Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC4A32114811F09078DBB3762E951A.roa
File: FFEC4A32114811F09078DBB3762E951A.roa (raw, json)
Hash identifier: WWAI3tL4uX25V3EO3CUs4Facfqoa4V/A3CXSTJ8CEq4=
Subject key identifier: 85:F4:CE:3B:55:6D:EB:CD:2C:94:E5:F6:8A:18:84:5C:2E:D9:C2:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC4A32114811F09078DBB3762E951A.roa
Signing time: Fri 04 Apr 2025 11:36:08 +0000
ROA not before: Fri 04 Apr 2025 11:36:03 +0000
ROA not after: Thu 08 May 2025 11:36:03 +0000
asID: 205125
IP address blocks: 154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
154.210.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96196 (0x177c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 4 11:36:03 2025 GMT
Not After : May 8 11:36:03 2025 GMT
Subject: CN=67efc428-ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:41:74:d2:33:ed:f3:a1:6f:7a:e3:a0:28:
5e:ee:da:f4:a0:8b:54:40:e9:d5:4b:3a:9a:50:c2:
01:f1:b5:67:f2:8c:79:f3:e6:55:47:f2:3e:be:bc:
d8:8e:1e:7f:5c:3e:7e:27:cf:15:51:57:7e:e4:6a:
8c:df:b8:c3:93:e8:e1:20:38:61:b3:39:cc:8a:79:
cb:66:db:f9:d2:61:23:5e:1d:ed:ba:1e:cb:7c:3a:
af:b3:a2:73:fb:1d:d0:54:14:0a:60:ff:af:9c:43:
3d:fe:29:f2:e9:0b:38:6d:68:bd:fd:ee:49:bb:6e:
62:59:5e:ba:d5:71:88:79:7d:d3:87:6c:47:6f:45:
b9:d8:69:84:1a:34:b0:46:8f:a6:80:ff:4b:b9:79:
da:af:fe:2f:7e:e1:aa:aa:08:8f:84:1e:4a:f3:5e:
05:7f:60:c3:91:45:4b:94:e0:c2:37:35:f7:df:96:
7d:59:e9:33:d9:b2:60:bc:17:b6:7f:b3:8f:c0:f4:
95:14:69:7d:69:05:a4:1e:f5:dc:07:06:6a:22:3f:
59:c6:f9:dd:9c:c2:2f:34:5e:5e:6c:db:9a:6b:f7:
2e:6c:9f:fc:bf:d0:d7:38:85:12:c0:d2:40:ac:1a:
0f:74:bd:4e:80:09:c0:df:6b:38:53:23:3a:2b:25:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:CE:3B:55:6D:EB:CD:2C:94:E5:F6:8A:18:84:5C:2E:D9:C2:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC4A32114811F09078DBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0-154.210.239.255
Signature Algorithm: sha256WithRSAEncryption
34:4d:32:b3:04:92:3b:ee:eb:0e:bd:f1:0b:78:96:ff:95:18:
85:5b:5d:fd:a6:2d:c8:12:72:82:17:07:b7:ec:5b:5e:fd:3c:
6e:8d:d4:93:25:4c:58:05:d4:d2:f9:04:c1:89:12:b5:e4:67:
07:1a:11:2d:1d:9c:1d:ed:19:18:97:fd:57:4d:31:41:88:70:
f2:9c:54:e3:26:ac:e9:74:8e:69:5c:71:83:76:24:03:20:71:
61:a8:e0:01:7a:1e:df:f1:6c:ec:da:2f:08:62:6f:d5:8a:ef:
04:36:4f:89:ea:0d:e2:65:9f:a8:88:99:6b:d8:e2:89:8b:b7:
60:05:fa:12:73:ec:68:79:17:f1:1b:53:69:38:0b:1e:63:58:
26:f3:e2:93:be:9d:51:81:33:a5:86:7a:43:bb:41:fa:6e:06:
9c:b4:ee:22:46:8c:ed:83:5f:78:6a:b3:c6:9f:ba:4f:db:7a:
99:c3:a9:d6:c5:89:e4:bd:b4:13:ed:64:39:2b:79:c8:69:93:
b9:bb:3d:1f:67:c9:bc:e3:34:41:23:52:05:13:78:e5:0f:64:
88:87:17:8e:08:9c:a9:79:8c:37:19:5e:82:aa:1c:46:c5:48:
53:f2:8b:d8:bf:b6:46:d3:b3:af:9f:11:50:49:ed:0c:96:d6:
69:36:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:39 2025 by rpki-client