Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3367D336BE9211EFB5EBF898762E951A.roa
File: 3367D336BE9211EFB5EBF898762E951A.roa (raw, json)
Hash identifier: L+muBJanUjVUkjjRGjVf2k2cyx4zthORLvJlz8Y/pHc=
Subject key identifier: 21:AF:6C:44:CC:1B:10:DE:90:34:5E:8F:2E:1A:37:76:6E:1C:BD:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3367D336BE9211EFB5EBF898762E951A.roa
Signing time: Fri 20 Dec 2024 05:21:01 +0000
ROA not before: Fri 20 Dec 2024 05:20:57 +0000
ROA not after: Wed 10 Dec 2025 05:20:57 +0000
asID: 984
IP address blocks: 154.82.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72732 (0x11c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:20:57 2024 GMT
Not After : Dec 10 05:20:57 2025 GMT
Subject: CN=6764febd-233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:08:2e:c7:04:44:c9:5b:79:45:23:bd:06:
2f:52:b9:d5:85:46:27:f2:b7:26:5b:fb:08:b1:e9:
01:e9:6b:0e:3b:a3:e6:ae:09:1c:87:cf:a0:2c:04:
a2:df:3c:03:17:3f:9a:4c:e7:1b:16:07:83:3f:ab:
b9:7c:05:34:58:cf:ca:4d:b4:e1:26:12:50:c1:32:
4b:8c:8c:4b:0e:09:34:e5:81:98:03:56:ae:14:e2:
f4:bd:bd:66:5d:60:27:5a:56:32:8b:8a:8a:40:50:
da:da:7b:3a:cc:6a:ac:23:ec:d5:02:ac:0e:35:39:
d0:88:79:18:56:82:d4:b0:95:fc:23:07:a4:9d:9d:
0f:0f:d5:d4:97:12:9f:00:e3:96:30:78:58:83:71:
9f:14:b1:35:82:44:b3:39:c2:85:ff:69:59:77:a9:
7a:13:8d:d7:53:f7:d9:06:30:20:b6:fc:77:4f:85:
a8:6f:e1:e9:08:fc:45:ff:cc:27:c0:7a:6b:ec:f3:
96:83:7b:13:a3:26:1f:25:93:a2:d3:3e:e3:42:cb:
b2:be:82:04:0d:5f:eb:11:52:e5:c9:02:d5:8b:39:
fd:9f:84:5d:f7:f2:33:e1:3e:4a:3f:3d:07:75:5a:
f1:59:78:58:c4:f7:ae:1f:2d:ef:b6:ad:16:9b:a0:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:6C:44:CC:1B:10:DE:90:34:5E:8F:2E:1A:37:76:6E:1C:BD:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3367D336BE9211EFB5EBF898762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.187.0/24
Signature Algorithm: sha256WithRSAEncryption
39:52:56:3a:e9:3c:c2:89:13:92:be:ad:c8:8f:4b:57:c8:e5:
22:32:78:14:05:8a:ce:00:10:3b:ac:e2:fe:2d:da:5d:c6:44:
5d:76:f5:9d:df:9d:22:35:71:f2:fe:cb:00:19:f7:67:3d:9b:
19:43:a2:42:51:6e:f1:c1:80:21:c2:52:41:57:53:80:df:36:
7f:42:0a:a9:52:a9:87:94:10:f9:93:9e:14:7a:38:50:ed:ab:
92:02:ae:44:24:08:aa:74:c4:c3:09:e7:18:18:05:bf:2b:96:
31:8b:8b:0b:ae:52:c3:f1:4a:91:ea:ed:fd:fd:12:ca:5d:32:
06:0d:87:b1:f0:94:5d:0d:1a:37:6a:8a:dc:96:22:05:19:3a:
38:38:b6:5c:04:58:b7:5b:cb:cf:4b:92:bc:71:b3:22:7c:d6:
55:0b:d0:04:6c:6b:a2:ca:96:b5:97:16:1f:86:6d:67:5e:75:
48:b8:08:96:69:75:e6:13:2a:7d:a2:57:c6:f0:3d:ff:e1:6c:
b0:c4:66:01:fc:9b:67:15:2b:20:cc:ed:52:69:e1:80:a5:a3:
b6:2a:9e:37:37:51:6f:78:7d:9a:dc:a7:b7:75:1e:ed:83:1a:
09:89:c5:ba:96:aa:6a:e0:83:d5:b0:85:7a:3b:f6:61:a7:b2:
95:1d:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:58:32 2025 by rpki-client