Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B218674C62611EF96D39292762E951A.roa
File: 0B218674C62611EF96D39292762E951A.roa (raw, json)
Hash identifier: FRXv6mlEEq6eKj+qUhJjrD+O7LJ5pvBYP0LfftBTMlI=
Subject key identifier: FF:53:F3:FB:22:27:0A:DF:47:91:90:67:ED:5C:89:FA:26:5A:2A:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B218674C62611EF96D39292762E951A.roa
Signing time: Sun 29 Dec 2024 20:46:57 +0000
ROA not before: Sun 29 Dec 2024 20:46:53 +0000
ROA not after: Sun 12 Dec 2027 20:46:53 +0000
asID: 17561
IP address blocks: 154.217.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77718 (0x12f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:46:53 2024 GMT
Not After : Dec 12 20:46:53 2027 GMT
Subject: CN=6771b541-de41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:17:6c:ed:40:2d:d9:c7:cf:1d:9e:df:60:
2d:c8:59:c9:7b:8d:e9:0d:d7:f8:03:5d:10:ef:ff:
67:41:ce:48:66:2c:79:68:f9:c2:2d:1f:fe:71:d8:
6c:ab:95:ec:db:61:a7:d3:3f:3f:7a:52:b9:34:7c:
3b:33:da:7d:a8:c7:69:57:2a:96:8f:2f:aa:f3:50:
76:ce:58:07:f4:30:a7:cc:cf:e6:14:76:26:37:43:
ea:56:a1:fe:08:7b:43:1d:17:eb:18:d2:14:ce:a7:
ea:db:40:f4:9f:a0:f2:b9:0c:27:a4:28:88:e7:26:
39:7e:ae:b5:e1:28:0a:38:db:06:87:40:5c:f7:17:
f0:95:1b:8a:86:62:04:38:1c:20:de:fa:e4:01:7f:
c6:d4:3b:b9:ef:1e:40:5e:f3:cd:37:b8:2e:9b:b1:
85:3c:fd:8b:5b:80:35:9a:c9:ea:79:47:83:16:b4:
19:6e:d7:89:7a:70:aa:c2:47:10:d5:ce:10:1a:ae:
c0:6a:8d:17:6f:9f:81:2b:d5:f9:42:61:5c:1d:a8:
07:51:99:0a:93:e5:8e:70:b9:0b:92:ec:27:c5:a0:
4e:86:6f:e9:5c:af:66:ef:0e:3e:75:a1:ce:b7:63:
64:b2:36:9e:c2:b8:bd:86:3f:1e:fe:9d:75:43:3c:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:F3:FB:22:27:0A:DF:47:91:90:67:ED:5C:89:FA:26:5A:2A:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B218674C62611EF96D39292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.174.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a9:e2:1d:65:98:66:90:3e:b6:ad:0c:19:cf:eb:ea:7d:40:
14:ed:d9:b5:d4:a7:10:bf:5d:42:7a:d2:3a:f2:7a:4c:f9:79:
f1:c5:56:e8:d1:3c:1e:b3:75:c8:b1:eb:23:78:cb:9d:59:b6:
c6:6b:c3:aa:d0:7c:89:f7:3d:fb:5f:93:4e:39:1f:32:2e:29:
1a:3f:37:5c:e4:da:f8:b1:62:e8:ea:02:c7:61:49:1f:35:ff:
1a:b4:c7:81:7c:40:ff:00:41:8f:ce:cf:d1:97:b4:5d:2f:b1:
10:9d:8e:af:b1:36:77:68:dc:47:dd:bb:e8:a3:09:2c:5f:55:
4f:d7:81:7c:66:c0:32:ae:fe:f4:78:1d:72:e6:be:be:69:1a:
02:fe:5a:65:35:a1:e3:a3:ed:ce:5a:79:d6:ba:63:f2:29:d9:
46:0e:f7:25:86:24:cd:66:55:b6:05:11:60:b1:26:67:65:b1:
44:b7:a5:f7:5a:14:b9:1a:88:4d:87:a9:c3:b8:a3:82:29:19:
e9:a4:3c:b2:ef:e6:09:33:24:3f:d2:c2:e3:86:2c:b4:5f:25:
97:02:16:95:60:f0:a4:04:a6:9f:bf:b0:ce:7a:2a:0d:e8:e2:
89:35:8e:18:f0:b5:a2:77:49:a3:f4:d0:8f:82:42:1e:dc:02:
51:6b:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:52 2025 by rpki-client