Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4DCC40C8A611EF8B6CEC76762E951A.roa
File: 0E4DCC40C8A611EF8B6CEC76762E951A.roa (raw, json)
Hash identifier: kbXqhxFzT9rvDCknD3gxvWz8m32GE8P8Hp1NqYkZsv4=
Subject key identifier: 66:51:D1:57:5D:CD:EE:C9:40:56:19:A7:DA:84:68:17:4F:FA:4C:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01314A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4DCC40C8A611EF8B6CEC76762E951A.roa
Signing time: Thu 02 Jan 2025 01:08:20 +0000
ROA not before: Thu 02 Jan 2025 01:08:17 +0000
ROA not after: Sun 12 Dec 2027 01:08:17 +0000
asID: 17561
IP address blocks: 154.220.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78154 (0x1314a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:08:17 2025 GMT
Not After : Dec 12 01:08:17 2027 GMT
Subject: CN=6775e704-7a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:a1:d3:64:30:56:d2:af:bc:b0:b2:0c:a5:
35:dd:f3:e8:b6:8d:30:91:7e:1f:ad:07:9f:0a:07:
97:c0:0d:50:4a:61:15:92:f1:85:d5:01:29:e8:5b:
b2:32:f6:31:a7:78:ab:21:b0:4f:6d:be:e1:d1:4a:
de:a3:f9:89:d4:89:95:40:f8:4c:aa:34:96:76:69:
43:b7:e2:c7:14:ba:6b:14:27:8f:1b:a0:f7:7d:eb:
72:95:12:95:37:b6:32:9b:45:9b:a1:7f:6b:b1:fb:
6c:9a:4f:f3:4a:91:d5:7a:9f:27:3b:11:d8:c5:e3:
f0:aa:af:b7:d2:87:95:bb:e7:09:b1:25:09:10:8a:
20:26:8a:ae:35:76:c3:5e:0b:bb:e1:d0:68:62:aa:
b3:68:97:51:52:30:7a:0d:23:60:70:b1:40:76:24:
3d:11:88:f8:77:03:af:8f:e3:d4:b1:d0:16:e1:bd:
97:47:b0:28:e2:71:ab:b4:d6:99:44:3b:fb:76:01:
14:25:76:92:d6:a9:ec:0a:9b:ed:25:0c:1a:72:b5:
5b:d7:42:6c:1e:93:7e:9e:0c:b7:52:ff:8c:f2:8b:
15:70:86:89:17:21:97:56:05:dc:8c:7a:8c:0c:75:
27:ab:e4:d6:a7:e2:93:97:4e:5c:1d:f7:d7:36:2e:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:D1:57:5D:CD:EE:C9:40:56:19:A7:DA:84:68:17:4F:FA:4C:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4DCC40C8A611EF8B6CEC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:46:1c:1d:5a:5b:1d:35:5a:60:7e:e3:f0:9d:1c:e9:bc:51:
de:c6:f1:ce:e8:a1:1d:9e:5b:af:d4:25:c5:4a:ac:9f:c0:73:
ef:54:e8:3a:6c:d1:ed:1e:dc:38:15:96:ee:53:4d:ea:f6:77:
9b:5f:3c:82:bf:65:e9:1d:14:60:c9:c2:69:ff:22:72:1d:eb:
86:56:3d:7d:a4:d1:66:df:0e:de:55:7c:a7:88:22:64:cf:f4:
74:16:f0:49:59:06:f0:9b:e7:e6:c7:db:ab:13:d0:ba:30:f0:
cc:76:54:08:49:24:b8:f2:f3:4c:d5:ee:6e:1b:36:cd:fb:0d:
17:e6:93:f9:19:e2:84:8c:2b:c3:7e:4e:e1:37:53:2d:cd:96:
4a:1d:6d:0d:68:83:db:29:b4:cf:7e:e0:c7:3e:38:37:48:39:
f0:76:98:55:8f:d3:e2:eb:0d:12:0c:30:6e:36:20:8d:84:0c:
73:86:72:71:8f:3e:b0:c1:04:b5:b2:49:0d:a3:51:39:60:a6:
92:fc:02:54:3f:a4:2c:c5:1a:80:42:ed:45:38:18:78:27:e3:
4e:20:ea:e2:b7:7d:05:f8:2a:ba:97:99:61:3b:be:2c:90:c5:
68:a7:45:40:70:8c:91:bd:27:3a:cc:24:8f:e1:78:62:bf:8d:
cb:a0:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:26 2025 by rpki-client