Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C9EB12108911F09C3ADBAA762E951A.roa
File: A2C9EB12108911F09C3ADBAA762E951A.roa (raw, json)
Hash identifier: jynj1H1VxZhCrUd3By/h+u2TBfcBAL66vhOszD4IhSU=
Subject key identifier: 4A:97:38:69:4F:50:34:2F:77:36:7C:8A:DB:73:D4:BD:36:11:94:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01778D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C9EB12108911F09C3ADBAA762E951A.roa
Signing time: Thu 03 Apr 2025 12:46:18 +0000
ROA not before: Thu 03 Apr 2025 12:46:13 +0000
ROA not after: Mon 12 May 2025 12:46:13 +0000
asID: 20326
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96141 (0x1778d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 12:46:13 2025 GMT
Not After : May 12 12:46:13 2025 GMT
Subject: CN=67ee831a-55f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:74:f4:c6:0d:35:64:ec:26:be:6d:78:15:
fe:a0:52:e4:07:f2:8d:d5:dd:f8:25:56:5e:70:da:
cc:1a:a2:33:d2:81:87:ac:d8:2c:88:5c:d2:39:82:
de:1e:a4:56:d4:8e:c6:43:bd:f8:40:99:ee:4e:e2:
af:a3:b2:54:69:a4:94:56:fc:a6:80:c7:35:c5:52:
49:1c:c3:9e:42:07:f9:8a:c8:a6:a4:99:fe:ba:9c:
86:a1:a9:e8:08:e0:c7:34:24:ac:f8:90:be:75:b5:
a8:64:3e:cf:56:64:32:b6:08:af:0f:87:c9:b3:94:
a0:46:3a:98:8d:39:65:85:f6:da:47:b7:50:70:54:
cd:ce:41:eb:4f:48:b1:da:28:2a:50:fb:43:f2:da:
8c:22:58:21:6b:c1:c8:02:77:0b:23:c3:9f:58:1c:
ba:26:4f:b5:7b:7c:f5:39:5a:92:71:6b:88:1e:39:
64:6c:b4:ff:b1:fc:d7:bd:a1:fe:b0:33:47:19:57:
9f:c1:dd:19:df:f6:d1:5f:91:78:a1:c7:bf:f1:dd:
13:d0:e0:17:e8:89:6f:44:7e:32:41:5b:ef:0e:fd:
f6:29:d1:e6:07:e3:86:18:06:97:16:32:5f:42:d4:
1c:77:f1:93:96:48:12:59:21:7b:95:8f:2a:ae:fc:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:38:69:4F:50:34:2F:77:36:7C:8A:DB:73:D4:BD:36:11:94:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2C9EB12108911F09C3ADBAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6b:d5:b7:16:4f:6e:af:a3:a7:11:07:2f:00:bc:2f:1a:a9:
ba:16:71:a6:14:d1:d7:04:7b:7c:88:3d:18:33:f1:39:1c:3d:
df:de:0b:c7:3c:78:19:b6:b1:1a:1c:19:94:eb:5c:5a:0c:12:
dc:fc:f1:a6:4e:24:f1:90:1a:c2:7d:b7:c2:a4:9a:f9:94:ce:
5f:d2:6c:15:ad:68:aa:da:da:43:00:7b:55:60:0c:89:08:ec:
53:a4:68:e3:0e:1f:95:3c:af:b0:f9:02:e7:18:f1:33:04:ff:
c8:5f:b9:ab:41:0f:0f:ba:32:b1:8f:ae:9e:42:67:62:04:6b:
b6:a1:b9:6b:8c:e6:ee:00:1d:a8:1f:a9:11:74:22:38:13:e8:
ed:c9:31:31:f9:1a:3f:49:fd:d1:39:4e:c5:f6:0f:5b:36:5d:
3b:71:99:cb:1b:51:90:fb:ff:a2:1a:6f:ca:c4:6e:3e:4e:a0:
1d:86:e2:b9:30:62:82:57:77:20:42:75:e6:d0:af:1b:e9:56:
75:d0:fe:a5:71:f7:d6:f1:d5:d5:44:34:a7:ca:fb:c6:65:e9:
3c:87:d9:e0:4b:c4:39:67:31:b6:09:53:7d:56:a9:40:7e:7c:
9f:c5:b3:d4:5b:35:d9:a4:0c:36:46:86:a3:0b:56:18:0c:3f:
aa:63:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:00 2025 by rpki-client on console.sobornost.net