Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9C1198C61E11EFB2AA3D63762E951A.roa
File: 2A9C1198C61E11EFB2AA3D63762E951A.roa (raw, json)
Hash identifier: TePkHf3qPqmuVIsLH51uwTf8WF0VhYhSf+ltx2XVcyQ=
Subject key identifier: 21:BE:EA:01:5C:D3:A1:B5:DE:85:2D:18:EC:62:AB:40:BF:A8:7E:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9C1198C61E11EFB2AA3D63762E951A.roa
Signing time: Sun 29 Dec 2024 19:50:34 +0000
ROA not before: Sun 29 Dec 2024 19:50:30 +0000
ROA not after: Sun 12 Dec 2027 19:50:30 +0000
asID: 17561
IP address blocks: 154.217.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77652 (0x12f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:50:30 2024 GMT
Not After : Dec 12 19:50:30 2027 GMT
Subject: CN=6771a80a-0778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:29:67:22:8c:3f:6b:03:c8:22:d9:2c:48:
72:e2:9c:a6:b7:6f:5e:23:ab:33:e2:17:ad:a9:b7:
f8:a0:aa:f6:79:ac:a6:28:e7:41:58:7f:47:4a:35:
b0:ac:24:bb:4a:9e:5f:9d:09:64:01:a5:18:1d:a8:
d9:84:25:53:1c:1c:c2:54:7b:b1:7b:86:b1:79:e1:
77:d9:6d:94:3a:fc:d3:6f:7f:a2:8c:ca:55:7a:e5:
e2:29:97:b6:88:76:e8:b9:d4:9c:44:2c:df:79:2c:
e2:81:55:f2:93:40:fc:56:01:b3:20:7b:d4:8a:1c:
1a:68:7d:f6:07:72:06:5f:d4:57:96:93:0d:dd:1c:
39:10:81:9d:c7:46:dc:83:ae:8c:62:de:77:d0:7e:
61:ad:26:fa:01:63:3a:09:2b:22:f8:29:b7:dc:4e:
f9:45:3a:35:3f:7a:e4:2b:c8:ea:50:21:05:c9:59:
d1:a6:21:20:a9:93:33:5b:3f:b7:55:0d:1c:14:a2:
ca:0d:e7:c8:29:3e:cd:9c:a3:13:8b:31:76:2b:4c:
49:36:fe:57:56:27:55:25:3b:27:5d:dd:3d:35:d7:
76:3e:e5:22:0c:8d:fa:a0:41:85:f6:85:43:47:71:
30:38:26:38:99:3b:c7:6f:f5:3f:c2:62:85:f3:d8:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:EA:01:5C:D3:A1:B5:DE:85:2D:18:EC:62:AB:40:BF:A8:7E:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9C1198C61E11EFB2AA3D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.141.0/24
Signature Algorithm: sha256WithRSAEncryption
76:45:44:44:97:45:35:fd:5b:9f:e8:7e:5c:21:22:d2:0c:e5:
f6:b7:3f:15:e1:b8:3d:7f:74:4c:a5:31:25:de:f1:29:13:88:
2b:c6:27:74:fd:48:9a:5f:13:fa:cb:a2:18:71:27:78:38:76:
d9:18:9a:42:06:6e:86:7b:ad:ee:68:43:e8:65:b1:a8:9e:4a:
86:21:3e:7e:a3:de:59:ae:5e:96:8f:0b:72:b6:a7:73:4f:e4:
ac:8d:6d:7d:30:8b:c1:65:8b:f6:55:0d:7d:41:9b:35:59:3f:
32:75:fe:22:52:71:a3:0f:28:95:26:8d:d9:88:53:c9:99:b2:
78:2a:94:23:0e:12:01:b7:2f:00:b6:34:cc:ad:51:6c:0a:0e:
f5:39:f5:ac:13:9b:42:8b:ad:ba:b3:e3:a4:ae:0a:66:df:ac:
b0:ac:29:4c:ab:44:58:87:49:4d:3a:73:15:d8:b3:6d:5f:f6:
9c:4a:57:0d:49:45:5b:ff:93:9e:fa:b4:c0:60:3b:21:aa:11:
a0:3f:59:2e:28:5e:2a:ac:38:2a:a2:e6:83:22:b2:18:06:51:
54:be:dd:71:de:05:5b:33:e7:0d:c3:62:b4:52:42:60:c2:03:
8b:24:9c:ef:48:ff:b1:ff:0f:04:b7:48:48:7d:7a:bb:73:15:
ca:8e:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:02 2025 by rpki-client