Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AA6ADAC1B311EFAD92544E762E951A.roa
File: 22AA6ADAC1B311EFAD92544E762E951A.roa (raw, json)
Hash identifier: wMBAPhDnMcHdwopmfhENzxM2W29R/c49thYZ42E1Zco=
Subject key identifier: 3B:8A:6A:6E:50:26:08:78:DA:36:91:57:AA:BE:28:6B:0A:61:74:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01218D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AA6ADAC1B311EFAD92544E762E951A.roa
Signing time: Tue 24 Dec 2024 04:54:20 +0000
ROA not before: Tue 24 Dec 2024 04:54:16 +0000
ROA not after: Wed 10 Dec 2025 04:54:16 +0000
asID: 984
IP address blocks: 154.193.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74125 (0x1218d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:54:16 2024 GMT
Not After : Dec 10 04:54:16 2025 GMT
Subject: CN=676a3e7c-42ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:0a:74:84:2f:93:27:83:97:aa:55:40:32:
d0:6f:bd:bd:e9:d3:41:e8:1d:08:7d:44:09:83:46:
f5:d3:a2:1c:cf:92:51:fb:9f:43:ff:30:22:c9:10:
db:75:9e:fa:8b:51:65:75:6f:af:fc:06:7c:da:89:
aa:ba:04:54:77:dd:be:68:d1:db:72:c1:81:d7:a6:
ea:96:f8:24:67:30:06:c4:c3:a9:a6:55:6f:0e:5f:
2c:a8:e0:67:97:f2:61:53:0b:3f:e9:6a:24:65:a7:
88:55:1e:50:9a:98:c4:02:54:ea:c4:f8:1a:b1:ea:
31:16:6c:58:d0:fa:8b:43:0a:c3:7d:0d:04:75:d4:
fb:c9:21:2e:55:6a:f4:f1:1c:e7:fb:05:67:21:66:
91:7d:b7:c9:b8:37:6d:27:a2:e4:85:26:c0:a8:9e:
8f:52:f9:a9:bc:91:35:d5:fa:3e:30:a0:6f:9a:95:
23:b9:ab:df:d8:72:61:0d:c9:d5:16:95:18:9b:5f:
62:5c:e3:f3:40:9e:b4:c4:0a:e4:dd:a7:2d:fe:43:
de:4f:8a:65:dc:d5:f9:ff:72:0a:d6:6a:6a:82:7e:
79:d2:42:ed:24:6a:39:cb:aa:8a:ef:2b:b5:0e:ef:
07:29:8c:d4:f2:89:37:9a:e7:22:55:af:2f:16:b1:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:6A:6E:50:26:08:78:DA:36:91:57:AA:BE:28:6B:0A:61:74:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22AA6ADAC1B311EFAD92544E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/24
Signature Algorithm: sha256WithRSAEncryption
32:40:32:61:68:07:5c:e8:49:8a:50:6f:56:ef:6a:d8:9d:2f:
22:93:5f:a5:10:db:a7:07:63:7f:db:ad:e3:3b:e0:20:40:99:
d8:4a:62:8a:99:91:01:62:e3:4d:79:24:e5:52:b0:a5:1c:4a:
b1:a7:c2:33:ed:ee:ae:1b:34:b0:bf:a6:36:1b:e2:2c:60:c9:
90:1b:a5:dd:2b:f0:4e:b0:5d:d9:e2:d9:c8:53:57:63:18:58:
97:8b:fb:9a:26:c2:66:a7:22:70:eb:ac:d9:6f:a6:f5:56:9e:
da:37:bc:cf:04:96:a2:6c:73:7d:5a:65:83:fd:fa:93:6e:f9:
d4:17:66:4f:df:32:4e:35:60:38:9f:3a:3f:a9:20:c0:00:cf:
40:0e:a1:ac:55:a1:e8:f2:36:55:d0:52:43:c0:66:1c:3d:e2:
39:c3:af:7e:54:03:7e:ae:f5:c5:d6:66:1a:58:cb:0b:90:84:
b6:54:7a:3b:af:65:9d:36:bd:cd:bd:b6:6a:6e:9c:6f:56:f6:
e7:27:46:73:72:43:31:fb:91:f3:93:db:cc:34:25:44:80:d8:
50:23:e1:21:ce:46:dc:9f:c3:b8:81:2b:2c:9d:7d:00:94:83:
62:0c:a2:18:67:dc:ee:76:83:a2:46:6f:09:b2:8c:49:19:f8:
50:b4:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client