Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC05AACC42A11EF8CE1498B762E951A.roa
File: 1CC05AACC42A11EF8CE1498B762E951A.roa (raw, json)
Hash identifier: yQZFRL6RzaWvGg8mUmB5gw8eu/xbfP0woydIV5onyQw=
Subject key identifier: A0:74:2C:5C:0B:10:D1:5F:65:FC:A8:1D:05:46:D0:89:9C:67:25:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC05AACC42A11EF8CE1498B762E951A.roa
Signing time: Fri 27 Dec 2024 08:11:02 +0000
ROA not before: Fri 27 Dec 2024 08:10:59 +0000
ROA not after: Sun 12 Dec 2027 08:10:59 +0000
asID: 17561
IP address blocks: 154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76311 (0x12a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:10:59 2024 GMT
Not After : Dec 12 08:10:59 2027 GMT
Subject: CN=676e6116-d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:5b:8f:79:13:c1:0a:fd:08:91:ea:c2:dc:
e9:26:01:18:00:19:34:ce:cc:26:84:95:00:84:e4:
30:1b:40:97:30:26:ec:fe:b7:d8:a4:e2:af:19:fb:
d5:1d:f2:0c:17:36:e8:b3:a7:cc:75:a4:ff:6f:16:
fb:7a:4e:b6:af:5a:66:94:13:03:ff:38:1e:f1:ef:
7f:74:99:6e:a8:f9:8e:d0:43:eb:a1:44:7e:62:ee:
30:78:b1:05:ee:d7:9c:fc:01:34:54:6b:cc:8b:2b:
ac:72:f1:a6:22:dc:41:94:d5:5b:ee:bf:c0:53:d6:
dd:db:ff:21:a6:3a:38:b0:a9:30:60:8f:19:6b:d5:
3b:40:ec:0d:e6:5a:2c:2a:d8:bb:c9:6a:df:1c:f4:
72:49:d1:d9:b1:89:01:62:4d:f1:d1:25:9c:70:89:
bb:f6:33:ac:21:6b:44:64:e3:08:1c:74:fa:03:d9:
84:d3:aa:83:18:47:65:00:6d:10:17:20:f9:51:76:
f4:04:82:17:3a:87:46:a4:38:a8:6f:81:ea:5c:1d:
8c:27:fa:75:51:e9:88:d9:d9:19:fb:15:cd:60:5e:
3c:36:71:9c:eb:08:05:fd:c5:c7:30:60:cc:23:85:
75:ec:11:bc:34:08:aa:a8:6a:99:a5:a4:e6:20:2f:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:2C:5C:0B:10:D1:5F:65:FC:A8:1D:05:46:D0:89:9C:67:25:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC05AACC42A11EF8CE1498B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b9:df:23:5b:72:e5:a2:42:be:e4:a3:a6:94:7e:9b:e4:a2:
a7:3e:fb:b5:19:68:ac:05:2b:38:94:b5:c6:e2:11:9d:6b:5e:
13:ec:8c:81:a8:7f:df:bd:ee:5b:ff:4d:aa:7d:55:36:3c:a5:
2d:b2:36:26:42:33:3e:06:e4:c0:7e:52:25:f6:e9:34:12:63:
c0:b3:50:04:d5:61:51:cc:0c:0b:26:56:07:64:e5:13:6c:c0:
0c:87:2a:3d:49:c7:02:af:af:cc:9f:9a:26:8e:a0:9e:f3:df:
23:03:18:92:b2:d5:35:be:1f:53:ff:d3:6b:41:d8:2b:09:b6:
49:47:62:cf:b2:5a:e4:40:00:c5:7a:d7:64:f3:09:6c:65:ef:
ae:8e:97:ad:b7:e3:14:50:de:2f:16:5e:1e:8a:b6:39:fd:a6:
84:de:a2:6d:8c:54:5d:89:50:af:fb:22:c6:2a:b7:85:73:5b:
e2:03:47:50:be:7a:22:64:cf:b0:15:c9:25:b5:bb:79:d2:b1:
04:26:a7:25:37:ac:23:b8:50:ce:dd:81:22:a3:3f:2a:8c:22:
00:36:5b:8b:0a:73:a8:50:ec:f5:7d:24:51:be:5c:94:96:3a:
ac:27:22:0d:bf:bd:1d:79:ad:90:7e:ae:ef:d9:30:65:7d:90:
42:49:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:03 2025 by rpki-client