Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A2D4938C53F11EF917F515F762E951A.roa
File: 1A2D4938C53F11EF917F515F762E951A.roa (raw, json)
Hash identifier: l8XKB07nc2IWF79vfgtyfNABlrXfs11zp9O0+IRttx4=
Subject key identifier: A4:64:38:19:26:8F:84:31:B8:89:84:5C:8A:59:C9:81:66:35:4A:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A2D4938C53F11EF917F515F762E951A.roa
Signing time: Sat 28 Dec 2024 17:13:48 +0000
ROA not before: Sat 28 Dec 2024 17:13:45 +0000
ROA not after: Sun 12 Dec 2027 17:13:45 +0000
asID: 17561
IP address blocks: 154.206.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76907 (0x12c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:13:45 2024 GMT
Not After : Dec 12 17:13:45 2027 GMT
Subject: CN=677031cc-89d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:68:f7:1e:a0:cb:39:82:7a:80:95:4b:f2:
8d:e3:f4:33:c5:c1:fd:8a:09:06:a3:3f:ba:da:ad:
8d:10:ec:1b:20:e3:77:b6:3b:30:96:39:09:ec:6b:
08:15:ab:82:69:8d:d9:ca:43:d4:e9:6a:77:b5:6f:
b1:b0:76:4b:0b:43:42:45:0b:f0:11:50:ce:d7:a6:
3b:6a:46:92:e2:cc:de:fd:ad:38:51:b1:b7:76:3b:
94:af:b5:6c:e1:9a:97:9f:69:ca:78:81:9b:65:b6:
ab:17:d6:56:d5:8e:14:18:8d:23:4e:1b:bc:c5:d8:
af:f8:32:6f:0b:be:cf:45:04:60:0f:be:09:05:4a:
fd:a9:4b:5f:a4:61:e1:9f:b1:0f:c0:c5:64:53:4a:
ba:a3:02:17:1c:f1:8a:58:95:ff:02:e6:69:16:a2:
dd:a5:ff:db:77:6f:dc:57:b6:db:a2:90:6e:14:0d:
63:d8:e5:d1:ed:00:d8:53:7c:a4:89:12:3d:1a:db:
24:1f:13:b2:31:a6:77:44:0a:8f:63:de:e7:0b:65:
26:6a:8f:40:89:84:94:59:6a:d4:55:9c:83:e1:6f:
45:be:69:d6:cf:aa:ed:ad:48:c5:5f:a3:34:6a:13:
5e:b8:be:70:73:ef:61:65:6b:47:7d:88:91:0c:f1:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:38:19:26:8F:84:31:B8:89:84:5C:8A:59:C9:81:66:35:4A:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A2D4938C53F11EF917F515F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d0:3d:b3:62:59:e9:96:ee:f7:71:b4:41:6c:e7:ab:3c:5a:
ca:1e:7c:67:cf:39:00:e9:32:46:13:58:b6:97:49:3e:c0:49:
e4:bb:d3:1b:bc:0b:d2:dd:cf:e7:75:e3:4a:73:8d:f2:44:5f:
e8:60:e6:4e:45:f0:bb:4c:40:45:b3:34:e2:85:0d:d3:e8:02:
74:29:2d:08:bc:bc:b0:b9:36:5a:3b:35:1c:3b:85:23:92:10:
05:04:69:31:df:f7:b0:87:9c:e9:9a:17:20:b3:37:de:58:47:
df:d1:54:73:4d:0e:2a:c4:f1:eb:4b:2b:40:99:26:b9:41:3d:
97:d4:12:5e:92:62:ca:c4:1b:26:51:55:b4:ff:1e:9e:ce:ad:
d6:da:20:c7:1b:1f:c2:7a:2e:3d:af:46:34:72:48:79:b8:f0:
df:ad:23:60:e4:38:0d:4e:62:15:2f:db:ec:68:3d:2f:1a:8c:
b3:79:14:05:ef:fd:08:53:aa:c8:da:ef:bc:bf:0f:4c:b9:47:
e1:1f:98:23:87:e3:42:97:b8:fe:9e:dc:02:45:93:9f:6d:77:
72:c6:bb:3f:eb:da:cd:9a:ee:8d:19:43:90:1f:11:d9:07:6b:
99:1f:37:94:70:d5:a7:bc:f7:dc:36:ee:e9:4f:c0:30:3c:32:
79:77:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client