Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1F38FE15EF11F0A6134EEB6DB8BCC6.roa
File: DA1F38FE15EF11F0A6134EEB6DB8BCC6.roa (raw, json)
Hash identifier: F/GRS90c2arq2vA0ZRnYHQfrRQaJsH5FELanl71N0QI=
Subject key identifier: 36:14:15:08:FF:80:1A:63:CB:9A:86:C2:CA:27:02:62:B4:A1:CD:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1F38FE15EF11F0A6134EEB6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:40:35 +0000
ROA not before: Thu 10 Apr 2025 09:40:31 +0000
ROA not after: Sat 17 May 2025 09:40:31 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96449 (0x178c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 09:40:31 2025 GMT
Not After : May 17 09:40:31 2025 GMT
Subject: CN=67f79213-e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:ca:08:86:1a:35:7e:dd:23:ef:c3:38:f6:
c3:57:53:ec:c6:cd:7e:1b:ad:55:ef:81:55:56:c0:
16:c1:3b:a5:b5:f5:f7:3d:80:2a:63:01:7f:d5:3b:
3b:41:1d:8b:fe:b6:92:10:a4:e7:54:24:80:3e:1b:
d5:75:7f:32:50:2c:2c:39:b7:31:6c:11:e4:3e:69:
dc:f7:f3:38:1d:76:7d:5a:62:ba:92:0c:30:39:5c:
7d:28:67:f9:03:44:b6:7f:10:98:72:29:d2:d5:97:
37:bf:74:b1:a6:c2:a9:e3:63:3d:36:fd:35:98:16:
3c:6d:31:29:f4:53:78:03:35:0e:1e:b4:8f:e4:65:
6f:c1:91:e9:77:f0:71:6b:bb:0d:5e:b7:44:c4:54:
b7:a1:6b:ec:bb:0f:69:3b:5d:f9:2e:07:8a:cd:5e:
f3:71:24:bd:63:60:1b:55:24:b0:42:2a:f4:85:82:
66:ae:d4:43:1d:af:69:b9:c9:a0:5b:c1:5d:74:b2:
da:44:b7:8c:53:fe:a5:8b:79:55:6f:8b:22:7d:ac:
94:df:59:3c:80:b2:1f:2d:3d:95:44:7d:67:ff:6a:
31:12:be:b4:0d:c3:c0:a9:2d:63:c5:ae:b0:7d:ed:
87:de:1b:1c:1a:b4:88:77:6b:68:e6:41:21:c2:d6:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:15:08:FF:80:1A:63:CB:9A:86:C2:CA:27:02:62:B4:A1:CD:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1F38FE15EF11F0A6134EEB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
33:af:a4:79:f3:5f:4a:9f:ee:0c:0e:f2:42:b5:d4:ff:ed:7f:
36:5f:6e:f0:e2:92:68:43:3a:14:87:33:c5:24:77:58:41:a5:
03:73:60:ea:ac:d9:ad:f7:de:52:43:fb:00:98:68:42:5b:d9:
3c:bb:80:b4:c3:91:db:17:57:33:2e:12:b6:6c:97:75:72:97:
72:38:62:f4:57:34:5b:03:03:23:c6:bb:d5:01:e3:77:c2:cd:
e2:b6:a0:f4:d0:97:82:93:76:ad:6c:65:ba:8a:58:ef:50:8b:
68:81:78:8c:ea:80:c9:b7:96:f8:a4:ba:b5:3e:ca:90:c1:c5:
4e:5c:85:44:e5:bf:17:3c:f6:97:94:db:d3:b6:23:6f:9e:08:
55:d8:b2:45:d8:8c:0d:ef:2b:19:a3:ad:94:36:73:06:05:27:
01:86:b7:ac:03:b3:fe:44:d2:f7:ce:e8:fc:e7:01:28:6e:b6:
b0:4d:c1:11:1b:f9:32:32:3d:ae:d4:b4:ba:13:2d:56:08:f7:
ae:7a:24:74:60:39:6a:44:7e:16:ea:82:28:83:c8:82:7c:94:
96:08:45:46:fc:1e:ae:de:e4:54:9c:45:5d:2d:e3:22:c9:00:
d8:f1:f9:bd:52:4d:53:8d:25:e1:10:15:d9:75:bd:1e:5f:6d:
00:ca:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:41:51 2025 by rpki-client on console.sobornost.net