Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5891AB8F81D11EFB5674BBD762E951A.roa
File: B5891AB8F81D11EFB5674BBD762E951A.roa (raw, json)
Hash identifier: No2teZVuf8YTxOFoKX60KKVXbIJ5OUgo2EcG+5vs9jo=
Subject key identifier: E2:25:AE:FF:E8:B9:20:8E:22:E2:F9:7E:EA:A8:2D:C8:A4:E0:11:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017041
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5891AB8F81D11EFB5674BBD762E951A.roa
Signing time: Mon 03 Mar 2025 10:53:16 +0000
ROA not before: Mon 03 Mar 2025 10:53:12 +0000
ROA not after: Wed 30 Apr 2025 10:53:12 +0000
asID: 63139
IP address blocks: 154.93.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94273 (0x17041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:53:12 2025 GMT
Not After : Apr 30 10:53:12 2025 GMT
Subject: CN=67c58a1b-ae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:72:a8:fe:72:63:db:7c:85:85:67:67:4d:
96:2c:aa:58:3c:79:8b:84:1d:5b:42:65:71:6f:13:
f7:7f:e8:cd:f2:45:c5:62:e5:b0:66:5f:ed:3b:20:
aa:41:9f:b2:b6:ee:b4:00:4b:f7:cf:6b:14:b1:62:
eb:cd:6c:01:72:d8:5b:15:bd:e9:44:81:a6:5a:35:
24:cd:94:ba:87:1c:5e:2e:58:ba:aa:a0:d3:2b:bc:
70:75:b6:ff:c8:b8:76:25:6a:b2:f1:46:a7:b7:1b:
4f:4b:6e:f6:ad:95:2c:dc:5b:6f:09:46:a3:86:14:
59:59:55:22:de:9b:4c:11:96:61:58:35:f0:1a:27:
dd:ba:5c:48:ca:a7:c6:f9:f0:eb:ac:87:63:63:c1:
32:96:c4:cc:8e:ae:88:a7:5f:0a:7e:b9:25:79:2c:
2f:29:8e:1c:81:6b:e0:95:a6:0b:22:cd:70:7c:19:
8a:66:56:80:55:5f:35:e8:ea:65:72:4d:af:a4:db:
cd:92:fc:dd:52:8d:45:a1:a9:b5:31:80:1d:00:8f:
e7:5b:6a:51:2d:d7:ee:8a:ba:1d:70:ce:df:80:c0:
f9:6a:44:a7:03:5c:75:17:44:c4:a6:5a:40:97:9d:
6f:c1:15:4b:bb:d1:56:2b:76:63:47:dd:05:91:3f:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:AE:FF:E8:B9:20:8E:22:E2:F9:7E:EA:A8:2D:C8:A4:E0:11:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5891AB8F81D11EFB5674BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1c:64:eb:f8:3c:e1:48:8a:b6:24:88:af:cb:80:24:bf:6d:
3e:9d:fa:6f:ea:c4:be:14:d0:94:96:d4:f6:52:88:a0:60:1c:
49:ab:b7:b0:17:5e:0b:c0:e3:1d:1e:2c:cb:75:53:5b:d9:7e:
e8:ee:1f:a6:2f:0e:82:3a:e6:ae:40:3a:9a:4e:e1:bc:7b:dc:
60:47:11:fc:c2:29:b0:a1:83:ec:46:50:91:35:bc:04:e5:e3:
4c:68:18:8a:49:69:96:b2:2b:23:d5:be:0d:2f:f2:9b:d3:15:
72:04:27:83:57:97:50:63:86:9e:da:a5:da:5c:7e:9d:e4:84:
c7:cd:0b:0e:34:8b:ac:4f:80:38:9f:5d:33:53:75:97:66:6b:
49:f9:a3:e5:25:8e:d3:ab:63:31:d8:2d:75:f3:70:f9:18:3a:
11:86:d5:8e:80:8a:0d:00:4c:ec:34:f1:44:71:24:d8:9f:54:
3a:72:12:79:fb:99:51:a6:92:81:74:eb:53:36:31:c0:3e:3f:
28:3d:88:2d:4a:44:e1:59:4c:61:67:54:a2:54:4a:cc:7e:b8:
6f:52:3a:1b:61:56:ab:e7:78:16:67:7d:89:73:d3:e5:e2:af:
45:2c:92:b2:dd:94:00:fb:44:5c:8b:f4:39:91:b7:20:94:03:
78:52:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:22 2025 by rpki-client