Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1487042ED2E611EFBA268999762E951A.roa
File: 1487042ED2E611EFBA268999762E951A.roa (raw, json)
Hash identifier: Bb3Bvb/izDtGCzGKBOsCMZc5IxIe5mczhv6QJBk3K9A=
Subject key identifier: A6:29:D4:F4:4F:0B:B9:F5:DE:15:6A:66:00:06:FC:EA:28:60:EE:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1487042ED2E611EFBA268999762E951A.roa
Signing time: Wed 15 Jan 2025 02:11:50 +0000
ROA not before: Wed 15 Jan 2025 02:11:46 +0000
ROA not after: Mon 03 Jan 2028 02:11:46 +0000
asID: 17561
IP address blocks: 154.222.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80786 (0x13b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:11:46 2025 GMT
Not After : Jan 3 02:11:46 2028 GMT
Subject: CN=67871966-4887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:61:ef:bc:53:dc:12:2a:3c:aa:d5:8c:d6:
a7:cd:36:be:ae:00:32:3d:37:90:17:0f:7d:5a:f5:
11:d0:51:99:55:84:8a:7c:f5:e0:c1:c4:40:e0:54:
76:0d:ad:27:ac:07:81:18:ec:6e:ec:9a:d7:98:1d:
53:06:a7:67:2b:19:7a:a6:7a:aa:ce:ac:5b:4a:1f:
df:38:5a:66:20:95:c1:56:ea:5a:1d:8c:a8:0b:d9:
0f:53:4f:98:de:24:9c:90:6c:74:3f:5b:cf:14:39:
66:29:6e:80:50:44:74:1c:c4:57:74:24:17:24:75:
70:ce:65:e3:8c:91:22:4b:0e:2f:18:80:66:50:a2:
89:c5:2e:6a:ca:7c:42:28:b5:0c:b8:25:1a:ba:02:
50:b0:86:1f:21:fb:2e:72:5a:54:f8:84:ea:8a:d2:
35:09:a5:f1:f6:40:18:4c:43:54:75:b5:06:83:87:
4e:90:21:fb:ac:fa:b5:23:4d:5f:4c:ac:8e:ab:1c:
b9:b5:a4:bf:59:cf:5c:8c:c5:f9:56:08:e4:b8:0e:
c4:90:ce:86:58:95:ab:46:6c:61:b3:48:40:62:11:
70:4e:dd:a6:ad:70:f3:bf:96:a0:d4:62:19:2a:93:
20:f0:83:94:30:b8:4e:00:e8:52:a2:a4:f9:6b:85:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:D4:F4:4F:0B:B9:F5:DE:15:6A:66:00:06:FC:EA:28:60:EE:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1487042ED2E611EFBA268999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e6:e8:dd:1e:65:2a:b4:a1:93:9d:8c:2b:3e:8d:1c:f7:d6:
7b:80:78:54:f8:b7:49:22:90:a7:ee:d3:f3:db:d7:0a:67:71:
98:b9:e5:8a:6d:0a:b0:11:fa:42:88:11:61:d9:0f:aa:ac:96:
c3:63:bc:5b:46:0a:be:cd:a6:fe:8b:73:81:6f:42:04:fc:f8:
fa:ca:9e:96:41:ce:2a:2a:22:86:ce:99:be:f1:51:ed:35:ce:
7d:64:e2:f3:ab:cb:28:a2:7d:85:c8:33:2d:5a:bf:29:51:a0:
e1:46:c4:58:21:e8:ef:ef:20:d9:9b:86:be:c6:b8:20:a9:7f:
f9:2e:45:5f:dc:35:b1:cd:06:52:85:d1:f8:30:55:05:c3:7f:
b1:53:98:5d:e1:c9:04:e4:20:43:ce:c2:88:9c:2d:dd:c1:d2:
6e:89:7e:67:d4:71:1c:46:11:ea:43:10:a1:22:9f:d4:e0:70:
04:9b:3a:70:e8:00:0c:19:7a:88:5a:11:94:d9:2e:8b:de:02:
d4:53:49:8b:74:ba:49:03:b6:41:9d:ce:5c:8f:00:09:08:a6:
d2:b4:d8:67:52:da:0c:5d:01:0f:7d:b6:80:53:22:3a:08:78:
b2:77:e5:6c:1a:d0:02:24:fb:a4:c0:ca:c9:cf:72:59:62:41:
85:45:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:47:44 2025 by rpki-client