Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C410924CDBA11EFA8F8BF55762E951A.roa
File: 2C410924CDBA11EFA8F8BF55762E951A.roa (raw, json)
Hash identifier: rFSAIzVKRTxfdQQq4NSRSEycfjVEea7LtdXRRZA7IM0=
Subject key identifier: 65:AD:1E:B8:09:41:B8:A1:B2:44:A0:56:34:6E:C1:02:49:65:CF:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C410924CDBA11EFA8F8BF55762E951A.roa
Signing time: Wed 08 Jan 2025 12:14:56 +0000
ROA not before: Wed 08 Jan 2025 12:14:52 +0000
ROA not after: Tue 16 Dec 2025 12:14:52 +0000
asID: 984
IP address blocks: 154.200.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79576 (0x136d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:14:52 2025 GMT
Not After : Dec 16 12:14:52 2025 GMT
Subject: CN=677e6c40-1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:ee:a6:c2:ac:b9:da:e2:53:d1:c7:dd:89:
17:c7:24:e4:bf:c5:f8:8d:64:49:c8:cb:22:ed:11:
0b:bb:58:d6:24:67:8e:f2:11:4d:75:17:52:04:0e:
96:a4:05:ab:00:cc:25:3b:11:ca:53:81:57:f5:8d:
3b:3f:3a:fc:09:d7:61:c9:f2:a9:13:b1:f7:50:c2:
2d:d4:e3:87:fc:28:ab:88:d1:e5:3d:7c:d9:5f:e0:
c6:96:c8:76:33:77:c4:ce:7f:c0:ed:13:dd:d2:48:
6e:80:e3:2a:4a:3c:c2:ba:b6:87:e0:f9:81:59:d9:
09:43:3d:fb:36:ea:b7:46:fc:a4:be:eb:f1:7a:30:
5a:42:31:5f:fd:b2:c4:48:51:7b:c3:e2:19:ae:87:
a2:e8:23:f0:6a:6b:25:00:91:ce:e9:ba:ca:1b:d2:
4a:32:76:45:cc:55:95:3f:0d:41:0b:0b:04:67:3b:
df:07:f9:fb:d0:e4:2f:dc:de:ae:26:eb:08:08:17:
3c:64:98:71:ab:68:62:34:1f:96:d7:26:a8:24:26:
97:c0:37:65:4d:05:66:71:ee:2a:91:43:34:ed:e8:
d5:74:5b:74:87:b6:13:ad:b7:13:aa:b0:f8:e2:25:
1b:89:58:12:23:ce:30:75:7a:91:3b:23:ae:75:b7:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:1E:B8:09:41:B8:A1:B2:44:A0:56:34:6E:C1:02:49:65:CF:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C410924CDBA11EFA8F8BF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
81:32:8b:05:e3:18:87:e6:c0:54:a0:07:8b:cd:76:05:c2:a6:
88:29:d7:c1:32:59:97:b9:22:da:6e:27:78:80:93:7a:48:48:
e1:a2:e4:4b:14:9d:45:3e:4a:03:a0:36:cc:be:ad:37:7f:e8:
7d:18:b8:c8:47:40:2d:31:e7:86:74:91:cd:9f:ab:8e:c1:e4:
ce:05:f7:4f:06:2b:d2:53:c4:5b:75:e4:d0:16:87:5a:62:d0:
34:8a:ce:90:b7:ad:01:df:28:c3:28:c1:66:f6:9a:17:bb:e7:
cf:86:00:1c:e6:b8:93:f6:c3:a1:72:74:5d:a6:77:ed:52:bf:
00:ea:79:14:e0:3b:32:d2:85:13:9a:da:18:9b:45:d7:48:d4:
9d:ea:f9:1f:7b:6a:b3:fd:d2:37:05:30:07:08:1f:33:02:e7:
ec:cc:45:72:8f:04:d0:f4:47:89:c6:5c:08:71:15:ef:b2:b5:
55:f8:fc:3e:1b:90:3a:e4:70:4d:2b:c7:7c:55:f8:95:b0:49:
26:fa:a8:72:af:17:da:9b:2d:04:9c:d7:73:3a:a4:77:a6:fc:
41:b2:74:3b:d3:8e:29:7c:fe:39:e2:8e:7a:80:38:9a:11:15:
08:d1:15:eb:af:11:5a:c6:0d:a2:6b:7b:71:51:81:9a:09:42:
c8:b9:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:46 2025 by rpki-client