Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E65B18BD0F11EFAED1E795762E951A.roa
File: 38E65B18BD0F11EFAED1E795762E951A.roa (raw, json)
Hash identifier: XTPszfL/7XVyZhe2wxdVBYR6FzKhtvpNKlodpNmZEnU=
Subject key identifier: 81:A4:50:A4:AF:4D:8A:7A:ED:3D:B3:51:91:85:E6:BB:67:B5:F7:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E65B18BD0F11EFAED1E795762E951A.roa
Signing time: Wed 18 Dec 2024 07:10:55 +0000
ROA not before: Wed 18 Dec 2024 07:10:51 +0000
ROA not after: Sat 22 Mar 2025 07:10:51 +0000
asID: 16437
IP address blocks: 154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72646 (0x11bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 18 07:10:51 2024 GMT
Not After : Mar 22 07:10:51 2025 GMT
Subject: CN=6762757f-e4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:50:6c:a0:7a:77:ac:e8:f9:c6:14:a8:a8:
b9:75:a2:06:08:53:2f:81:ff:54:d4:fd:2e:66:4f:
e9:f9:14:b0:ad:dc:54:aa:a6:94:fc:86:fb:27:42:
45:30:7f:e5:b5:e7:ea:16:49:2e:94:a6:10:fe:d5:
7f:aa:64:d5:20:69:85:01:e6:32:48:d3:3c:f8:57:
ef:db:90:de:b3:1a:f4:e3:58:02:5a:83:91:8e:1d:
e3:02:0e:34:d4:a4:96:b2:3f:a7:e0:e7:e3:ab:c2:
e8:52:1a:fc:2d:55:66:e1:78:50:cc:d0:73:19:51:
20:b5:7b:a4:8e:18:cf:ab:a2:73:8f:3b:6e:6a:13:
eb:e8:11:d5:f2:fd:fd:a3:23:91:74:96:a1:74:24:
27:21:2e:56:64:8a:bf:fb:1d:17:b4:30:48:25:43:
c4:9b:5c:05:64:58:80:87:5f:a9:8e:9b:71:c7:b0:
f6:9a:c9:10:e3:20:b9:b3:12:a2:ab:e7:92:c1:d1:
17:ab:cc:8f:b8:12:78:95:83:2e:2e:a4:d3:8b:6c:
b7:fe:08:53:d9:bb:e0:7f:f6:1b:70:a2:27:c1:6f:
0b:32:30:93:96:a5:62:34:41:57:79:3f:4c:f0:57:
23:bc:20:86:6b:18:c6:f3:f1:b9:a7:27:16:67:6e:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:50:A4:AF:4D:8A:7A:ED:3D:B3:51:91:85:E6:BB:67:B5:F7:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E65B18BD0F11EFAED1E795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
44:8e:26:30:62:1b:f2:99:5e:8d:94:32:8c:95:21:e4:34:a4:
95:95:68:39:de:9e:9a:cc:3f:51:bf:b9:9f:12:f4:51:87:3a:
d1:a6:aa:4b:69:a8:0c:d9:30:60:7f:c4:b8:63:07:ae:7b:9b:
e6:01:11:f8:81:12:3a:a5:9d:ce:87:6c:3e:f7:01:1d:42:3b:
d1:be:3c:77:66:53:e2:ce:d1:47:60:b6:c5:c7:e0:70:68:b3:
49:a1:e3:63:8c:85:8e:94:b9:3e:84:2d:5d:4d:32:b5:bf:a2:
06:15:a7:84:28:37:bc:fc:67:74:10:6a:21:21:72:d2:c2:5d:
f1:dd:18:17:64:9f:fc:46:85:f9:32:ee:cd:65:e7:2d:e6:1d:
77:a3:68:86:f7:8e:ee:f5:79:e8:78:66:1f:56:4f:33:45:e1:
a7:7a:4a:81:9f:4f:4b:0f:29:76:45:03:02:7a:82:1c:a0:53:
3c:c4:89:60:e7:50:c5:a9:dc:ef:8e:f1:07:f3:a3:bd:4a:e4:
26:43:7e:bd:63:f1:0d:08:14:0c:92:49:19:f2:16:c3:d3:38:
ee:1c:fb:5c:fa:6c:ac:d7:d0:bd:db:89:7d:c3:c5:23:d7:5a:
a0:f6:a1:54:86:ba:80:23:0b:9a:59:3b:73:36:11:be:fe:d3:
11:c8:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:49 2025 by rpki-client