Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7BBBEEC1D911EFA36B65BB762E951A.roa
File: 1B7BBBEEC1D911EFA36B65BB762E951A.roa (raw, json)
Hash identifier: Y4JITNqddvcFPHKYNAlyph0vv97PkG/PvofJfIZT9qI=
Subject key identifier: 74:1F:9A:1C:67:46:3A:8C:E4:EF:6A:73:2A:F1:88:03:0E:C6:CB:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7BBBEEC1D911EFA36B65BB762E951A.roa
Signing time: Tue 24 Dec 2024 09:26:09 +0000
ROA not before: Tue 24 Dec 2024 09:26:05 +0000
ROA not after: Wed 10 Dec 2025 09:26:05 +0000
asID: 984
IP address blocks: 154.194.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74475 (0x122eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:26:05 2024 GMT
Not After : Dec 10 09:26:05 2025 GMT
Subject: CN=676a7e30-742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:26:b8:85:12:74:32:8a:e7:c7:f9:bd:c1:91:
72:49:c5:50:95:dd:d2:69:43:a3:5b:cb:94:30:4c:
b3:43:51:15:83:3f:a5:2e:25:c1:79:31:27:72:11:
76:ee:6a:17:b3:42:34:ad:b8:c6:09:e2:44:87:d6:
f4:d4:05:90:d5:1d:9b:86:02:d1:1f:a4:7e:fd:a4:
61:51:3d:8f:ba:f6:20:08:8b:cc:13:a0:57:92:34:
90:89:2c:9b:fe:35:f7:14:c3:3e:14:f5:28:a2:53:
df:aa:67:6c:5f:f2:2e:df:3d:b4:ed:77:b0:87:c4:
cb:66:8c:87:00:ae:66:9b:fe:ff:3a:6d:92:78:b9:
02:78:b6:37:86:d8:5b:31:98:09:1d:c5:40:f5:d2:
c8:86:92:99:53:ca:97:53:a6:92:fb:4f:06:c0:5e:
67:20:8a:eb:de:f7:c7:75:dc:57:ac:0f:0d:49:52:
02:d9:c6:dd:97:8f:8e:66:87:63:8c:4c:ee:5e:c5:
e3:cb:e8:09:d8:8d:9a:43:66:82:60:32:37:fd:ab:
91:e0:44:ae:5f:34:67:30:f7:73:ef:21:13:5a:9c:
2f:7a:9c:41:2c:bd:d3:fa:eb:eb:aa:d6:af:fd:1e:
a9:7c:52:b4:63:d8:8b:9d:d3:1b:4e:69:94:36:cf:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:9A:1C:67:46:3A:8C:E4:EF:6A:73:2A:F1:88:03:0E:C6:CB:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7BBBEEC1D911EFA36B65BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5e:cc:e4:0b:ee:31:d6:c2:a8:71:57:d4:4b:25:f6:08:54:
5a:8d:b9:5c:17:01:a7:6c:a1:4e:fe:08:49:48:f2:f3:2a:cc:
36:dd:13:f9:bf:6d:08:22:c3:8a:38:e4:f5:85:5e:0e:44:63:
bc:7e:f3:c4:f5:9d:f0:76:5c:3a:1d:97:38:f9:09:4e:54:8b:
1c:f4:7b:12:2a:a0:ec:a3:6c:af:62:66:a2:3e:26:43:d8:2c:
e0:07:1f:43:53:7f:ee:96:98:93:48:bf:1a:45:b0:eb:2b:d8:
85:d2:8d:db:cf:ba:84:09:4d:98:63:cb:aa:a6:9b:1e:c2:c3:
1a:26:ce:6d:d8:09:e1:47:d0:09:ea:04:75:21:ef:a2:42:bc:
98:36:5d:b2:9e:f3:43:b1:a5:4c:41:19:32:df:d2:bd:60:98:
2d:5a:ac:17:3b:62:56:f8:e1:eb:0a:d8:1a:c2:27:50:a0:5d:
e9:6e:3c:20:c3:77:6b:cf:59:f0:67:66:c9:02:80:43:d4:0f:
4c:81:f2:b7:09:ca:25:69:76:82:f7:be:cd:35:6b:c4:fa:58:
8b:d4:0d:b9:4a:b6:bc:c2:03:1e:5e:20:3e:17:fa:d2:46:42:
83:26:cf:b0:7e:4b:01:55:b7:0c:04:28:05:ea:d0:b0:5a:cd:
bc:11:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:30 2025 by rpki-client