:04 +0000
ROA not after: Sat 13 Dec 2025 03:38:04 +0000
asID: 984
IP address blocks: 154.221.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78286 (0x131ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:38:04 2025 GMT
Not After : Dec 13 03:38:04 2025 GMT
Subject: CN=67760a1f-3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:7b:66:68:da:09:c6:61:e1:76:b5:3e:97:
62:b7:b1:7f:7b:90:7f:fd:35:27:d9:8e:d2:97:eb:
da:e4:e0:52:da:5c:9d:6e:b3:40:e9:82:5d:93:e7:
9c:6b:39:15:b8:30:62:22:85:0d:7d:e1:d0:9b:9d:
04:d0:ae:37:92:fd:7d:80:65:6e:4a:4d:12:cd:ef:
db:e6:37:ca:1e:31:3f:d8:46:59:96:e2:4c:f6:c0:
2c:2d:7c:31:3c:5a:2d:01:d4:2b:9a:d0:de:5c:6d:
d1:c0:f9:4b:61:09:74:1e:dc:06:04:8f:48:e3:b2:
2d:8c:67:54:5d:49:57:9c:44:3b:b6:c4:e0:63:52:
aa:79:21:09:92:4e:7b:0c:25:b2:a0:cb:f2:23:b5:
b5:5e:f1:f6:18:85:0f:6d:e9:e3:91:a2:67:c9:a5:
5b:94:10:34:e2:77:59:3e:c8:0e:2e:9c:bf:22:ec:
36:42:a1:97:b7:97:67:08:f9:b9:4f:ef:57:3d:7f:
c3:f2:61:11:5c:3b:22:c4:7e:67:c4:a5:84:da:6c:
e3:df:20:68:91:23:d1:62:f4:16:41:48:ca:5d:dc:
3e:a7:cd:7b:ce:8f:5b:2b:6e:84:c8:76:a9:81:84:
e9:56:80:da:2c:3a:ff:4f:d3:7b:4d:ac:87:8d:c6:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:78:C5:9D:17:19:E9:A8:47:4D:EB:CF:06:92:3B:DE:25:BA:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1AD7ACC8BA11EFB9CA818F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.39.0/24
Signature Algorithm: sha256WithRSAEncryption
58:80:27:6c:34:b7:5c:d5:36:1c:71:19:c6:46:1a:6b:76:81:
7e:13:a6:fe:42:2a:cd:ab:0e:f9:6b:89:4f:c8:48:ae:b1:77:
a5:a3:46:c2:96:15:3a:41:d5:9a:07:60:c3:f5:0c:8c:a8:3b:
af:dc:a6:e3:a9:9b:98:fd:46:12:06:7b:35:0d:d8:01:dc:62:
07:fb:11:56:a1:cc:32:6b:c7:8a:4d:07:14:f0:7b:fb:43:6b:
42:33:1a:87:20:31:e1:ad:ea:96:1b:d0:41:7a:94:ac:04:8f:
8a:b6:01:aa:0c:d4:2f:56:c8:f8:1d:af:1e:d7:5e:c1:18:1e:
23:c6:06:1e:9c:0b:07:b3:92:89:5d:93:f7:c8:cf:64:e3:2e:
f3:ca:5b:02:ff:11:ff:d1:b6:b7:5a:3e:8f:dc:5e:89:f6:b3:
b0:75:c6:ec:79:4d:63:03:bb:82:83:f3:55:54:21:af:de:c5:
1f:dc:4e:d4:22:82:05:e9:ee:07:5c:cf:aa:e0:05:ff:e9:a9:
e9:9e:06:a6:8a:9f:22:3a:df:1a:ae:6f:96:3f:21:19:dd:0a:
2f:f1:2c:14:5a:bc:6a:d2:96:df:1c:80:82:9f:ed:16:30:3e:
2c:b8:32:9c:e1:9e:2a:1e:10:48:1a:9a:48:36:c3:35:10:e3:
08:71:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:54 2025 by rpki-client