Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C48FC3C0115111F0A077D867762E951A.roa
File: C48FC3C0115111F0A077D867762E951A.roa (raw, json)
Hash identifier: UT+Qm/Rc3V1moaP+FX6w1Itt+shaCVNJOfwXXJjI2Xs=
Subject key identifier: 35:51:C8:95:26:E3:79:85:0D:DD:51:82:8E:DF:B9:52:B6:52:A3:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C48FC3C0115111F0A077D867762E951A.roa
Signing time: Fri 04 Apr 2025 12:38:54 +0000
ROA not before: Fri 04 Apr 2025 12:38:50 +0000
ROA not after: Tue 24 Jun 2025 12:38:50 +0000
asID: 142286
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96204 (0x177cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 12:38:50 2025 GMT
Not After : Jun 24 12:38:50 2025 GMT
Subject: CN=67efd2de-d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:a0:24:68:04:74:5e:7c:ff:52:ec:a0:d9:
78:d2:f8:50:f5:bd:f4:fc:10:29:4e:25:6c:51:f3:
ad:b4:5c:3e:8d:b0:9e:e2:f1:f1:b3:7d:d7:a8:db:
de:01:01:33:3c:2c:35:c4:09:b0:1c:cc:3b:84:f2:
4e:48:cd:46:55:58:27:22:2a:2b:f5:36:8b:4e:5c:
5b:11:3e:48:6e:91:4c:4e:e9:e7:6b:a1:ce:9a:6f:
b9:25:22:8b:fd:a3:ec:71:83:89:f3:c8:fa:79:cd:
e5:18:f5:f9:99:0f:1b:17:3e:ef:b4:c0:8c:1b:26:
bb:2b:f0:04:a9:fb:6a:af:9d:91:f0:1c:7c:a8:11:
7a:ea:60:55:a2:ed:12:e6:1d:5f:0e:79:5e:2c:17:
59:0a:f8:fa:f4:8e:ed:55:3e:86:9b:cc:9f:12:57:
27:ce:90:01:99:2e:7d:71:fe:a0:57:33:17:f8:0c:
0d:b4:a8:70:1d:73:76:7a:d7:fc:c8:31:32:9f:8c:
7a:15:a3:5a:88:4a:e8:8f:77:9c:a9:a8:06:39:10:
d0:74:20:5c:3b:30:0a:ac:cc:5e:e4:f5:f0:52:2d:
d8:d5:90:7d:98:39:63:35:1c:a8:28:87:28:08:5a:
ce:12:bc:e0:c0:60:f2:fc:72:aa:df:9e:96:ba:bb:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:C8:95:26:E3:79:85:0D:DD:51:82:8E:DF:B9:52:B6:52:A3:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C48FC3C0115111F0A077D867762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:7f:93:73:8e:5d:c3:65:83:2c:20:df:88:0a:91:25:08:ec:
5d:d1:ae:1e:15:9b:c1:0a:f8:8a:d5:10:1b:32:6d:e0:6a:35:
8c:1f:0f:19:52:1d:c7:ed:2f:ae:4e:95:43:dc:2d:83:0c:fe:
e8:98:53:04:d6:47:97:34:4c:13:80:6e:84:f1:2c:ab:4b:a2:
eb:6c:07:c0:c6:df:5f:19:23:e1:a7:7e:05:6d:ce:55:20:7d:
6f:4c:e1:aa:fd:60:28:be:e8:70:c5:9f:8e:0b:c3:88:29:e9:
d2:2e:6c:45:75:29:22:17:df:91:6d:67:04:05:6a:d3:0f:06:
d8:cc:e9:f4:e6:7a:38:fa:59:ff:cd:a9:18:ff:d2:d5:2c:4a:
5f:df:cb:ec:f6:c5:1b:fe:90:cd:e3:44:cf:80:af:61:de:0e:
a5:cb:42:d8:49:32:d7:2f:38:45:a2:8c:ed:f0:aa:00:7b:4e:
79:61:ac:65:dc:ea:2f:00:96:7d:d2:05:33:c3:96:53:fe:9d:
53:1c:70:b5:de:ed:04:88:15:00:ce:20:47:b3:2d:9c:d6:d8:
86:98:5d:d8:57:47:9c:8f:80:30:0f:c6:d0:aa:22:57:37:02:
0a:15:e6:89:70:27:3e:10:69:f4:40:94:64:84:12:e2:f4:2b:
da:f4:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:55 2025 by rpki-client