Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC375F3CF44011EFBB12F54B762E951A.roa
File: FC375F3CF44011EFBB12F54B762E951A.roa (raw, json)
Hash identifier: QCs8upKuNNFbPsRAAkKHMRGNa/DyqWwR1Lg6OcW36Ps=
Subject key identifier: 3F:42:A9:17:28:A3:2F:3F:13:47:D4:6B:C1:10:0C:63:1F:46:BE:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016362
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC375F3CF44011EFBB12F54B762E951A.roa
Signing time: Wed 26 Feb 2025 12:55:42 +0000
ROA not before: Wed 26 Feb 2025 12:55:38 +0000
ROA not after: Sat 19 Feb 2028 12:55:38 +0000
asID: 17561
IP address blocks: 154.82.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90978 (0x16362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:55:38 2025 GMT
Not After : Feb 19 12:55:38 2028 GMT
Subject: CN=67bf0f4e-1274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:37:77:ac:e1:b4:96:89:00:50:69:55:26:
7f:94:e3:4b:26:36:b0:5b:40:a3:1d:2d:f6:83:08:
d5:a0:b8:08:7b:53:be:d7:38:35:92:c5:c6:7d:d4:
2a:ed:3b:9e:58:d8:44:98:e5:e4:06:3c:81:31:4d:
0c:bd:77:60:af:c4:b5:3a:0c:7e:cd:c6:24:8e:1e:
6d:27:10:fd:0b:c3:29:f2:07:a0:98:80:04:a9:05:
06:38:e2:19:9b:33:64:1f:c5:88:82:8c:41:49:55:
26:c6:98:24:f8:e4:03:5a:b9:24:ee:70:51:b4:3f:
40:c6:61:07:0a:85:96:1f:65:cb:d7:b8:92:1a:92:
02:5c:22:49:2e:e3:34:0e:df:dd:7d:d7:2f:98:6f:
97:3f:21:72:9a:d3:6d:67:e4:a9:c1:8a:54:0f:65:
20:e1:87:4e:ef:ae:79:e6:ae:70:ae:fc:5c:c3:69:
fb:f6:94:12:44:e4:b1:08:e9:1d:52:10:b8:1f:e9:
37:d3:02:9c:81:ba:f4:da:64:6e:f5:d1:ac:67:8d:
74:1b:59:39:c9:13:61:d0:8b:30:0c:7d:4d:31:26:
a8:a2:7f:8c:91:00:96:a6:96:08:cc:0c:70:4c:da:
49:a3:f1:2b:3e:15:84:b2:a5:0e:dc:d6:50:2a:62:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:A9:17:28:A3:2F:3F:13:47:D4:6B:C1:10:0C:63:1F:46:BE:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC375F3CF44011EFBB12F54B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.139.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:13:cf:23:e5:f2:b4:59:9b:e6:47:39:97:3c:d0:8c:7a:80:
d0:6c:fc:07:f7:e5:00:76:fa:44:69:c5:a6:20:6e:1d:df:4c:
0a:a5:33:c0:86:c1:f2:da:24:d9:9f:f8:4b:91:86:27:ee:d5:
db:5b:1b:68:98:e9:f0:a5:4b:b2:a6:9b:53:d7:7b:36:09:ed:
d4:a2:21:0e:f7:17:43:65:b3:c6:75:b3:e7:88:a3:2f:59:9c:
51:c0:67:af:11:e2:92:a3:0c:71:5a:86:4d:4b:6c:1e:92:58:
fe:f8:4d:0e:83:2f:15:49:d2:08:97:1f:a3:ef:ca:da:53:49:
7a:2a:6f:fb:79:09:ee:c8:b4:82:c4:fe:08:0f:89:a6:cc:ae:
d8:d6:18:99:87:13:32:7d:5e:2e:9f:88:be:da:9d:d0:27:40:
9b:54:07:ae:be:13:73:bd:5e:f3:76:fb:46:34:22:6e:2e:9d:
bc:2a:9a:59:4e:c0:3c:8c:51:73:a9:c5:4d:50:e5:d7:dc:41:
8b:fa:7c:3e:21:9d:bd:ae:8d:6b:21:fd:88:f7:9b:93:d2:65:
8d:9f:17:1e:66:5f:54:a1:aa:ec:e8:67:8c:ca:ed:fc:bc:00:
50:27:7f:6e:20:a9:c5:ef:0d:0a:c6:2a:07:e6:e8:b6:7c:88:
ae:73:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:42 2025 by rpki-client