Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4155E41F4D11F0975D7BE1DAE4EC9C.roa
File: 2B4155E41F4D11F0975D7BE1DAE4EC9C.roa (raw, json)
Hash identifier: G0EsKISu7s6K2UjAMZKqpfKtpJoUbtoqT26DfHlN/c0=
Subject key identifier: A4:C3:4A:E9:AD:8A:EF:B1:26:80:CA:0D:A4:05:A1:50:14:D2:1C:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4155E41F4D11F0975D7BE1DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:41:15 +0000
ROA not before: Tue 22 Apr 2025 07:41:10 +0000
ROA not after: Thu 01 May 2025 07:41:10 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96874 (0x17a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:41:10 2025 GMT
Not After : May 1 07:41:10 2025 GMT
Subject: CN=6807481b-6569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:91:48:80:00:0a:d4:db:47:74:9f:a8:d0:
63:3d:c3:3e:0c:5c:f9:69:54:eb:f4:d1:c3:74:ca:
bb:7f:05:20:3d:03:99:da:4d:d8:45:97:ba:8a:6f:
79:c7:ae:54:3b:9f:7c:60:14:9c:3e:ff:94:97:15:
04:3f:30:22:1a:21:23:93:7d:71:ce:6e:fd:c3:3f:
4f:39:fb:96:e1:a1:a2:cc:e7:c8:03:26:dc:0b:82:
df:4b:ed:49:05:69:1d:11:30:6b:6f:aa:21:c9:ec:
75:53:ba:fc:78:e1:b1:e1:69:ae:b2:91:1f:aa:0f:
bf:7c:6b:37:59:d2:d2:4b:94:9c:18:c7:97:3a:b9:
b0:c4:8c:a2:6e:b9:cb:c7:b7:15:ed:b3:19:b0:19:
f9:17:d9:f0:31:66:1c:3b:bf:05:92:c9:0b:14:f8:
84:1e:20:5f:5f:c9:8c:9a:b7:a9:ca:18:f6:eb:3f:
98:8a:8c:32:05:d3:03:42:ef:7a:6f:61:21:a7:92:
0d:29:cf:34:1b:d1:b8:47:6e:74:ca:04:7d:40:1e:
04:99:92:4c:8f:09:3d:bc:9e:80:cb:9e:4f:6a:08:
9e:da:ac:2e:94:13:55:87:10:1f:1d:6c:14:44:e9:
01:94:9b:5e:78:86:e6:06:d8:49:f3:6c:ee:c1:6e:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:4A:E9:AD:8A:EF:B1:26:80:CA:0D:A4:05:A1:50:14:D2:1C:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4155E41F4D11F0975D7BE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f3:bb:bb:40:45:9f:e0:06:b3:9f:ab:cf:0b:7c:c5:ea:20:
a4:98:7e:ef:94:9a:e6:91:df:38:a6:90:b8:01:fc:26:6b:97:
25:03:4b:f6:7c:78:bb:64:33:d3:f4:cf:c7:5c:32:2f:0e:1e:
4f:0d:2b:0c:7f:da:e2:29:a6:42:c6:92:fe:5a:05:f4:cf:ad:
0f:4c:ff:01:29:6b:cf:d6:78:86:73:65:2f:b8:20:63:fa:b4:
9d:7b:b5:7b:11:a9:30:d4:ae:98:17:bf:a7:95:c9:b7:83:50:
20:d1:fa:94:f4:51:56:45:06:ed:9f:8f:ad:b2:00:d1:bf:da:
f5:64:47:72:45:41:ce:3c:b2:23:cd:49:e2:f5:5f:3a:37:9e:
4f:86:64:55:c2:e7:00:ff:69:c8:83:1b:0c:a2:5d:b8:3e:55:
f4:71:8a:f9:11:d0:46:4f:ad:75:c4:18:f6:5c:af:a5:5b:2d:
66:ac:36:47:89:9b:0c:0a:12:7e:06:9e:7c:e6:21:c6:ba:3a:
fd:fe:93:d7:c0:5e:1d:b5:1e:92:0e:e7:0c:d2:21:a2:c5:1e:
bc:63:d5:2a:1e:f5:c4:88:2b:d4:8e:4b:a3:b7:c6:10:69:2b:
d1:47:f4:88:65:b1:f9:4c:17:c9:ec:7f:f5:9a:72:06:27:9e:
50:52:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:32 2025 by rpki-client on console.sobornost.net