Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4452CA13C911F0AE66CE4B762E951A.roa
File: 3E4452CA13C911F0AE66CE4B762E951A.roa (raw, json)
Hash identifier: +5UgywIplgFC0lGgd7skDljiuRa3/wYvzOxq+ErCLmk=
Subject key identifier: BC:BF:88:C7:7A:1D:31:EB:A8:25:3D:3C:17:A7:FB:E3:07:8D:62:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01780C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4452CA13C911F0AE66CE4B762E951A.roa
Signing time: Mon 07 Apr 2025 15:59:10 +0000
ROA not before: Mon 07 Apr 2025 15:59:06 +0000
ROA not after: Sun 11 May 2025 15:59:06 +0000
asID: 211881
IP address blocks: 154.81.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96268 (0x1780c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 15:59:06 2025 GMT
Not After : May 11 15:59:06 2025 GMT
Subject: CN=67f3f64e-0baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:17:22:37:df:ae:71:e2:67:68:95:fe:94:
e5:c3:b8:93:92:7b:4e:98:7d:24:7f:15:e2:60:d9:
7e:99:55:bc:40:4d:bf:24:77:fd:82:ef:e8:7f:d7:
23:88:9e:ca:d8:64:54:82:ed:a7:3d:e2:5a:70:0f:
44:95:f1:f3:f8:01:87:4f:a0:da:74:8f:22:d8:cd:
41:b5:14:91:3d:49:a6:ca:f4:2a:85:e5:d9:6d:35:
cd:36:da:83:eb:cd:36:7f:a9:14:de:96:0d:61:74:
8d:88:66:ae:f1:74:d3:35:41:00:a6:c6:70:b7:52:
26:02:b7:5a:58:4b:e3:e8:41:8b:db:d5:d1:44:b1:
4e:b9:5b:8e:8f:b5:9e:de:33:0e:97:de:b4:ad:4d:
fb:5b:f1:20:92:be:4a:a5:d4:c9:cc:d2:82:d8:35:
47:62:18:17:ae:6f:79:52:6e:3d:f0:be:c0:5e:b8:
dc:e5:2a:fd:5e:94:4a:e5:96:fc:5b:03:e9:bc:52:
f1:07:70:ee:d0:37:4d:9d:ad:c8:26:93:f3:8d:42:
96:5b:c6:af:a9:1e:67:03:c3:18:f5:ae:99:2b:1d:
9c:d4:0a:51:58:60:a8:9c:be:9e:b1:f0:91:87:8a:
71:dd:77:c2:e9:31:c1:0b:bf:88:dc:27:1e:60:0c:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:88:C7:7A:1D:31:EB:A8:25:3D:3C:17:A7:FB:E3:07:8D:62:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4452CA13C911F0AE66CE4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.184.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d7:74:2c:52:73:48:ff:3b:64:55:11:b8:24:e5:7e:fd:b8:
48:a8:4a:64:11:16:ba:bb:79:c0:37:8a:7d:8f:2b:c7:7c:5c:
07:e1:a3:55:21:09:fa:39:00:61:1f:8f:b8:fb:e3:a9:68:5a:
78:75:05:40:df:23:35:5d:4e:cb:9d:92:be:52:00:b9:11:9d:
ac:b7:c8:b0:68:f6:a0:1b:59:63:69:c2:94:60:ff:bf:d3:89:
44:62:f4:1b:2d:ba:92:02:08:21:63:c1:4a:8c:e0:eb:8f:7e:
c1:32:31:11:30:74:10:c3:17:2b:82:d5:37:74:d3:f9:eb:43:
b6:d4:d2:cd:b3:f5:54:db:58:0c:ad:99:96:b3:c9:d7:5a:28:
96:e6:c6:69:7b:6b:80:1f:4f:e9:31:5d:be:63:c0:c7:34:34:
e2:e6:8a:55:9d:09:f2:48:33:a1:f4:bd:9b:bb:57:9a:da:b7:
01:97:e5:da:a1:45:82:41:c6:4c:ec:c1:39:bb:85:da:d1:ff:
f6:cb:df:03:52:2f:6a:33:f7:69:7b:52:cf:13:63:69:6b:6e:
62:fc:9b:a2:11:2a:c1:9f:58:11:d8:b3:d9:b4:4e:e6:d8:71:
6d:28:ac:38:5f:4a:33:ce:7a:c9:60:6d:8e:23:49:09:42:73:
1e:c1:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:05 2025 by rpki-client on console.sobornost.net