Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376AF792C52711EF917BB548762E951A.roa
File: 376AF792C52711EF917BB548762E951A.roa (raw, json)
Hash identifier: 2D2FAfzq7gsTvVhEZx3ExZ4C9CL9cQEJXhaN08X8YA0=
Subject key identifier: A4:25:CF:F7:ED:64:A6:C9:83:13:B4:D6:A7:91:36:03:08:A2:83:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376AF792C52711EF917BB548762E951A.roa
Signing time: Sat 28 Dec 2024 14:22:50 +0000
ROA not before: Sat 28 Dec 2024 14:22:46 +0000
ROA not after: Fri 12 Dec 2025 14:22:46 +0000
asID: 984
IP address blocks: 154.204.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76689 (0x12b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:22:46 2024 GMT
Not After : Dec 12 14:22:46 2025 GMT
Subject: CN=677009b9-d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:93:12:8f:ad:2a:9d:27:5d:d1:42:d6:72:
04:09:39:09:a3:40:04:d5:43:8b:6d:fe:3d:9c:e8:
d9:4b:bb:7b:4f:51:a9:50:f6:67:f8:57:aa:a1:d2:
df:60:7a:3a:57:3d:8a:82:ff:2f:cc:bc:95:b2:11:
33:98:be:fe:8d:08:f5:2f:d0:e5:0a:1a:3b:22:e1:
3b:e6:0b:d7:15:21:2a:d9:06:5b:25:81:fa:4d:55:
45:33:b6:23:cb:b7:e4:ca:01:3e:56:14:26:c2:56:
e0:4b:ba:72:eb:d0:b6:4e:c7:d0:ab:1e:ea:1a:2e:
8d:b0:b2:ef:35:3b:bd:c9:29:83:4d:7f:b2:f4:12:
7b:aa:27:c9:d5:15:f7:7f:2c:30:55:c4:7a:11:a7:
9b:8e:45:ae:16:4c:64:93:46:6d:b1:a1:37:46:d2:
02:8d:96:3d:5f:3c:4d:09:22:9d:6d:fb:fb:02:78:
41:ff:13:95:74:9d:b7:05:96:cf:80:3f:b1:43:ef:
4b:21:e9:45:b3:69:0f:80:c5:13:f5:a5:b2:38:7e:
73:1d:5f:fa:a9:27:ac:58:9d:05:0c:1a:d8:4b:f6:
c8:90:dc:00:ab:17:23:f2:35:60:c0:3b:2e:14:ea:
f3:52:f2:d4:fa:eb:69:f2:94:68:3f:5e:d9:51:e5:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:CF:F7:ED:64:A6:C9:83:13:B4:D6:A7:91:36:03:08:A2:83:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/376AF792C52711EF917BB548762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:13:68:1b:73:a6:63:c5:ad:1b:64:f4:dd:b1:91:cd:60:4a:
c9:e8:eb:4b:6a:3e:e3:4d:d9:9b:0d:02:87:df:82:ab:cd:82:
96:0b:d9:e6:af:38:cd:22:da:be:20:3d:95:59:88:3c:98:e3:
ea:a9:e7:fa:8a:b8:e6:1f:c9:bf:f6:80:e5:fb:c7:d0:fc:c0:
cd:70:7b:f5:0c:f5:6b:95:9f:8a:e2:27:66:e0:34:b2:c8:80:
fc:fb:b1:34:81:5e:2e:62:b6:4a:8a:30:b0:07:0a:61:90:95:
1b:ca:2c:18:1f:91:b4:4a:24:d2:25:74:17:a5:43:50:e8:9f:
f3:44:8c:dd:1e:17:81:5a:96:c5:22:cc:1e:c8:60:4c:63:96:
9a:fd:20:a6:6d:e4:b1:35:7f:d6:15:ae:f4:b4:d2:9e:8b:7e:
10:5d:51:9d:0f:7b:17:08:10:86:bf:f0:92:ab:bb:98:dd:2f:
5f:56:2a:b3:5f:d1:fd:93:b4:6d:c7:71:52:40:dd:03:1a:7f:
23:f7:96:22:d8:b0:26:83:98:ff:3c:f6:8d:64:3b:4a:a6:1a:
28:a4:2e:51:10:a9:86:e9:b8:e4:eb:12:38:d8:68:97:7c:40:
b5:98:0c:10:c4:91:26:92:38:3c:54:bf:fc:84:7c:05:c7:74:
b9:f4:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client