Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37728EB4C27311EFB98A76A2762E951A.roa
File: 37728EB4C27311EFB98A76A2762E951A.roa (raw, json)
Hash identifier: AV9okehOjxFpAs//p0EkvcpmC9IaUHZzjCdgCaYMPkg=
Subject key identifier: 16:28:74:E8:B5:66:63:BE:43:A3:AC:38:7F:25:F1:9A:A9:21:16:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01247C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37728EB4C27311EFB98A76A2762E951A.roa
Signing time: Wed 25 Dec 2024 03:49:18 +0000
ROA not before: Wed 25 Dec 2024 03:49:14 +0000
ROA not after: Wed 10 Dec 2025 03:49:14 +0000
asID: 984
IP address blocks: 154.211.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74876 (0x1247c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:49:14 2024 GMT
Not After : Dec 10 03:49:14 2025 GMT
Subject: CN=676b80be-fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:55:64:5b:59:01:53:47:f5:8f:03:43:0c:
dc:08:ce:ce:09:fb:9e:c0:eb:cf:95:33:b6:d1:81:
96:96:e5:e8:4f:4a:3d:76:f7:6f:9b:61:3e:d5:4f:
18:9b:f4:20:df:e3:d1:b1:05:45:ae:73:97:8e:53:
da:fd:5d:13:88:be:96:54:96:ca:17:10:0d:a7:d6:
61:c8:de:7d:c9:87:c5:bc:f4:bf:ff:52:80:6a:f1:
00:26:4f:ac:c7:ec:e4:dd:4b:43:32:22:6e:f0:ab:
a5:0f:21:b0:2f:a6:51:10:1a:74:b4:e0:3a:78:ba:
69:05:cc:a9:eb:72:a3:fb:9c:6d:a2:f4:f1:0c:a8:
24:5d:94:ce:40:b9:41:b0:96:b7:84:27:40:c4:e5:
b9:2b:83:f1:64:4d:9d:62:ce:cf:43:5a:2f:3e:79:
47:58:fe:3f:75:e6:11:bb:f3:69:bd:da:3a:9e:2f:
4c:a0:34:04:51:0f:cf:a2:73:87:91:3d:45:b4:71:
73:2d:87:5c:0c:54:07:03:ad:a3:89:64:da:41:2a:
0e:28:6d:36:8d:f3:ff:b6:53:33:02:9d:5c:ea:2b:
f8:cb:0f:8c:01:7f:cd:c3:cd:82:ee:cf:ff:6d:2a:
36:63:9e:68:07:81:5d:c7:fc:53:ad:b2:ad:86:d1:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:74:E8:B5:66:63:BE:43:A3:AC:38:7F:25:F1:9A:A9:21:16:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37728EB4C27311EFB98A76A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.219.0/24
Signature Algorithm: sha256WithRSAEncryption
52:63:a6:7b:25:cf:9f:d3:cb:70:6b:a1:94:62:88:e9:d7:17:
b3:96:ae:9f:88:98:ee:eb:43:83:57:81:60:14:2d:f4:c6:23:
18:4a:1e:9c:3f:89:bd:18:e5:16:e9:aa:e2:52:b9:61:5a:89:
a5:1a:55:e1:76:85:5a:5e:2b:e6:4a:4e:ae:91:5e:aa:c9:c8:
83:29:91:b0:b7:c9:dd:9f:e6:ee:7d:b0:81:88:20:ea:57:65:
41:68:78:8a:23:41:4c:37:16:6c:22:00:a1:0e:37:2b:9b:00:
65:b8:d7:40:36:63:cf:2a:ed:68:1b:0c:e2:30:a5:47:9b:82:
32:32:c6:12:b9:86:11:95:35:e7:62:bc:4d:45:ac:fc:41:c4:
2f:c8:b0:b2:b9:99:4e:59:48:f3:e0:82:7b:6c:d9:3f:20:6d:
fb:ad:74:34:0c:f3:a1:29:58:24:bf:de:28:ff:31:f0:a5:4c:
fc:7f:36:54:24:e6:bc:c7:00:a1:28:c5:15:85:de:8f:be:4b:
71:fe:5b:12:ba:8c:f2:37:e6:86:b1:e4:3f:d7:ba:60:1f:32:
6d:4a:63:0e:40:7c:7b:91:d4:f0:d4:b7:31:33:3b:57:a5:eb:
f8:50:9a:b6:63:04:93:19:1f:71:60:28:b8:4c:ba:5f:77:81:
e1:fa:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:14 2025 by rpki-client