Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4452CE7813D611F08E6A7799762E951A.roa
File: 4452CE7813D611F08E6A7799762E951A.roa (raw, json)
Hash identifier: 6nfFA+hd2yR6VCLTanO1rbIo+bClj9kfWJmuh5eeO2U=
Subject key identifier: 17:B7:CF:B0:66:B1:1D:C2:F0:05:78:5A:E9:12:B0:57:B9:63:6A:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017814
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4452CE7813D611F08E6A7799762E951A.roa
Signing time: Mon 07 Apr 2025 17:32:24 +0000
ROA not before: Mon 07 Apr 2025 17:32:20 +0000
ROA not after: Tue 13 May 2025 17:32:20 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96276 (0x17814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 17:32:20 2025 GMT
Not After : May 13 17:32:20 2025 GMT
Subject: CN=67f40c28-a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:93:e0:3d:7c:07:aa:8b:fa:b7:ce:10:5e:
3a:3b:91:7a:23:f2:2a:88:75:ce:c4:f5:25:f5:6a:
c5:31:50:a3:1b:33:ab:b9:f6:ad:e0:78:48:ae:9a:
ae:50:43:f5:13:29:bb:f4:17:23:99:30:c1:ac:c7:
66:61:09:5b:df:31:cf:9b:13:84:88:3e:ff:87:92:
10:c0:9a:34:03:91:5b:e9:9f:1d:49:c5:1a:64:b6:
86:1d:12:2f:9f:8b:b8:82:d3:54:05:87:8a:ab:e0:
d4:1c:a9:62:49:60:26:64:21:d7:49:09:fb:89:48:
5e:f0:28:13:aa:3f:30:fb:38:4f:8b:0c:93:91:0f:
e6:1d:c4:7b:32:55:39:c5:2f:a9:7e:35:74:7f:f3:
62:3c:44:77:3a:4c:e2:a4:a4:93:5f:1c:2b:ca:75:
55:2c:ff:bb:72:98:4c:49:b1:7b:1e:b3:7c:80:72:
a3:8f:c1:e8:a5:a6:99:bb:0f:ff:49:09:50:d7:b2:
0c:61:e9:08:20:4b:a5:e7:ab:40:58:f1:fc:0b:a7:
d9:01:8b:bd:d5:90:5a:7b:c3:83:3c:bc:b4:32:7c:
b8:5c:06:31:c2:ee:c6:6d:02:b6:42:72:fb:7b:21:
e6:48:ae:94:35:f6:4b:f8:6b:83:d8:77:7d:50:36:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:CF:B0:66:B1:1D:C2:F0:05:78:5A:E9:12:B0:57:B9:63:6A:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4452CE7813D611F08E6A7799762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ef:88:fc:cb:0c:8d:de:4f:cf:7b:c5:9a:0f:5a:60:51:fc:
d0:86:fe:cf:a9:2f:c0:4f:4e:5e:e3:42:94:21:fe:b4:3c:21:
4e:d5:86:ea:65:db:72:b5:03:64:ba:04:69:24:05:3f:0d:62:
2f:1c:84:e0:37:7d:0a:eb:92:2d:ab:5a:82:28:45:19:73:29:
cd:f5:1c:03:9b:cd:0c:62:51:4d:19:b1:c9:83:2b:69:31:15:
d8:1a:b1:da:41:4a:9f:ef:71:19:fe:49:44:ca:64:93:15:2f:
50:64:84:0e:d0:69:ef:6a:a0:c8:f2:b4:4c:7e:a6:17:b1:21:
55:cc:2b:70:5e:ae:6c:95:d9:c4:8b:9f:56:20:c7:7a:58:ed:
8f:6d:c2:24:05:31:98:5e:17:bb:49:cc:ae:c6:ad:1f:29:48:
e4:2a:ce:21:70:97:bd:ea:39:a0:c9:8a:6b:ac:cb:de:9e:b7:
41:e2:c8:f8:dc:27:a1:bb:b1:16:cb:8e:bf:99:6c:56:1f:f2:
2c:f9:a6:7f:6b:81:67:cb:ca:4b:fc:2c:87:e8:73:28:3e:df:
0a:e0:50:89:98:ab:07:50:1c:83:66:e2:b7:fc:64:49:c5:ca:
94:0d:6f:1f:40:b0:f1:eb:9a:43:9e:72:05:b9:16:fa:c3:76:
91:f1:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:41 2025 by rpki-client on console.sobornost.net