Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1609797CC60B11EF9AC9B36A762E951A.roa
File: 1609797CC60B11EF9AC9B36A762E951A.roa (raw, json)
Hash identifier: RbEorv2ObDvd5jVysv5/CIIuazUwOnX5+crGYIKU7oM=
Subject key identifier: 6B:67:61:5C:A4:E2:25:D3:6A:3A:A6:DD:F7:7F:49:83:6F:CF:64:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1609797CC60B11EF9AC9B36A762E951A.roa
Signing time: Sun 29 Dec 2024 17:33:59 +0000
ROA not before: Sun 29 Dec 2024 17:33:55 +0000
ROA not after: Sun 12 Dec 2027 17:33:55 +0000
asID: 17561
IP address blocks: 154.217.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77492 (0x12eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:33:55 2024 GMT
Not After : Dec 12 17:33:55 2027 GMT
Subject: CN=67718807-7dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:8d:09:fc:7b:35:24:16:19:1b:3e:28:15:
62:b5:0a:50:dd:f0:75:6b:2f:49:2d:9a:75:11:2c:
63:03:89:7d:0b:e7:1a:d0:77:11:b6:34:60:1b:ca:
31:10:7e:67:01:5d:33:f2:84:ba:b7:3d:ea:19:ee:
aa:16:49:45:f7:32:4c:bc:00:36:0f:3f:61:47:db:
d5:13:c5:74:6d:9e:ef:c1:8c:9a:59:98:a8:b3:32:
53:ff:bd:03:68:3a:a0:ad:79:ba:45:cd:1e:b9:62:
8e:d8:19:0e:50:81:41:f3:11:50:d8:68:13:3a:d5:
94:01:80:a9:52:14:40:8a:d8:90:44:7a:ee:77:74:
d1:f2:a4:a6:52:b4:fe:6d:c2:43:d6:7d:e9:96:0f:
6a:30:89:23:1e:fd:3f:84:8a:ad:1d:da:26:5d:c2:
73:f2:3c:24:db:d4:8a:80:3c:24:c2:a7:d3:4b:cb:
4f:7f:b3:e8:dc:fb:15:a9:3e:f8:ad:f2:ba:84:fe:
cf:2a:9e:5d:08:f8:2a:bc:32:18:6e:2d:b1:ca:a2:
e8:68:26:97:a6:fb:a5:89:03:57:ff:da:43:15:c5:
c2:4c:24:c0:ad:9e:79:8c:bf:e4:7c:61:ec:53:9f:
86:dc:62:e7:c5:31:9e:8f:8e:da:d1:92:89:ab:d6:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:61:5C:A4:E2:25:D3:6A:3A:A6:DD:F7:7F:49:83:6F:CF:64:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1609797CC60B11EF9AC9B36A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ca:36:cc:39:42:1c:cf:10:c4:0c:81:86:c1:46:63:c2:fb:
60:53:6c:00:02:e7:2c:71:f3:e8:c6:ae:96:5b:40:f2:45:03:
16:a2:7a:ce:79:8b:d1:e5:06:cc:02:10:bc:e5:63:b8:ad:f5:
2b:03:69:17:2e:c4:0b:bd:76:f9:ca:15:4f:83:7a:69:fa:fa:
ef:7a:a1:2a:ad:8c:da:4a:42:6d:4f:48:4c:4d:d9:1b:89:b3:
58:2b:64:37:86:d1:bd:b7:ea:31:c1:98:61:30:b0:5b:c2:c9:
0c:34:94:1a:90:e5:16:49:47:92:23:c3:cb:76:ae:c8:6e:be:
f7:98:b4:82:9e:5b:72:b8:f0:8c:00:0e:f5:ac:b3:da:e8:4a:
f7:58:9f:35:5a:70:6b:14:75:c9:bf:9d:f0:18:ae:7d:2c:5b:
38:f9:43:2f:cc:30:c6:1e:4a:65:52:c7:c7:88:8b:84:5a:4d:
07:78:ee:81:17:5b:21:87:03:e5:0b:7d:99:b5:cc:e0:31:84:
0e:ed:40:04:f6:5e:5f:72:d2:4d:ef:29:6a:70:e3:57:0e:56:
08:8a:bb:c2:96:16:6f:b2:8a:4d:ee:7e:4d:b4:51:70:e0:04:
35:b6:d2:2d:22:71:80:ad:2d:6b:7c:df:bc:5c:36:29:35:40:
09:3c:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:16:05 2025 by rpki-client