Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F3C3B61F4611F0AC58A1B6DAE4EC9C.roa
File: B2F3C3B61F4611F0AC58A1B6DAE4EC9C.roa (raw, json)
Hash identifier: 1fnFDy4i21ChRosKX2XtPq0xZ0mYZDxc+mjFT3VAtAA=
Subject key identifier: A0:11:71:D3:9F:4E:72:47:44:25:DD:71:F9:9A:84:82:7E:6A:35:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F3C3B61F4611F0AC58A1B6DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 06:54:56 +0000
ROA not before: Tue 22 Apr 2025 06:54:51 +0000
ROA not after: Thu 01 May 2025 06:54:51 +0000
asID: 13335
IP address blocks: 154.207.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96856 (0x17a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 06:54:51 2025 GMT
Not After : May 1 06:54:51 2025 GMT
Subject: CN=68073d40-9279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:0c:5b:89:0e:ac:0c:ed:e4:f0:35:91:e9:
2f:81:88:21:5b:8a:86:28:7b:07:a7:50:77:a2:b4:
de:31:0d:fe:6e:5c:e8:c1:bc:3f:3f:d9:ab:30:6c:
75:9e:8f:1b:8c:2c:db:23:9a:79:d8:b5:be:0f:a7:
ce:13:fb:13:6e:a3:9d:a4:22:6e:8f:0a:1d:ba:cc:
ab:8b:0c:dd:ff:96:91:9b:1f:e9:10:14:48:e7:20:
e6:c0:b5:02:8a:11:4f:51:a6:25:10:c6:08:8d:80:
28:66:1c:60:bb:96:b5:f6:0b:a0:af:54:91:f7:3c:
e7:9d:bc:b8:f3:48:42:94:ab:c7:97:60:b0:92:63:
fc:43:fb:9c:02:03:d0:c1:5e:3b:08:41:5a:de:de:
56:7c:6a:05:14:4e:9f:08:51:d5:f4:01:b6:73:c6:
53:f7:a0:1d:bc:44:fc:97:d1:62:34:f0:55:87:05:
f7:6a:d4:e6:28:b1:72:f5:e3:57:c7:68:1c:ef:29:
22:0d:13:e9:b1:63:cf:e9:6b:aa:1c:1c:02:7f:dc:
7d:75:4f:80:45:5f:68:f1:53:8f:7b:79:de:21:bb:
c0:72:7a:25:f9:c2:67:71:46:0b:f6:02:63:75:03:
6e:7f:cd:e1:f0:c5:08:14:50:e2:ae:35:88:f1:d1:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:71:D3:9F:4E:72:47:44:25:DD:71:F9:9A:84:82:7E:6A:35:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F3C3B61F4611F0AC58A1B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.77.0/24
Signature Algorithm: sha256WithRSAEncryption
be:39:c3:92:ce:62:65:98:51:a8:b4:b4:2d:a0:f0:22:31:4f:
97:42:5d:a0:ca:ed:3c:f6:8d:3f:d9:73:c0:2b:d6:a9:7b:8f:
23:79:93:e7:6c:e1:4b:03:31:fb:db:9a:bc:9a:9a:a1:14:21:
c8:5c:b3:7f:27:45:9f:b9:55:b3:51:ff:f2:d6:e1:7a:11:ea:
e4:db:c6:88:3d:ff:f9:98:7a:8d:2c:6d:70:c7:c6:bf:33:05:
22:5b:6f:0a:63:0d:00:0d:7e:6d:3d:7e:a4:c9:b3:2b:d7:6c:
b2:9b:b5:4e:b6:0b:94:8c:7c:a3:e9:9a:5d:30:01:1e:5c:fc:
d6:8e:48:7e:82:8c:6e:35:05:14:8a:89:8c:4f:b3:77:b6:da:
d0:b5:df:37:15:eb:f6:96:29:91:42:47:ee:58:0b:c7:f9:0e:
00:66:5b:c8:70:d6:b8:1b:53:14:74:ad:25:29:59:4e:1e:03:
10:1c:df:71:0a:57:7d:a3:9c:b6:b5:d7:73:61:69:7e:e5:8a:
7c:19:83:e7:51:6d:66:d4:af:92:36:d5:b8:cc:5f:22:9d:da:
54:8b:5e:fb:f0:d9:bd:3f:e9:b4:8a:b3:94:53:56:32:8b:5c:
f5:0d:5f:36:c7:d7:76:9d:1e:69:0d:d5:2d:ad:e0:19:c8:24:
5f:79:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:43 2025 by rpki-client on console.sobornost.net