Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18527876C19E11EFA0911C41762E951A.roa
File: 18527876C19E11EFA0911C41762E951A.roa (raw, json)
Hash identifier: mIeZGHZcucZXCXAieM7dbuPz/7vPnmLRJHLRIUd9C5o=
Subject key identifier: 7E:E4:42:F0:13:3A:AC:54:94:DB:47:6C:5C:B6:A9:08:3E:F6:7A:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01208F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18527876C19E11EFA0911C41762E951A.roa
Signing time: Tue 24 Dec 2024 02:23:43 +0000
ROA not before: Tue 24 Dec 2024 02:23:39 +0000
ROA not after: Wed 10 Dec 2025 02:23:39 +0000
asID: 984
IP address blocks: 154.90.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73871 (0x1208f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:23:39 2024 GMT
Not After : Dec 10 02:23:39 2025 GMT
Subject: CN=676a1b2f-a596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:83:7c:1c:67:bf:de:0d:a9:5e:b3:65:4b:
de:69:41:ce:42:f0:56:68:de:ec:d5:40:ea:89:9a:
c6:0f:bf:8e:c8:0b:32:af:8b:a3:14:bd:13:b7:fd:
66:91:f4:d0:ef:8e:24:06:13:50:6a:bc:f0:84:62:
d6:60:56:1e:fc:92:1c:29:0a:98:cc:1e:2a:44:63:
85:71:91:b9:9e:35:57:37:1c:7d:85:44:56:ee:6e:
6a:64:be:94:b5:73:59:b6:32:0a:50:24:a4:91:2b:
63:ea:c5:17:6d:b3:76:c1:5e:88:16:7b:df:cd:03:
39:ba:f7:87:74:0d:91:45:32:62:54:5e:74:fb:07:
60:57:5f:7e:35:20:38:a4:db:8c:00:11:57:8d:0e:
ad:98:63:c0:60:b8:63:19:e7:a5:45:d5:e7:ef:70:
19:75:71:30:0f:78:62:60:d9:28:22:43:a1:46:59:
3e:9d:7a:5b:3c:ad:ee:74:59:1a:37:32:31:25:73:
93:73:72:0a:10:2c:81:87:cf:73:df:bd:ba:7c:fe:
96:25:f4:8f:a0:ac:de:98:c6:db:ff:07:80:f3:cc:
1e:b8:5b:0c:ce:7e:20:84:46:c1:a3:08:cb:df:bf:
2f:f2:60:d3:cf:d3:58:d5:8b:04:66:d6:da:2b:35:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:42:F0:13:3A:AC:54:94:DB:47:6C:5C:B6:A9:08:3E:F6:7A:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18527876C19E11EFA0911C41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e8:d6:57:e4:9d:e6:54:47:cf:b2:87:20:76:3c:6d:cb:15:
e9:58:56:4d:ee:d2:59:52:98:79:2f:b9:e3:a9:42:25:60:69:
ab:1a:a7:a6:6e:f2:04:0c:6d:92:ce:15:52:57:50:12:1d:b1:
21:0c:4e:6f:16:3f:e4:35:c3:54:b5:ac:b6:e1:f4:b4:56:86:
cc:1e:a7:c2:db:06:2f:2b:99:13:26:53:21:f1:64:14:79:ad:
b7:05:20:5d:2e:fa:5c:f1:fd:09:e0:84:3a:d8:31:2b:6a:77:
7f:38:bd:c5:c3:78:9b:f9:af:98:8a:b9:e9:fb:0c:cd:28:b0:
77:b6:74:91:97:67:61:6a:5a:c7:05:28:cd:50:5d:6e:52:ec:
d3:4a:c8:19:01:4d:8c:05:92:40:5b:0b:41:00:0c:f5:46:a7:
a9:ab:5f:d4:f4:7f:7b:69:be:32:77:02:03:dc:0e:b5:15:3b:
28:80:94:81:12:e7:73:2b:46:10:e8:63:54:cc:5d:aa:f3:29:
ae:a8:fb:04:5f:1a:2b:27:17:66:cb:52:59:10:55:6a:11:bd:
0c:9f:9c:2e:88:32:53:13:31:cc:ef:1b:de:6d:95:8d:6f:fd:
a1:5c:58:a5:fd:3d:0a:a8:62:6e:40:37:48:ea:88:7f:d7:fa:
d8:f0:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:13 2025 by rpki-client