Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0856ED8AC8A111EFB30AA954762E951A.roa
File: 0856ED8AC8A111EFB30AA954762E951A.roa (raw, json)
Hash identifier: eQnFdldykPEtTLD5FIaibs9LBCq3XXNUd2GPsOvdNVE=
Subject key identifier: BC:1E:8D:ED:9A:4B:C8:8D:D1:3F:21:E2:D3:31:4B:53:87:2A:E3:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01311E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0856ED8AC8A111EFB30AA954762E951A.roa
Signing time: Thu 02 Jan 2025 00:32:23 +0000
ROA not before: Thu 02 Jan 2025 00:00:19 +0000
ROA not after: Fri 12 Dec 2025 00:00:19 +0000
asID: 984
IP address blocks: 154.218.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78110 (0x1311e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:19 2025 GMT
Not After : Dec 12 00:00:19 2025 GMT
Subject: CN=6775de97-45c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:95:8d:f4:ac:a1:84:23:7d:88:13:22:81:
15:e4:66:32:29:bc:38:bc:9d:9c:1b:4b:6c:d0:3f:
f8:45:56:59:e7:b5:63:da:13:ab:dd:74:4a:0a:8a:
14:97:b6:9a:9f:0b:f4:8c:39:0a:0a:b3:8e:3f:27:
80:19:59:16:bb:a2:31:d3:69:d3:d6:f3:c2:72:b6:
d4:04:5a:bd:39:07:22:e0:86:d3:3f:c8:54:1c:3d:
50:44:b3:eb:e6:7d:97:c5:c9:e6:cb:57:56:0f:ef:
9c:e0:a5:69:c4:6f:64:40:a3:cf:be:c0:94:2d:e2:
79:5d:99:db:50:fd:f7:18:dd:74:d0:1b:e4:10:92:
1a:06:ec:f8:b1:c6:cc:7f:d8:5e:29:a4:90:cb:f3:
f7:25:66:bd:8d:f4:0b:c7:89:f5:2f:36:e8:5a:b1:
1c:3c:86:0c:c7:09:48:95:d1:a8:95:53:0c:29:05:
4c:0a:9f:45:cf:01:88:9a:73:9b:7a:46:bc:e7:f0:
3f:eb:36:91:1f:59:ce:9b:3e:33:5f:a8:9a:2d:85:
84:e5:bb:61:6d:e7:82:66:22:ab:68:28:a2:5d:d0:
74:84:72:0c:ad:fd:76:8c:e9:8c:b1:f3:d4:37:85:
70:4b:40:b9:39:a6:87:b9:8f:b1:78:5a:5f:98:e6:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:8D:ED:9A:4B:C8:8D:D1:3F:21:E2:D3:31:4B:53:87:2A:E3:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0856ED8AC8A111EFB30AA954762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b1:ec:b8:0b:10:12:32:5e:03:c6:45:ad:0f:20:15:f9:72:
ea:63:d2:73:f7:74:49:13:db:9e:04:7d:e7:5d:6b:1f:9f:00:
15:22:07:83:78:83:fc:c4:d4:19:36:a7:65:7f:73:54:0b:85:
9a:63:ae:2a:ef:e4:16:4f:b3:dc:51:c0:ee:b1:69:66:23:84:
0e:d4:3d:ab:db:7c:77:61:20:56:7a:e0:30:da:77:d6:ad:74:
81:91:b5:b2:0c:13:1e:19:1c:87:a4:a0:d3:fb:d8:73:4c:0f:
80:af:95:6e:20:2f:5e:e7:5e:1d:33:fa:32:52:ed:2e:bb:0c:
ae:0f:90:56:7c:5b:6d:0d:01:9b:50:c2:7e:98:d2:7c:cb:a2:
db:5d:f3:20:e2:14:19:b9:29:0f:af:25:01:e6:81:c7:fd:9e:
a6:d3:41:48:b4:07:f3:be:80:c9:41:8c:c8:7c:f4:ec:9c:cb:
d3:28:6c:c6:bb:1f:71:08:f9:0f:b5:1b:e3:6c:9c:e7:8b:fd:
62:94:ba:d5:69:e6:52:87:c0:a2:03:6c:4a:c2:09:14:ac:15:
84:d3:60:8d:c9:17:6a:43:01:44:5e:cf:d2:49:27:b5:e2:de:
51:1e:ad:0c:74:93:cf:f0:ab:34:b8:02:d4:4f:ca:63:98:46:
eb:7e:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:44 2025 by rpki-client