Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21C8D4ACC60011EF94C597A6762E951A.roa
File: 21C8D4ACC60011EF94C597A6762E951A.roa (raw, json)
Hash identifier: Iwub12ueP4wl00QY9LxqVgm1Xm1+Kf6Cvy/uWfHu0+I=
Subject key identifier: DF:E8:AE:DC:D6:61:05:C2:F2:30:76:F3:ED:A6:B5:A0:43:1B:78:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21C8D4ACC60011EF94C597A6762E951A.roa
Signing time: Sun 29 Dec 2024 16:15:34 +0000
ROA not before: Sun 29 Dec 2024 16:15:30 +0000
ROA not after: Sun 12 Dec 2027 16:15:30 +0000
asID: 17561
IP address blocks: 154.217.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77398 (0x12e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:15:30 2024 GMT
Not After : Dec 12 16:15:30 2027 GMT
Subject: CN=677175a6-ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:ad:1c:10:46:9d:4f:46:55:87:28:49:72:
1a:51:0e:63:4f:5f:c8:e0:f5:08:26:dd:71:c5:98:
b0:0e:cd:62:d8:87:59:60:9c:71:40:82:4a:e8:6d:
97:1a:c0:e3:dc:15:34:ab:cd:05:0b:23:2b:22:fd:
aa:02:a6:6f:d0:52:eb:8d:21:b9:15:59:d8:71:ff:
6b:cc:59:60:e6:a2:52:d6:15:c4:60:77:5a:c6:64:
74:09:37:aa:00:5c:f6:ed:78:cb:2e:a7:a2:e5:27:
41:c4:a7:54:30:47:3a:49:e9:27:0a:df:7b:9c:a0:
f2:5c:a8:97:d6:fc:22:5c:4e:bf:7f:b6:bc:1a:03:
b6:5b:e1:ab:60:3e:eb:52:f8:1c:75:59:ce:3f:7b:
b8:8f:07:12:89:a1:bc:e0:4d:df:d2:67:35:f4:b9:
91:91:fe:e1:5b:a6:4c:ed:36:4e:e2:53:00:5a:09:
b8:a4:1d:5f:76:c0:b3:90:ce:be:ba:28:18:7d:f6:
3b:f1:fb:30:f7:3b:3c:22:7a:f2:f8:ce:3b:06:5e:
51:62:29:39:c9:e6:da:15:1a:f2:c3:e8:c5:66:25:
e5:7d:cf:c7:77:ae:ce:62:42:6a:7f:c6:56:ab:7a:
81:ae:73:1a:a8:4a:d6:d2:d1:f3:a6:14:66:72:cd:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:AE:DC:D6:61:05:C2:F2:30:76:F3:ED:A6:B5:A0:43:1B:78:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21C8D4ACC60011EF94C597A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:07:05:ba:5a:79:42:60:e9:28:46:1a:2c:34:c8:d3:a7:33:
e6:27:82:9c:a6:ed:de:88:18:c6:4a:01:47:21:9b:ed:77:d5:
19:75:6b:1d:cd:6b:35:6a:82:54:01:d2:06:7c:b5:49:54:83:
fc:d1:37:3d:59:fc:ef:40:c0:17:b4:6f:7f:2f:33:35:f1:e2:
73:94:a1:2e:5f:be:77:e5:ec:ee:67:b4:ff:5c:3e:42:c9:31:
fd:74:eb:1b:fe:72:a2:05:9b:6d:e2:9b:e0:d8:e7:de:df:e6:
9d:68:1f:91:d5:df:74:36:51:72:6a:9c:54:ba:bf:c8:4e:e6:
9c:66:4f:d9:1e:9c:24:02:20:25:ce:6c:15:6d:ee:30:4b:e9:
30:4a:b7:a6:a6:c8:bd:09:3e:b5:0a:3a:dd:09:0e:34:ed:fd:
fe:a6:ae:cd:15:9d:76:05:58:76:25:fd:30:dc:26:e3:bf:a1:
0d:a3:29:cf:e8:7e:d5:30:96:29:68:37:08:20:10:d4:2d:ab:
5f:46:91:ea:3d:fa:3a:59:b8:92:bf:5e:3d:6e:8d:c2:8c:4c:
d9:dd:37:26:53:c4:6d:7e:23:0c:4a:33:19:16:92:d4:3a:49:
33:2f:58:5c:b1:69:47:39:d7:7e:82:e1:10:3e:4d:ee:7b:f7:
eb:4c:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:41 2025 by rpki-client