Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B1F22C1A611EF8DC38979762E951A.roa
File: 028B1F22C1A611EF8DC38979762E951A.roa (raw, json)
Hash identifier: 4oK46OGPsKdro9rZcf78zQEj4707iCIpSbTqQmN3b4Y=
Subject key identifier: 71:D8:64:06:F9:D9:F5:BF:73:81:6A:9A:83:98:6A:15:6A:08:67:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B1F22C1A611EF8DC38979762E951A.roa
Signing time: Tue 24 Dec 2024 03:20:22 +0000
ROA not before: Tue 24 Dec 2024 03:20:19 +0000
ROA not after: Wed 10 Dec 2025 03:20:19 +0000
asID: 984
IP address blocks: 154.92.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73967 (0x120ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:20:19 2024 GMT
Not After : Dec 10 03:20:19 2025 GMT
Subject: CN=676a2876-1c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8b:4e:5a:cf:c6:3c:f7:9c:e8:f6:df:d8:02:
7e:9c:44:26:dc:c3:59:88:be:69:9f:64:92:63:f0:
b8:bb:49:cf:bd:f7:78:6a:e0:18:69:b3:3d:a3:05:
6b:fc:11:ef:f3:18:8d:72:28:39:09:2c:ec:64:53:
ae:60:ee:18:7c:ef:d4:64:f5:78:3d:fd:98:cb:80:
63:51:a9:19:cc:aa:e4:01:cf:96:c7:a3:b7:cb:24:
62:bb:69:b7:c5:eb:2c:7e:77:39:7d:04:e3:bb:1f:
b0:69:c0:9a:6e:a7:76:72:02:84:84:02:88:6d:76:
ee:62:b1:fc:9b:a5:d5:f8:fb:90:45:3f:70:c5:0f:
2d:39:9a:6a:39:86:4e:1c:ff:03:f9:f1:61:9a:4e:
67:0d:ab:c8:b7:fd:b2:ee:58:dc:e2:82:67:65:65:
92:37:3f:16:19:62:c9:fe:77:bb:8d:8d:b2:1a:61:
ce:66:2a:61:3c:ec:94:01:51:7a:75:19:5f:39:ca:
58:84:5d:97:2e:8a:c9:d6:cd:51:be:cb:9d:f7:f4:
5f:50:5e:86:be:8f:de:25:3a:88:5d:d7:69:51:f4:
a3:b5:16:36:65:ec:3d:73:49:30:02:2f:73:77:af:
73:2b:10:c1:5f:71:33:ae:2f:5c:39:04:ed:52:af:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:64:06:F9:D9:F5:BF:73:81:6A:9A:83:98:6A:15:6A:08:67:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028B1F22C1A611EF8DC38979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:91:b6:e3:09:6a:70:8c:0d:d8:1a:4d:11:51:82:12:f8:43:
5f:90:25:98:ea:5e:36:59:36:d6:9c:6c:6d:31:2e:b5:28:a5:
6f:a9:1a:16:30:1f:c0:c3:69:ae:e2:50:e6:57:91:0d:d7:29:
e0:a4:60:7f:f3:d7:c0:0d:83:70:e8:07:fb:9d:70:cd:df:08:
8c:2d:09:bd:5d:9e:3e:81:87:80:3b:67:8b:80:f0:35:f6:3f:
bc:22:20:ca:1e:7b:bd:ea:07:88:8c:67:db:e6:63:bb:f1:cf:
23:29:12:91:e2:12:ee:33:4a:8f:1e:dd:27:0c:6b:8e:45:9b:
2a:e3:c0:7a:59:4f:10:ff:cd:0c:cb:dc:8c:a4:3c:65:60:74:
41:5a:55:31:16:ab:9b:e1:3e:72:e2:62:a8:4d:23:00:5d:6b:
8f:25:7d:2e:4d:77:2e:0d:f4:af:ca:07:3d:02:b3:ff:14:b0:
1d:f6:e9:9c:24:1d:21:97:9d:e9:95:06:a5:86:38:30:a3:26:
cd:82:80:28:15:cb:00:a2:14:d7:5a:f1:1a:26:be:75:dc:05:
b5:77:51:86:d3:ff:17:98:58:ac:a7:a7:bc:ec:0a:63:83:c9:
04:fb:bd:04:73:fb:89:e7:d4:9b:27:14:e4:5d:79:90:b6:7c:
88:22:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:20 2025 by rpki-client