Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A031E361F5611F0A274B59CDAE4EC9C.roa
File: 0A031E361F5611F0A274B59CDAE4EC9C.roa (raw, json)
Hash identifier: x4h30CoIWBlJrJL9vp8OAF73rAr1EySmevsznl1ajZ4=
Subject key identifier: A0:9D:65:20:F7:B4:5A:07:60:09:4F:36:35:86:89:46:23:73:59:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A031E361F5611F0A274B59CDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 08:44:45 +0000
ROA not before: Tue 22 Apr 2025 08:44:40 +0000
ROA not after: Wed 28 May 2025 08:44:40 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96896 (0x17a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 08:44:40 2025 GMT
Not After : May 28 08:44:40 2025 GMT
Subject: CN=680756fd-994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:54:d6:12:a5:ee:cc:e7:86:2a:2b:cf:49:
df:98:5b:c2:00:a7:e7:49:36:be:ec:31:6b:dd:fb:
e1:11:b7:bf:34:11:e1:c9:da:14:ae:3e:c0:2f:0a:
b6:70:43:d4:3d:e6:7b:7a:8b:89:db:bf:e0:62:41:
78:3e:63:89:4e:0b:6b:4f:e1:21:14:43:3b:03:4d:
49:fd:57:e8:9b:be:c7:2c:cb:d1:73:65:68:36:a2:
0d:24:63:db:f7:17:cb:4e:f0:fc:8d:75:dd:80:36:
b9:88:f5:40:eb:0f:45:d3:a1:30:3a:41:f9:f6:d6:
1d:ec:20:73:54:af:c7:e9:01:aa:a3:00:af:ec:e1:
35:15:2f:9e:52:e8:c5:58:49:44:30:05:41:fc:31:
1b:6f:cc:fa:11:e7:d1:f2:43:c0:42:b3:90:8d:d3:
b1:c8:6e:50:62:e0:58:83:ac:d7:2e:7e:c9:00:c3:
38:56:3d:8a:16:00:cd:9e:d8:7a:e7:f2:64:08:3f:
4a:55:65:a7:63:6f:7a:d3:4d:4c:a8:e6:81:d9:26:
d9:99:3d:46:bb:d8:ba:86:e9:84:fe:54:fb:51:33:
1f:a6:84:02:1d:0b:1c:92:b8:77:3a:39:88:ad:c4:
83:74:2c:7d:83:39:b8:ac:49:1c:c5:ce:ce:0d:19:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:65:20:F7:B4:5A:07:60:09:4F:36:35:86:89:46:23:73:59:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A031E361F5611F0A274B59CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
51:74:f3:24:57:d1:aa:7b:e5:ab:fa:e8:25:49:63:45:18:d8:
40:e4:62:0a:f0:b0:a0:93:d3:b4:22:86:d7:36:98:7d:44:d9:
0d:91:84:a0:61:09:e6:b1:5c:01:3d:cb:ec:82:58:91:05:a2:
78:00:14:19:24:47:5c:10:7c:e0:51:b8:27:1f:c6:19:54:17:
49:9d:47:12:49:5c:8b:b4:98:30:74:b9:6e:e8:d2:38:db:fe:
74:28:a0:e2:05:b4:4a:6f:f6:eb:22:0b:58:c4:ac:e8:9e:54:
90:bf:4b:db:c0:a7:df:b6:bf:ea:fd:9e:32:39:e4:35:1d:a5:
9a:88:c0:9e:01:ec:3f:9a:00:33:46:14:f0:47:80:a7:40:d9:
16:eb:6f:33:e3:3b:5f:e4:7e:eb:17:cd:18:37:0e:39:9e:04:
50:7a:eb:fa:c8:72:6b:bf:d3:7c:f3:e6:29:31:74:ac:b3:1c:
44:38:4f:94:7a:7b:57:e2:4e:81:28:e5:38:8c:90:9e:81:82:
29:e4:fe:6f:d3:58:7f:b8:a2:36:b4:17:7c:18:d7:86:74:03:
c0:39:2a:8b:c4:01:c2:1f:20:0e:55:ab:35:81:c7:bb:4f:73:
f8:44:fc:10:6d:d0:13:eb:3e:67:7e:6c:bf:6f:8b:8f:de:98:
7e:42:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:53 2025 by rpki-client