Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ACEA2EC53C11EF8A92474C762E951A.roa
File: 10ACEA2EC53C11EF8A92474C762E951A.roa (raw, json)
Hash identifier: UsR2nrFFcshS2tqRog6TXuhpXjUBRkPUbIhitIk8IPI=
Subject key identifier: D6:B5:35:86:96:B1:9F:62:A6:C5:B7:48:11:49:17:32:E5:98:A5:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ACEA2EC53C11EF8A92474C762E951A.roa
Signing time: Sat 28 Dec 2024 16:52:04 +0000
ROA not before: Sat 28 Dec 2024 16:52:00 +0000
ROA not after: Sun 12 Dec 2027 16:52:00 +0000
asID: 17561
IP address blocks: 154.205.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76879 (0x12c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:52:00 2024 GMT
Not After : Dec 12 16:52:00 2027 GMT
Subject: CN=67702cb4-3f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:8b:35:60:f7:3a:af:02:99:7b:0b:0e:06:
18:01:bc:b9:a3:03:36:dd:fe:e5:45:aa:dc:93:23:
73:fb:2d:39:77:d8:77:c5:9b:bd:68:04:3b:63:5f:
0e:6b:1b:47:83:f1:21:b4:de:ea:7e:c8:9c:06:fa:
4c:f5:58:48:95:43:91:dc:28:0f:36:95:3d:fb:09:
61:15:91:96:60:e8:2e:b8:62:4d:28:1c:65:09:a0:
02:a0:b4:29:6d:fa:b8:8f:96:27:59:42:17:ac:5b:
7f:2e:e8:9b:06:3f:d9:b9:ee:1b:b3:3d:73:42:89:
a0:5c:41:d3:de:5d:38:3d:63:67:29:0c:e3:63:0b:
bf:a0:d3:25:c7:df:6c:98:a1:53:c5:36:e8:74:71:
14:15:7e:1a:df:5d:4e:09:b2:ed:c9:3f:b7:be:b3:
0a:b7:64:17:11:53:06:90:a4:35:77:da:03:d6:e3:
7f:4d:84:26:2f:6f:ea:b2:bb:27:1e:b6:75:85:4c:
6a:55:fc:0c:28:74:55:df:25:78:13:f2:28:46:f6:
fd:02:91:a8:5a:74:87:fc:bc:e8:41:76:f2:dc:17:
3e:b7:c7:dc:4d:96:c0:fc:a3:f7:01:e5:d5:fe:70:
89:e9:96:c6:3c:fd:9c:6d:65:5b:23:6f:ce:08:43:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:35:86:96:B1:9F:62:A6:C5:B7:48:11:49:17:32:E5:98:A5:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ACEA2EC53C11EF8A92474C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1f:e3:09:b7:66:ba:3d:e4:4c:ea:23:31:72:5b:c7:31:15:
a9:70:07:e3:b4:30:a5:d6:9f:6e:4e:9e:f4:31:ba:4f:a5:25:
54:89:9d:8f:30:57:93:bf:ef:99:5a:18:9e:ba:d4:34:0f:a4:
23:6f:ac:24:ed:ff:94:0e:1e:c3:59:03:6c:c4:91:77:af:59:
d0:16:12:9a:be:48:0a:f9:20:65:5e:6a:c5:ce:aa:0e:66:c8:
96:80:46:a8:ab:4d:96:87:93:47:c4:2a:f6:52:3e:aa:5d:db:
24:f5:c5:0b:99:bc:3a:36:d5:1a:ae:90:17:6e:9b:57:bc:02:
9d:97:35:f1:57:9f:56:8f:d6:89:4c:4b:0f:ee:46:7c:c8:a4:
1f:a0:32:9a:7f:dc:e7:71:77:ae:01:5d:d9:43:b9:c0:ed:27:
f9:33:27:a8:b5:9c:b2:86:e0:67:3e:35:66:08:7d:7d:cc:49:
e5:96:0d:3b:83:5e:c4:04:94:80:83:5c:a6:19:49:4a:b5:11:
ed:17:60:5b:ae:63:0a:3c:e7:f6:a8:c1:3b:70:41:f9:8a:bf:
f1:6e:7e:9b:e4:7c:75:35:da:96:0a:63:db:d5:36:92:b8:aa:
09:a3:dd:4a:22:aa:01:76:74:4b:cf:ac:40:a4:7b:e6:90:45:
87:7a:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:58 2025 by rpki-client