Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC4E90A109511F0B2EE2773762E951A.roa
File: CDC4E90A109511F0B2EE2773762E951A.roa (raw, json)
Hash identifier: 6cCz/mPq3+ZNKrO86M3cKY8qDLcTSaSgMoHHJnw/O9g=
Subject key identifier: F8:00:C6:78:E0:35:FB:6C:4E:F2:E4:1F:2E:A1:FC:3A:E7:68:F3:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC4E90A109511F0B2EE2773762E951A.roa
Signing time: Thu 03 Apr 2025 14:13:24 +0000
ROA not before: Thu 03 Apr 2025 14:13:19 +0000
ROA not after: Sun 03 Aug 2025 14:13:19 +0000
asID: 6453
IP address blocks: 154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96167 (0x177a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 14:13:19 2025 GMT
Not After : Aug 3 14:13:19 2025 GMT
Subject: CN=67ee9784-0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:ca:f2:a7:97:11:e1:e8:9c:d2:74:3b:0d:
8f:69:a9:87:c3:ba:a0:eb:6c:22:36:c9:b0:5b:e4:
db:0e:6e:5f:17:b6:c6:d2:6d:26:e4:2f:62:d6:0f:
47:7b:62:be:dc:a2:bb:e2:a1:c6:4e:8a:af:67:56:
83:bc:e0:48:f3:9a:ab:f5:6a:fe:7a:f3:85:3d:f0:
70:5b:77:95:de:b5:fc:13:10:80:d1:e4:3c:3b:a0:
05:14:11:9b:43:34:89:41:1c:dd:e7:59:35:a3:77:
48:50:43:fd:d3:bb:fe:27:3f:4d:4a:ad:42:e6:cf:
27:71:60:9f:aa:b7:63:32:ac:c6:92:b6:dd:d7:e1:
4a:fd:42:31:ea:28:fb:17:11:11:bb:70:5e:4f:a0:
b9:4d:3d:9d:19:25:b7:65:3d:d7:a1:d1:55:7e:00:
8c:ad:c2:ab:7f:12:95:7f:fc:5a:10:3b:21:eb:2d:
45:53:ff:bc:86:23:06:b4:a9:87:93:be:e2:26:c2:
c4:ba:21:13:d9:01:fd:fe:15:fb:22:b6:b4:84:38:
76:c4:66:73:e0:65:b2:61:19:ce:7a:ae:2d:6c:e9:
dc:c4:9b:22:2c:e6:b4:d9:51:f0:d4:ad:2d:bf:44:
1f:51:80:6a:28:f8:ca:13:6b:e5:14:a8:2e:5e:55:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:C6:78:E0:35:FB:6C:4E:F2:E4:1F:2E:A1:FC:3A:E7:68:F3:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC4E90A109511F0B2EE2773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2b:78:6f:6a:87:44:60:00:5f:12:f8:7d:a6:1e:b7:7d:73:
07:98:35:a8:b2:97:2c:a8:ce:55:f2:5b:eb:12:62:22:3c:80:
0b:7f:87:7f:5d:b5:e6:b6:d3:29:10:5a:8f:c4:bb:98:b4:5c:
dc:b2:ad:85:0d:7d:99:c6:c0:09:d7:b0:43:fe:17:fa:11:88:
38:5b:3e:00:d9:67:d9:8f:0f:08:a4:e4:8a:9e:68:2d:73:de:
ac:4a:b0:21:9f:18:e0:ce:c3:89:8c:d6:30:b7:9a:51:cf:e5:
2a:5b:3f:0e:67:61:fa:73:87:dd:52:63:86:a1:b3:49:22:32:
16:62:16:c7:9c:bd:3d:ea:4a:e7:23:47:c8:0d:6f:20:93:7a:
72:14:61:e9:a3:1b:bb:31:6d:ab:96:ab:c1:03:7f:43:00:dc:
63:ab:53:f4:b1:dd:10:36:d0:e9:9d:71:1f:5b:29:75:16:4d:
c6:9d:ed:e3:7b:9a:2a:4f:a8:a8:b1:82:32:24:6d:4b:e6:f0:
f5:23:fa:5a:30:03:07:a8:54:22:67:bc:c5:00:3b:60:be:8b:
1f:9c:48:5f:6f:9e:42:cc:fd:9f:16:ec:0c:c2:60:0b:f8:0a:
c9:e5:88:2a:88:63:52:8c:36:45:20:81:7f:89:d1:f2:d7:b1:
0f:3b:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:14 2025 by rpki-client on console.sobornost.net