Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D1239B224CF11F09170D0BDDAE4EC9C.roa
File: 0D1239B224CF11F09170D0BDDAE4EC9C.roa (raw, json)
Hash identifier: Qz4QI8k7CyRCiVGMxhFJQN0oD26s1wXgy0Mi5/7E5i0=
Subject key identifier: 5B:89:56:CA:9A:F6:17:90:2E:C6:D6:DD:E6:9B:8A:3A:53:8E:8E:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D1239B224CF11F09170D0BDDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:53:35 +0000
ROA not before: Tue 29 Apr 2025 07:53:30 +0000
ROA not after: Thu 05 Jun 2025 07:53:30 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97469 (0x17cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:53:30 2025 GMT
Not After : Jun 5 07:53:30 2025 GMT
Subject: CN=6810857f-a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:f7:7d:8c:94:3f:99:c2:4e:e1:30:a6:de:
7a:e9:28:11:58:ba:3e:56:3a:98:08:5e:51:ec:88:
1e:88:a2:5c:b0:bb:cb:3b:a9:11:27:7d:d3:1a:7d:
d8:68:16:73:34:a6:5c:65:0b:27:61:ba:75:71:25:
ea:5c:47:22:a7:e6:54:85:92:18:32:ec:f0:80:94:
e9:59:69:3d:6a:8f:76:b7:0b:fe:ed:9b:49:cb:83:
77:a0:c3:f4:ec:ee:61:ba:d6:19:98:a3:fe:b7:25:
d2:17:03:67:99:21:f9:52:80:c2:82:72:bc:df:21:
7d:2a:00:62:e1:d0:bf:26:f3:21:67:86:16:76:75:
2d:68:17:b9:2a:58:86:43:4a:d7:0e:27:c8:9e:a9:
18:4d:f0:92:ac:00:b6:73:58:ad:40:ea:4b:62:34:
8e:35:72:72:e7:8d:b7:36:bb:90:f1:70:6a:36:b9:
89:f5:e4:7a:42:96:ae:83:c0:dd:7c:0e:23:fb:f9:
6b:8f:e9:dd:af:7a:a2:7a:f1:b8:03:1d:1c:ae:0f:
1a:f7:82:2e:ef:ce:14:21:6d:b9:ab:a0:d0:ef:33:
19:34:92:40:85:82:57:9f:26:97:53:cf:99:0c:ca:
76:9a:9e:80:79:94:04:f2:6a:16:2f:10:01:c0:c4:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:56:CA:9A:F6:17:90:2E:C6:D6:DD:E6:9B:8A:3A:53:8E:8E:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D1239B224CF11F09170D0BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5b:5b:52:2a:82:9b:62:a6:80:e4:e0:d2:58:d1:9d:5c:0b:
d0:c7:2a:b1:6d:dc:c4:a0:3a:f1:45:67:ff:7e:c9:63:a0:eb:
88:7d:c7:21:94:23:30:07:6a:0b:31:23:c5:e1:60:8a:57:b6:
9f:1e:b0:16:b6:ff:e9:66:37:38:e2:aa:09:dd:35:b7:a8:e3:
f2:28:2f:b6:31:8d:79:2f:d4:0f:65:e1:91:c8:5f:34:38:bc:
6a:04:f0:92:30:60:6c:47:ea:f9:80:30:b6:f6:ae:5e:ca:36:
2f:50:69:ef:53:9a:89:da:67:f1:dc:7e:8f:33:60:85:e6:5c:
bd:28:84:0d:1d:5c:36:8b:9d:ed:60:ab:b5:cb:41:ff:8e:56:
ea:2e:19:75:e8:55:00:f3:48:ce:92:6c:8c:2e:d9:d3:8f:ca:
19:78:71:5e:b9:eb:83:97:ed:c2:c9:0c:78:0c:54:87:21:3a:
16:97:c0:7a:b8:20:9d:82:a9:4f:21:e3:f0:98:00:de:af:0f:
8d:72:f1:89:9b:86:58:78:9c:27:a6:9f:03:85:ab:54:73:61:
7d:24:44:5a:0d:c2:9a:d5:1f:52:97:0b:1a:31:da:0a:41:16:
a5:9f:dc:0e:6f:53:5d:96:a3:0e:c5:b6:f0:ba:a8:2f:3c:c0:
39:52:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:43:08 2025 by rpki-client