Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8B1CA2C26811EFBD534558762E951A.roa
File: 3A8B1CA2C26811EFBD534558762E951A.roa (raw, json)
Hash identifier: hcGdkqli3rZjvNDPFnOHpsxcFzO8A4CYeR1evtJ3y40=
Subject key identifier: 46:D1:60:72:47:FC:4C:5D:6F:BF:10:5D:0B:73:1B:95:22:A5:5B:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012402
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8B1CA2C26811EFBD534558762E951A.roa
Signing time: Wed 25 Dec 2024 02:30:39 +0000
ROA not before: Wed 25 Dec 2024 02:30:35 +0000
ROA not after: Wed 10 Dec 2025 02:30:35 +0000
asID: 984
IP address blocks: 154.211.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74754 (0x12402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:30:35 2024 GMT
Not After : Dec 10 02:30:35 2025 GMT
Subject: CN=676b6e4f-c455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:5f:ac:2e:35:cf:84:b7:5e:cf:24:b6:12:
f0:da:09:1d:ce:ce:62:db:53:cc:7b:35:d1:14:72:
21:e8:7c:d5:78:d3:0a:f3:33:58:af:c7:0b:e0:c7:
3f:dd:2d:e8:6e:de:63:ad:dc:de:24:d8:5f:f8:d7:
01:12:1c:73:59:44:af:37:4a:ad:a3:e1:21:4f:a9:
e2:c1:de:38:9a:18:96:6f:68:66:09:2f:a6:0c:16:
21:36:c2:a5:5f:c4:b6:94:7f:73:91:a1:9a:6d:ea:
26:6a:33:c1:a5:65:cf:74:55:15:2e:fa:e1:c2:86:
46:12:ee:0d:5b:e3:87:1d:b2:93:36:19:b4:0f:e6:
80:ca:10:e0:f0:9b:ab:d8:29:ac:4e:b5:d6:bb:bd:
b6:62:cb:51:f4:12:66:0f:37:6b:9e:07:cf:fe:d5:
05:44:e7:d8:cb:95:6a:93:c3:d5:8a:5f:7a:6c:9f:
dd:e4:2d:74:4a:26:56:8d:dd:01:c0:8d:76:99:65:
0c:81:04:77:58:1b:03:c2:d8:9c:f0:b3:74:78:3b:
11:df:83:cf:53:22:79:97:fd:23:62:fc:74:e4:29:
94:c6:40:e6:75:0b:07:f1:4a:e6:75:c9:91:a9:ac:
8e:35:5c:2d:56:dd:61:e8:48:fc:cd:01:ff:6a:f1:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:60:72:47:FC:4C:5D:6F:BF:10:5D:0B:73:1B:95:22:A5:5B:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8B1CA2C26811EFBD534558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.136.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:b2:f0:6b:57:7c:d8:42:2c:08:af:3b:70:db:64:ee:42:
9c:a9:28:b6:da:cd:62:6c:23:86:c7:a9:83:65:8a:3b:bb:35:
fb:f1:5d:7d:99:fd:fe:5b:22:9c:44:16:0b:ee:17:b8:79:52:
90:d6:9b:f0:29:70:06:48:3c:cf:a5:74:73:5a:77:04:f1:75:
c8:ef:d5:0c:a0:02:60:de:93:ee:7e:87:61:bb:fa:4c:05:b9:
ad:a0:c9:4e:a5:41:42:f3:cb:bf:da:f8:a2:66:55:6c:3a:d4:
e1:e9:ff:1f:05:6a:f6:be:0e:67:28:10:31:f1:ce:9a:66:36:
bd:81:8b:0f:59:36:8b:8f:e9:eb:f3:89:86:5d:41:7b:5a:63:
aa:ee:25:14:ed:21:5f:1a:50:6b:64:00:e4:a6:51:3a:51:4b:
e9:a6:84:0a:98:44:9e:48:a5:b3:36:c1:6e:ce:9d:df:5d:b7:
1a:6c:2f:2e:55:0a:ee:00:a7:c5:4d:96:68:60:0e:52:c2:12:
82:95:77:47:eb:aa:17:e9:22:b7:84:47:0e:97:b3:58:1d:36:
d7:d9:12:7a:1b:71:96:44:77:88:c4:44:08:62:39:7c:8a:19:
35:4f:d0:f5:00:4e:3c:c0:b4:5a:27:eb:2d:ec:c6:d8:28:50:
51:64:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:01 2025 by rpki-client