Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74C1C090C9B811EF9741705F762E951A.roa
File: 74C1C090C9B811EF9741705F762E951A.roa (raw, json)
Hash identifier: uKlh5ayfa62I/UIJenBgtbNbx67YdHQB4xupgLl6rns=
Subject key identifier: 0F:96:3B:FB:A8:5F:CC:36:A7:AF:9B:A6:46:82:80:63:E7:D4:72:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1989
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74C1C090C9B811EF9741705F762E951A.roa
Signing time: Fri 03 Jan 2025 09:52:34 +0000
ROA not before: Fri 03 Jan 2025 09:52:30 +0000
ROA not after: Sat 02 Jan 2027 09:52:30 +0000
asID: 64267
IP address blocks: 154.16.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6537 (0x1989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jan 3 09:52:30 2025 GMT
Not After : Jan 2 09:52:30 2027 GMT
Subject: CN=6777b362-346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:59:90:a4:88:ff:cf:d4:d7:4f:f5:8e:c5:
d5:1a:32:ef:94:72:d8:03:9a:7f:37:5d:c7:c0:4d:
4d:f0:3a:80:bd:90:50:96:da:31:b6:a7:12:7e:7b:
3d:6c:06:b2:88:57:88:e7:46:9c:97:0b:ae:ca:cb:
c9:94:11:20:30:6b:3e:16:7e:b4:1e:5f:b1:49:6e:
19:ad:0c:37:22:99:e3:5a:6d:97:a3:e1:94:9e:a2:
c3:d2:26:cc:48:43:66:02:34:3b:b9:84:93:e2:e9:
0c:2c:29:ff:92:cb:20:42:ff:87:e1:2e:5d:be:7a:
31:9e:09:63:a4:3a:15:3c:00:1c:fc:f3:12:d2:74:
33:84:d4:d4:21:87:55:af:92:07:15:1d:6f:b5:6a:
38:ac:26:5b:d8:23:33:71:26:91:57:c7:76:7b:31:
73:a6:9f:63:b7:7b:85:9c:14:e2:a7:86:db:52:a8:
e2:45:8b:f6:e2:d5:be:b3:43:a4:88:d9:75:34:0c:
69:ab:c7:a5:62:2b:17:a3:d8:6a:36:cf:e9:01:7a:
b1:8f:c2:00:f2:34:f5:29:5a:d5:78:6e:ec:09:c3:
bf:08:9e:a5:e6:a4:84:7f:eb:e2:98:d7:07:83:aa:
11:d6:3e:38:22:90:61:4b:46:b5:bf:2c:a2:b1:3e:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:3B:FB:A8:5F:CC:36:A7:AF:9B:A6:46:82:80:63:E7:D4:72:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74C1C090C9B811EF9741705F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:be:7c:45:bf:fd:2e:ec:8a:9e:56:1f:df:5a:49:dd:42:24:
b0:c9:1d:58:f9:b3:92:31:ed:e0:cc:f2:c2:1e:f5:a1:09:95:
8b:50:28:63:6a:c9:07:e5:cc:cc:7f:17:38:cd:97:94:bb:05:
22:43:cd:df:93:c3:fd:fb:21:2b:52:62:52:5a:7e:22:b3:9a:
86:2e:d4:a4:af:6c:ed:e1:08:6e:22:fb:e3:88:0a:8f:78:ab:
4b:52:67:b6:2a:b3:44:94:94:47:ea:0a:29:56:fa:ad:98:8a:
07:66:3f:ed:da:6c:ae:59:7d:49:71:de:09:85:e0:9c:8b:36:
b6:03:a6:9e:38:6e:4f:0f:7a:84:78:46:a7:29:3d:83:b4:5b:
e9:95:2a:f5:4f:60:d3:1e:71:2b:d6:35:11:cc:fc:07:f5:74:
96:a4:9e:bc:19:a3:f0:3f:96:db:32:8a:a1:6f:fe:ea:67:53:
4c:73:f5:33:4d:89:a0:0d:94:98:5a:7c:38:87:1e:2a:15:84:
bf:95:5a:ea:12:bc:f6:13:e5:3a:ca:b9:68:b0:79:b4:c8:fe:
f8:03:ab:27:7d:5d:4e:0d:bf:b8:59:68:65:d5:c3:78:7e:cf:
f8:b7:4f:38:7c:68:e6:ac:40:4d:69:37:4a:25:71:87:c7:2d:
94:a1:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:44:27 2025 by rpki-client