Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015E7DA4C52711EFB3B97D48762E951A.roa
File: 015E7DA4C52711EFB3B97D48762E951A.roa (raw, json)
Hash identifier: 5HI2ZdqFT81lqfXs3PKOD3wzAjEl026ubw8G816U3pw=
Subject key identifier: 3E:E1:3B:5B:3D:B6:F3:89:56:2E:22:E6:E1:0A:E1:07:49:94:BF:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015E7DA4C52711EFB3B97D48762E951A.roa
Signing time: Sat 28 Dec 2024 14:21:19 +0000
ROA not before: Sat 28 Dec 2024 14:21:15 +0000
ROA not after: Fri 12 Dec 2025 14:21:15 +0000
asID: 984
IP address blocks: 154.204.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76687 (0x12b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:21:15 2024 GMT
Not After : Dec 12 14:21:15 2025 GMT
Subject: CN=6770095f-8e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:1e:ae:9d:4a:71:c3:12:99:79:98:ca:85:
df:0f:1b:91:de:c5:0b:07:b7:5c:d7:cc:44:46:b0:
5b:8d:8d:b0:7b:04:4f:de:cb:e8:55:10:b2:ff:12:
fd:42:b9:c6:30:26:25:57:76:ba:88:3b:f1:14:13:
da:1e:8f:be:96:ca:56:ab:22:b0:b9:6a:be:93:a2:
75:77:5d:cf:5f:5a:97:4d:44:a7:2a:0f:60:ea:07:
25:83:76:8e:c2:c9:ff:00:00:97:6d:ad:e9:a4:2b:
ba:c9:8d:99:7c:1a:97:f1:e0:fc:ab:78:8a:e4:16:
77:8c:d7:d9:ba:3c:69:bb:73:25:2f:89:17:19:85:
83:05:92:50:d2:5e:40:7a:bc:6a:4e:a3:2e:f2:d9:
2f:4e:9f:38:2d:9e:5e:aa:03:c0:b3:4a:75:04:61:
fa:50:cf:79:06:c4:50:d1:b8:d7:d5:54:96:35:63:
1e:90:c5:82:20:9f:34:de:25:15:e6:68:d0:c1:dd:
5b:7d:1f:ac:f5:3c:59:07:18:df:52:42:73:15:59:
f9:84:ab:3d:76:1b:61:32:90:f4:d4:35:8e:6b:53:
3a:85:f2:58:68:f1:bd:57:11:96:bd:24:45:f9:cc:
0b:a4:83:69:6e:19:e1:3f:2f:ca:8b:c9:92:f0:8d:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:3B:5B:3D:B6:F3:89:56:2E:22:E6:E1:0A:E1:07:49:94:BF:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015E7DA4C52711EFB3B97D48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1b:fb:9b:3b:6d:1f:c0:5d:9e:77:df:ed:d0:74:ca:1f:a0:
6f:5c:0a:a0:76:30:76:58:71:32:d4:f2:5c:d6:1b:47:66:46:
22:ed:37:82:92:24:cc:9e:2a:fc:1c:e3:73:8c:20:20:93:88:
cc:61:9d:6e:46:fe:f7:06:ef:39:50:8c:3c:d2:c0:ab:5d:5f:
17:4f:d6:9f:16:e5:ea:53:08:b6:a7:98:40:45:02:d9:8c:2e:
bd:7b:f9:12:8a:85:db:b2:1a:06:3d:c7:9b:37:3f:5a:96:4b:
ec:17:37:03:db:fb:9d:eb:ce:9a:29:b2:88:0c:df:c9:58:ce:
74:78:92:d7:02:fa:42:3a:fa:25:17:55:ce:c4:ca:92:cd:cd:
bd:76:df:fc:0b:6a:2b:1e:b4:ca:78:5c:e3:bc:1d:8a:49:09:
05:8a:39:82:f0:66:af:42:4c:0d:94:49:81:73:f3:06:81:38:
13:45:26:ed:fb:97:8a:b2:b4:78:db:f2:5a:30:be:a0:4b:70:
c7:54:5b:b1:0b:08:5c:3e:fa:3c:f1:35:01:6a:f7:fd:65:6a:
b9:af:75:7d:a7:50:e4:13:c4:fc:ff:f6:0a:80:a6:97:c2:fe:
17:d9:48:63:2f:e9:4b:c2:50:96:49:f9:d7:4a:cb:2b:1d:96:
01:3d:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:11:12 2025 by rpki-client