Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242B5AF8C34E11EFB13BE58D762E951A.roa
File: 242B5AF8C34E11EFB13BE58D762E951A.roa (raw, json)
Hash identifier: bhgXHkkoAwOM1LzWgqlCswVScG+0/q0kyqufymOoJA8=
Subject key identifier: 24:AE:06:E8:77:68:AD:7C:E4:EA:91:B4:5B:CD:43:C6:9C:40:69:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242B5AF8C34E11EFB13BE58D762E951A.roa
Signing time: Thu 26 Dec 2024 05:56:25 +0000
ROA not before: Thu 26 Dec 2024 05:56:22 +0000
ROA not after: Sun 12 Dec 2027 05:56:22 +0000
asID: 17561
IP address blocks: 154.95.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75145 (0x12589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:56:22 2024 GMT
Not After : Dec 12 05:56:22 2027 GMT
Subject: CN=676cf009-3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:9d:94:2f:00:54:13:5e:d3:b5:8e:4f:38:
7a:58:c4:53:c8:e7:56:a5:ed:e9:4e:c8:08:e9:39:
5d:92:54:1d:c8:fe:74:80:89:0e:0a:67:7f:24:27:
97:40:5c:7b:ac:46:97:51:6f:4e:b2:58:cf:60:16:
3d:ce:b4:08:f2:d1:44:af:6d:0f:4a:55:e0:05:d3:
df:0c:9b:23:34:79:54:60:3f:a1:54:54:1a:fa:eb:
fb:c0:e2:65:b2:1d:21:0b:9a:3e:89:e2:2a:7b:1e:
27:6a:35:58:5d:4a:8f:70:b4:6e:11:21:7d:61:60:
c3:4a:f9:7a:96:a4:9b:1a:2a:86:8c:a7:29:53:6c:
e4:25:f0:f4:78:1d:37:21:e6:39:0d:3d:f8:c3:be:
73:67:a9:0d:22:03:2c:30:cb:e6:10:31:0a:a8:88:
da:dc:be:84:88:ec:d1:6e:eb:c2:45:af:1c:f8:ba:
91:d5:06:17:6a:e7:ad:08:73:58:07:ef:9f:3d:c6:
38:57:da:64:6c:59:78:e9:da:aa:63:4d:8b:67:28:
1c:1e:a6:5f:84:3b:3b:ee:ca:6d:c5:01:34:7f:1c:
d3:9c:50:2c:58:33:55:0c:d8:b2:fc:c9:f7:de:35:
30:51:c5:d1:80:6b:9e:de:30:89:e3:68:9d:2c:f1:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:06:E8:77:68:AD:7C:E4:EA:91:B4:5B:CD:43:C6:9C:40:69:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242B5AF8C34E11EFB13BE58D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:67:a2:93:26:ed:d0:d7:c4:ab:b7:5a:ff:37:15:30:83:83:
9b:21:62:fe:87:d4:bd:38:f7:63:ab:dd:c7:c2:17:4a:c5:b3:
5a:26:16:54:63:8d:1c:d8:8d:1c:c7:c2:c5:38:cc:70:e1:fc:
21:e1:40:21:8f:c4:cf:3c:37:cf:30:90:34:da:41:d4:b8:04:
10:75:35:f5:c1:ba:81:52:89:63:2d:f6:66:3b:01:c1:06:83:
42:8b:6e:0d:a8:aa:96:2e:48:fb:03:02:74:bd:a8:3a:3e:17:
8c:de:ce:e7:d6:63:f4:83:62:6a:28:ea:7a:8c:b7:8e:de:70:
25:68:29:ff:83:49:13:c6:5c:9f:e0:bd:05:35:70:e5:89:0d:
3d:c6:46:9c:19:bc:87:81:89:79:07:06:68:5a:2b:3a:ec:43:
9d:03:85:56:82:34:f3:5f:76:64:a7:39:28:0d:c5:fa:aa:e3:
7c:76:53:ef:05:f7:06:45:36:bb:76:e2:e5:0f:57:b4:1a:38:
ef:43:9a:ea:a4:03:47:76:07:de:68:82:2e:0a:d7:f7:c1:43:
2f:d0:32:c3:5e:a4:d5:ac:ff:19:d8:93:c9:bd:a4:68:b5:88:
78:24:91:8e:ca:06:59:98:02:da:e6:3c:0f:fc:5a:54:26:21:
91:be:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:16 2025 by rpki-client