Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D6FD5F2C1B111EFA871E142762E951A.roa
File: 1D6FD5F2C1B111EFA871E142762E951A.roa (raw, json)
Hash identifier: MxSaqvatL/L7T3dgDVISeJbuVjgJUMEIbAbZHzig0BM=
Subject key identifier: 95:58:4B:87:C4:1C:B8:E9:30:A0:65:30:78:26:AF:44:F9:22:8F:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012175
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D6FD5F2C1B111EFA871E142762E951A.roa
Signing time: Tue 24 Dec 2024 04:39:52 +0000
ROA not before: Tue 24 Dec 2024 04:39:48 +0000
ROA not after: Wed 10 Dec 2025 04:39:48 +0000
asID: 984
IP address blocks: 154.193.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74101 (0x12175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:39:48 2024 GMT
Not After : Dec 10 04:39:48 2025 GMT
Subject: CN=676a3b18-60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:36:fd:54:b9:4a:1f:b8:dd:71:50:4a:9c:
85:80:68:18:d5:77:77:46:c5:5b:a1:3c:df:7a:b6:
21:a1:9c:10:c6:ee:f9:ac:76:f1:af:ae:1f:bc:fe:
fa:23:df:2b:77:12:df:b8:d3:30:77:2c:a5:57:5c:
67:17:bf:52:c3:99:98:48:c0:d2:a8:6c:91:12:98:
95:87:2d:a6:f2:a6:d8:99:9a:77:a7:c9:ee:1c:e5:
16:d5:3a:12:97:c5:56:01:66:06:55:72:b8:06:3f:
26:60:96:3d:dd:4f:f6:2a:19:d9:d0:1c:52:6a:41:
6d:86:92:cc:9e:aa:e2:34:a1:76:ce:e0:15:96:e6:
72:38:4e:75:ad:fc:ef:38:6c:5f:c3:9d:53:df:4a:
5a:75:9f:44:bc:52:57:46:81:f8:71:b9:f9:9a:a8:
bb:8c:7a:7a:c1:71:12:5b:8d:83:e5:29:fd:4d:cc:
11:d8:00:03:39:b4:be:13:77:f9:4f:1f:03:f9:f6:
a5:e9:7a:11:10:25:85:34:3d:e7:14:a0:a1:bb:93:
0f:f2:2f:45:69:d7:7c:04:9a:0a:6d:5a:59:77:0c:
5e:af:67:30:6c:10:cd:b8:8a:e1:9c:ad:42:a3:ca:
c5:8f:fc:da:13:e4:d7:29:1f:12:e4:63:2f:3a:1a:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:4B:87:C4:1C:B8:E9:30:A0:65:30:78:26:AF:44:F9:22:8F:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D6FD5F2C1B111EFA871E142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.100.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:3f:56:76:fa:9e:29:f9:65:0c:e6:eb:77:e1:f9:f4:0c:
a0:66:3e:48:ed:0c:75:1b:a3:6f:53:03:1b:9f:7f:e3:27:a7:
28:cd:50:fe:ec:09:e2:13:12:16:8f:1b:24:c5:f4:e6:3d:e2:
41:f1:7e:6c:1b:a4:f8:50:ea:5d:23:2d:4a:1f:13:fc:9a:6c:
b9:ef:b5:21:b1:22:09:5f:fa:e6:9a:5d:6b:4d:24:cb:39:37:
0f:07:6c:bc:45:e3:f0:b5:d4:e6:dc:b4:91:2d:53:88:4b:04:
48:f3:79:b5:51:dd:88:fa:99:60:be:d4:1b:78:ab:25:52:8f:
ef:06:02:eb:cc:35:97:89:fe:e6:a5:c1:37:51:a2:e2:59:47:
36:67:cc:38:ba:c6:0d:97:5a:32:c3:e8:40:ca:d0:36:48:49:
8c:b6:ba:17:4f:e6:12:74:1f:ab:02:c1:5c:14:8e:ff:4e:be:
30:12:c8:a3:8b:61:ab:5a:c4:0d:92:fe:7d:60:b0:b2:9a:ee:
8b:5c:6e:d2:7b:c6:82:c0:1d:f1:f6:4b:13:af:a4:9c:a5:9a:
4c:4e:01:b2:f1:94:1c:e5:63:83:79:7e:6c:83:16:ee:5a:33:
dc:45:fe:b2:9f:84:98:af:41:85:f9:b4:fa:4c:9a:0a:db:26:
26:87:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:10:23 2025 by rpki-client