Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A31EFB0C1CF11EF8A96417C762E951A.roa
File: 1A31EFB0C1CF11EF8A96417C762E951A.roa (raw, json)
Hash identifier: /NhLowBR0a0JQ8f18THLev7ZAuU8QS7Yor+8JORlOiE=
Subject key identifier: 23:3B:4B:71:AF:59:B5:D2:69:F4:00:A6:61:B6:86:C7:AB:39:05:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01228B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A31EFB0C1CF11EF8A96417C762E951A.roa
Signing time: Tue 24 Dec 2024 08:14:31 +0000
ROA not before: Tue 24 Dec 2024 08:14:28 +0000
ROA not after: Wed 10 Dec 2025 08:14:28 +0000
asID: 984
IP address blocks: 154.193.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74379 (0x1228b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:14:28 2024 GMT
Not After : Dec 10 08:14:28 2025 GMT
Subject: CN=676a6d67-7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:98:a5:c2:72:e5:e5:14:59:b3:cd:6e:fe:
ee:5c:f2:75:36:c3:87:c5:48:92:d5:ef:3e:9f:9d:
89:fb:db:6a:67:da:2c:19:79:7a:2e:bc:4a:25:08:
4b:0d:4b:b8:fe:ae:1b:e1:4f:f3:e9:54:db:5a:eb:
0d:46:27:50:e4:75:c0:cc:f8:4f:7b:c4:80:dc:aa:
45:d4:70:37:bb:26:17:63:e7:9e:70:12:dc:17:55:
25:76:a4:db:71:28:93:37:10:83:99:94:eb:4f:ba:
2b:de:81:96:ac:4c:58:d9:55:43:b6:a6:fe:91:12:
b5:02:28:87:0a:d0:32:64:d9:0c:ca:15:30:cb:50:
07:ef:d3:65:c1:56:76:29:a6:35:86:1b:80:d1:df:
4e:ab:d1:5f:5f:76:0b:06:45:31:b6:79:07:46:1a:
74:3f:f0:b3:1e:e0:fb:ce:59:40:50:4e:0c:d3:80:
6f:ac:f3:bc:68:03:b4:e7:e8:f1:08:1f:2f:ec:32:
ec:92:b4:62:0a:09:5e:66:dc:59:e9:96:11:b0:d9:
cf:ae:56:4a:41:52:1a:9e:14:80:1d:0f:64:fd:d0:
42:03:d5:8a:bf:b2:fe:21:99:3e:8a:54:7c:ac:b2:
4e:f8:0b:6a:ef:9d:1b:e6:e3:c1:9c:7b:fc:8e:f9:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:4B:71:AF:59:B5:D2:69:F4:00:A6:61:B6:86:C7:AB:39:05:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A31EFB0C1CF11EF8A96417C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9e:b6:d9:01:db:8e:95:75:0f:27:07:8f:2b:b6:50:ad:17:
6a:25:aa:1d:80:b1:ad:e0:e7:54:f2:19:5e:11:f3:86:16:7c:
99:68:18:3b:51:22:e5:1f:6e:3b:46:6e:10:71:c2:35:ad:6d:
67:78:f9:e3:5a:21:0e:2c:88:06:5b:2e:85:f0:67:53:d2:a6:
c9:83:06:45:f6:c7:b7:52:1b:2c:2d:d1:b8:90:43:20:25:10:
a5:4f:5f:b8:69:25:b3:31:be:79:22:6c:f1:71:0f:eb:bc:8a:
b4:49:a9:15:50:9d:0b:76:b4:f3:30:b8:cf:e2:8d:e7:1b:58:
3c:ba:c3:fc:13:c4:14:68:a4:39:6b:0b:b1:64:c4:4f:76:d6:
2e:2c:b7:f3:fe:02:15:da:8e:4f:73:6f:94:40:29:27:71:8d:
c2:ae:c6:4e:51:32:ba:18:c6:8c:d1:f8:af:d4:01:9a:85:9e:
38:f7:0e:84:35:4b:66:5f:f8:e9:bc:32:1f:88:3f:6f:6e:72:
ac:2d:f5:12:8d:87:d8:75:36:81:e4:d4:de:6e:91:36:73:d0:
01:b2:42:b6:23:2b:6c:4a:ca:4b:1e:44:f5:bd:95:02:c7:81:
83:c7:05:ea:f0:e2:6f:4e:60:b3:c7:85:25:d1:eb:6a:30:7a:
86:71:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:03 2025 by rpki-client