Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCEF1621C5311F0851CFBF5DAE4EC9C.roa
File: CBCEF1621C5311F0851CFBF5DAE4EC9C.roa (raw, json)
Hash identifier: TMdvRajH4L/9Hm81BtyW314g3cTKO27qPljS8cn19TE=
Subject key identifier: 51:D9:FF:E5:9D:5D:AD:02:7B:B2:38:E5:C6:7A:50:3B:EA:20:4F:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017983
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCEF1621C5311F0851CFBF5DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:51:08 +0000
ROA not before: Fri 18 Apr 2025 12:51:04 +0000
ROA not after: Wed 14 May 2025 12:51:04 +0000
asID: 57043
IP address blocks: 154.83.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96643 (0x17983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 12:51:04 2025 GMT
Not After : May 14 12:51:04 2025 GMT
Subject: CN=68024abc-9ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:9f:51:b6:fc:e3:21:0d:a9:84:ab:ce:54:
24:a7:1c:c0:45:f5:76:19:98:21:a1:4f:25:30:c5:
ff:03:6a:33:03:73:99:fe:0a:dd:52:48:09:81:f1:
74:3e:46:7d:66:12:97:d8:72:f7:78:83:ce:cb:b9:
e8:3c:0c:0d:ec:20:ff:08:5b:6e:92:de:2c:fa:6d:
e8:57:9e:02:3c:c1:63:2e:f2:8c:7a:b2:f8:b6:2b:
55:6a:5c:f5:78:55:76:db:27:3e:d1:22:6b:12:7b:
48:8e:51:0d:6d:58:0a:5f:40:02:5e:55:0f:38:01:
65:76:ba:be:21:ab:8f:5e:cb:11:f8:63:0b:68:af:
f2:21:4e:3d:ee:2d:ac:af:e2:4c:e2:f6:cb:66:aa:
24:06:72:e3:d3:75:ad:d7:3f:08:d4:34:35:d9:04:
35:02:7c:fc:31:4d:ee:e3:d6:21:a0:cf:e5:ee:8c:
99:2f:25:b5:04:5d:9b:f2:64:d4:86:01:fa:aa:a6:
3a:63:c4:3b:85:54:74:d6:e1:8d:d6:af:e3:b6:d4:
8a:60:7f:af:20:ed:91:7a:52:ec:80:bd:33:04:0c:
bf:bb:68:4c:d4:e4:47:f2:ca:cd:d0:d1:22:47:6a:
d9:05:2c:32:35:76:5b:ed:2a:ea:22:d7:f1:04:2a:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:FF:E5:9D:5D:AD:02:7B:B2:38:E5:C6:7A:50:3B:EA:20:4F:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCEF1621C5311F0851CFBF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:d9:72:47:e9:c8:fc:a8:6a:eb:01:ae:a9:65:a4:8c:03:17:
b9:a1:9c:17:c6:c3:10:1c:92:1d:86:ac:50:c4:0d:c6:6d:04:
37:0e:1b:52:1f:29:1f:a2:52:63:d3:99:3b:c4:dd:ac:1d:3b:
6c:17:ab:6b:8b:10:17:d5:01:ba:2b:59:45:49:c3:0f:79:3a:
d4:dc:f5:51:c1:fa:24:3d:21:78:89:83:41:5a:69:56:f8:0f:
2f:02:14:ee:94:b8:5a:67:4b:a4:d5:0c:a6:bb:83:dc:af:52:
d1:42:b1:f2:cc:d3:e6:21:6c:d6:a6:30:4e:13:e7:3e:ee:19:
0f:57:1f:72:7a:1e:0b:10:2d:e1:84:ce:46:65:ef:d2:75:09:
49:15:39:4a:18:47:aa:4c:a4:bb:60:73:57:35:e8:30:95:25:
16:f0:d3:6c:35:01:1f:9d:b6:ce:3e:03:fe:e2:32:db:78:f2:
0c:63:a6:1f:79:f4:07:9d:dc:87:fd:cd:e8:a3:73:c3:ea:d6:
98:ea:7a:5e:86:4b:ea:e8:41:34:2e:d6:8a:b3:57:ef:72:11:
67:23:7c:cb:69:91:ba:6c:a9:cb:fe:81:fe:a2:15:2a:43:da:
9d:cb:37:52:73:c4:1f:31:55:82:83:00:c3:51:c6:4c:82:20:
05:51:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:33 2025 by rpki-client on console.sobornost.net