Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37FBBC32C42811EF83698A7E762E951A.roa
File: 37FBBC32C42811EF83698A7E762E951A.roa (raw, json)
Hash identifier: uvCbMw9Fv1FQUcGDNJIfkqan1HBBRajP8ZxT1V3uVGc=
Subject key identifier: 65:16:21:77:83:07:8D:93:D4:A7:73:19:BF:53:F2:54:B1:6A:F9:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37FBBC32C42811EF83698A7E762E951A.roa
Signing time: Fri 27 Dec 2024 07:57:29 +0000
ROA not before: Fri 27 Dec 2024 07:57:25 +0000
ROA not after: Sun 12 Dec 2027 07:57:25 +0000
asID: 17561
IP address blocks: 154.202.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76281 (0x129f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:57:25 2024 GMT
Not After : Dec 12 07:57:25 2027 GMT
Subject: CN=676e5de9-0fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:4f:fd:e7:18:74:16:83:4b:bf:ff:2a:00:
b5:e3:50:ee:b9:da:bc:08:be:95:4c:95:29:08:e2:
ed:d2:cb:6c:2c:22:da:c2:ed:e2:41:e6:6d:4c:93:
f1:d6:8e:9f:dc:98:f8:e7:10:80:9b:bf:5b:02:a1:
14:19:8f:b5:f3:9e:a3:8a:b8:77:b4:09:f1:2e:35:
0a:c8:ee:d8:d5:ce:0b:5c:b5:0c:a7:33:69:ee:3e:
a1:ed:79:4a:7c:73:55:9e:26:3f:11:71:ba:8c:48:
72:ef:ae:7a:7a:3b:f1:18:bb:be:f6:99:d0:bd:a1:
4a:ac:85:2e:4f:1c:d9:38:15:b2:c3:23:6d:51:06:
b3:20:12:e7:e8:c3:cb:4f:39:34:5c:c4:c8:18:84:
ea:a4:81:f2:13:3e:79:e4:55:8d:f9:8f:4a:a0:41:
de:07:a2:c0:76:53:59:a3:75:68:5d:68:55:f1:bc:
89:e2:85:32:b0:8b:9d:97:4a:47:10:71:0d:d7:45:
41:cf:87:a7:14:b7:a2:e0:3b:24:5d:a6:40:56:ea:
24:5b:ec:66:56:96:be:d8:26:0f:fa:a7:00:6f:7c:
70:5f:4d:7a:15:5a:b8:0d:ff:96:e2:15:de:2f:5f:
06:80:e4:96:28:d0:16:25:0c:ba:af:49:3f:0c:7b:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:21:77:83:07:8D:93:D4:A7:73:19:BF:53:F2:54:B1:6A:F9:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37FBBC32C42811EF83698A7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:03:ac:fa:17:d1:72:35:a4:21:8c:0d:a1:27:ad:da:fc:ad:
c2:ef:9e:e5:24:7c:26:1f:e2:31:47:80:4d:c6:86:4c:69:d1:
37:cf:80:4d:80:df:f7:18:d4:d8:9a:40:8e:77:2a:5b:3d:ab:
df:95:16:74:e1:92:f9:06:06:27:79:12:9e:0b:b1:f2:46:e9:
da:f4:59:5a:4e:32:a6:c2:33:b9:00:7e:6a:b2:88:7e:4a:04:
ef:87:f4:16:d4:43:73:ba:05:9f:43:04:ff:73:60:87:5c:cb:
64:49:90:79:76:84:bf:4a:69:7b:53:8a:96:02:bd:49:dc:b3:
be:88:4d:06:0a:f3:43:c3:41:65:99:b3:0d:be:1b:6d:35:78:
31:c9:9f:aa:56:6c:f9:0a:f2:07:8b:aa:77:24:f0:dc:06:c7:
6a:af:4b:b2:06:e1:6a:69:6c:66:ea:6a:2a:ba:39:08:3d:c4:
2d:7a:23:b3:44:e9:a8:dc:b9:42:8c:da:f0:32:ab:3a:2c:32:
52:49:c0:de:1d:6e:d5:5e:76:01:8a:ab:ac:4d:60:94:f7:f6:
af:f9:66:ce:24:83:6a:c2:1d:da:35:f4:cc:b9:6c:65:ff:8c:
b7:b1:14:ba:9c:59:69:ff:7f:36:96:53:3f:89:4f:f5:4d:c8:
91:4c:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:58 2025 by rpki-client