Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49833F9A13BD11F0BDA9B483762E951A.roa
File: 49833F9A13BD11F0BDA9B483762E951A.roa (raw, json)
Hash identifier: KZ9jydIkvcYUz4q+g8iFrQSf1xy/aNajPExgryergLA=
Subject key identifier: F5:C4:CA:85:68:CC:4D:9E:B6:21:01:D7:3B:DA:BB:80:62:8F:AF:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017804
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49833F9A13BD11F0BDA9B483762E951A.roa
Signing time: Mon 07 Apr 2025 14:33:35 +0000
ROA not before: Mon 07 Apr 2025 14:33:31 +0000
ROA not after: Sat 10 May 2025 14:33:31 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96260 (0x17804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 14:33:31 2025 GMT
Not After : May 10 14:33:31 2025 GMT
Subject: CN=67f3e23f-8151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:b2:7a:de:15:6f:6d:11:5f:96:fb:32:9e:
bc:d5:55:d4:27:e7:79:41:6f:f2:98:1b:03:2b:6b:
db:6a:7e:c6:42:10:47:db:cd:af:fc:0a:29:53:79:
46:a2:f5:ef:d1:32:38:43:c2:59:21:73:8f:7b:8c:
04:42:39:c5:b4:3d:7d:7a:51:98:da:47:32:65:30:
e1:b4:d1:d3:30:de:1f:0d:08:24:2d:a1:46:5f:2b:
0d:29:d1:40:fe:c1:48:38:82:c1:cb:a1:86:ee:d9:
08:b7:c8:29:7d:d8:d2:92:c3:4c:1f:e2:4a:7b:0c:
ec:ed:c6:28:6f:8b:51:ce:10:d4:e0:cd:be:e4:bd:
ce:14:c5:24:33:b8:63:f8:b1:54:6c:af:d2:bd:aa:
1c:0b:1f:f3:52:4f:fb:cd:a9:03:da:1e:e9:18:9c:
e1:0d:d1:2e:da:21:5e:1b:e6:e2:40:c6:95:d5:c5:
9d:c4:3e:72:76:20:6a:d3:ce:31:f6:5f:88:67:3c:
89:63:82:fa:da:68:26:42:2a:82:2f:2a:18:4f:f6:
7c:b7:f4:f4:cc:65:e3:99:fe:00:e1:55:27:59:2f:
c5:83:b4:d4:81:0b:f8:7d:48:2d:c4:4d:43:ce:c9:
11:f0:a2:16:15:f7:f3:14:f6:0d:b6:fa:3f:59:f9:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:CA:85:68:CC:4D:9E:B6:21:01:D7:3B:DA:BB:80:62:8F:AF:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49833F9A13BD11F0BDA9B483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/23
Signature Algorithm: sha256WithRSAEncryption
30:c4:f3:1d:7b:09:35:c4:ee:aa:76:f4:c7:b0:59:d0:bd:b0:
2b:3c:cd:f1:98:a5:a5:13:1c:36:36:4b:81:a5:fd:7d:25:49:
9a:32:10:16:a9:87:a6:da:c2:8c:15:dd:54:72:73:8f:6f:bd:
f3:97:44:22:72:05:f4:ac:cf:ff:65:07:28:44:58:d3:33:2f:
ea:a1:14:60:9c:cb:85:30:06:b4:84:b6:d7:36:22:45:08:b1:
0e:02:15:e8:10:99:ee:73:0c:78:62:a8:9e:8e:2c:bf:1f:46:
aa:b0:17:49:5d:9b:4b:e9:95:97:13:5a:2a:5e:88:55:af:48:
e0:1e:a8:f4:dd:b1:8a:c2:a4:a9:1d:d8:6a:68:cc:72:9a:4e:
70:57:38:b9:03:0d:d3:cb:5d:25:7e:a7:43:22:ae:9d:83:b0:
de:e3:76:ad:ec:24:37:fe:e3:55:d6:c7:2e:a4:94:07:bb:72:
58:5c:4a:63:d3:fb:c9:60:0e:7f:fb:52:b0:a5:d2:8e:e6:ef:
59:65:06:26:f5:68:24:59:fc:1b:2f:b3:47:6d:76:ae:60:00:
0c:50:89:1f:02:5b:04:d1:46:08:bb:81:8b:77:69:c9:51:c6:
e3:8f:25:4e:1b:89:96:b4:c9:bd:25:03:70:68:e0:6b:69:12:
86:0c:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:15:29 2025 by rpki-client