Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2B39CC38011EFBCB84D49762E951A.roa
File: 12C2B39CC38011EFBCB84D49762E951A.roa (raw, json)
Hash identifier: C43C8ftYMo6/hbtiXDGm2ejpvr2dhL01DvnAuhEjX/8=
Subject key identifier: 9E:DE:E7:28:5F:8A:13:F3:1A:0A:E7:CB:56:3A:DF:11:39:6F:3B:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012754
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2B39CC38011EFBCB84D49762E951A.roa
Signing time: Thu 26 Dec 2024 11:53:51 +0000
ROA not before: Thu 26 Dec 2024 11:53:47 +0000
ROA not after: Fri 12 Dec 2025 11:53:47 +0000
asID: 984
IP address blocks: 154.94.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75604 (0x12754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:53:47 2024 GMT
Not After : Dec 12 11:53:47 2025 GMT
Subject: CN=676d43cf-2f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:e8:e5:5f:53:8a:78:6b:4d:79:c8:e8:12:
20:23:0c:58:4b:53:0d:4f:56:14:79:43:04:e6:9d:
93:89:7f:4b:eb:83:43:bf:0a:99:7b:50:85:ce:3f:
1f:1f:f6:5f:48:74:5e:1c:f0:34:9d:fb:d1:af:5d:
8e:13:a4:f3:df:a7:3a:4e:62:f5:cc:4a:18:1d:d4:
99:30:d8:4d:6c:d2:ea:0e:7e:0a:29:db:11:87:89:
5e:62:e5:40:97:fa:63:31:13:fd:6c:c0:00:8a:4a:
ca:e9:9f:49:d0:37:86:bd:54:bb:56:20:1e:3e:ef:
f3:5e:c5:ef:53:3b:48:ce:e8:8f:ce:b1:26:ac:a2:
19:17:b8:a3:7e:99:fd:82:24:c5:c6:47:d8:09:b2:
20:c9:77:20:5d:79:53:1a:83:fa:9f:52:5a:3e:23:
23:14:65:0b:f5:e3:1f:e6:0c:8f:18:c3:84:80:50:
1d:16:8b:16:ee:24:c6:70:f7:1c:2e:75:af:ff:3c:
56:0d:97:dc:ec:94:70:89:78:87:06:d1:de:67:d6:
4e:e5:2e:fe:34:1e:39:f1:b1:b7:72:38:e2:a6:eb:
ab:b5:f0:29:b1:b6:9a:70:6d:06:b0:6d:e5:4d:9a:
36:be:1f:a0:75:aa:54:ca:60:5d:81:b4:9b:2b:24:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:E7:28:5F:8A:13:F3:1A:0A:E7:CB:56:3A:DF:11:39:6F:3B:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C2B39CC38011EFBCB84D49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ca:57:9d:02:77:6c:12:76:b1:55:81:81:85:38:a7:41:52:
af:9d:22:d2:25:dc:61:a5:9c:71:00:4e:54:3e:d7:96:6c:f1:
63:ec:53:36:d4:04:42:98:44:37:ed:2a:ca:81:9f:7b:c0:f8:
c5:ac:73:59:04:56:61:68:de:96:d0:4b:f5:32:a2:bc:ed:69:
cc:8f:56:17:ff:1f:f8:dc:db:a1:05:8b:6d:d1:b1:ea:ed:74:
d4:2d:53:57:d1:b4:6e:28:51:08:e3:30:b6:23:09:92:10:dd:
36:22:a2:3a:b4:26:59:0d:e7:27:ec:5e:5e:2a:21:2a:b8:ea:
2d:e4:aa:7d:e4:7b:b0:80:71:26:cd:67:fd:8c:b1:6c:53:a8:
58:c9:11:a0:ef:06:13:d4:6a:b5:77:70:fc:f9:48:e3:ff:d0:
89:b2:a8:0a:01:f6:0b:19:d3:71:18:67:02:0c:0c:32:20:a2:
e5:ca:37:51:0f:d0:2a:44:2c:5c:1b:70:77:5b:a5:50:8f:10:
03:32:9f:6b:27:96:e8:21:e6:20:93:49:d5:12:15:62:a6:99:
21:ed:b3:09:f9:b7:93:30:cc:57:cb:db:6b:c9:81:33:6e:76:
8f:eb:9b:0d:3a:fa:50:e0:88:55:2b:73:62:70:86:c5:6b:d6:
e1:cc:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:57 2025 by rpki-client