Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B866E70C92C11EF84AF9453762E951A.roa
File: 3B866E70C92C11EF84AF9453762E951A.roa (raw, json)
Hash identifier: Yf/K6cNQXPVj/LIGYUUymkOGLmbiU83PW8XkR4hPl9g=
Subject key identifier: 1C:E4:E7:DF:BE:14:13:22:03:50:1B:49:FE:02:25:23:8B:19:FC:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013385
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B866E70C92C11EF84AF9453762E951A.roa
Signing time: Thu 02 Jan 2025 17:08:49 +0000
ROA not before: Thu 02 Jan 2025 17:08:45 +0000
ROA not after: Mon 13 Dec 2027 17:08:45 +0000
asID: 17561
IP address blocks: 154.222.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78725 (0x13385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:08:45 2025 GMT
Not After : Dec 13 17:08:45 2027 GMT
Subject: CN=6776c820-6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:c3:11:bd:7b:99:d8:b2:03:18:3b:e5:18:
20:94:8b:1c:35:c1:cc:27:04:dd:7e:23:a2:50:c7:
43:0c:88:22:1e:be:7e:f1:75:e2:7c:a0:82:07:66:
45:92:ec:87:b3:a0:ea:2d:28:8e:5b:0d:d1:2d:b4:
eb:7e:48:6f:11:2d:92:6d:e3:49:83:6c:72:0a:b6:
63:99:9b:70:89:04:a7:5a:df:e7:9c:f2:ea:9e:1d:
25:a2:bc:c4:8e:0f:d4:ab:f5:15:7e:d8:65:8d:b6:
d1:51:ce:25:20:a5:0a:9b:b7:62:07:1e:10:bd:b0:
ab:cf:3a:fc:6f:79:dc:32:a4:70:75:34:da:cf:cb:
be:66:c2:83:40:d4:9f:9e:63:9f:e6:45:7d:c3:b0:
81:94:06:06:59:53:cf:55:ef:a0:11:92:a6:22:be:
2a:0a:89:7e:b7:53:fd:aa:30:8f:67:b6:75:ed:d2:
e9:49:b2:7e:fb:d9:c0:05:08:a2:e1:e1:10:ff:df:
4b:df:52:f8:1b:c8:85:f7:15:32:e4:8d:36:4e:ab:
a7:88:bd:63:7b:69:74:be:9f:69:6c:f3:44:ed:8b:
fa:a1:8b:c4:01:21:a3:39:f0:93:90:bd:75:85:d3:
28:da:0e:41:77:f4:38:18:40:94:d3:4b:e9:3e:7b:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E4:E7:DF:BE:14:13:22:03:50:1B:49:FE:02:25:23:8B:19:FC:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B866E70C92C11EF84AF9453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:92:3f:6e:b6:aa:cb:f2:b0:94:b6:e6:08:28:09:3b:67:02:
99:73:dc:6d:29:cf:00:33:8e:13:43:4b:46:6c:66:3d:68:da:
2c:e9:05:72:6a:ad:5c:37:0b:53:68:bb:43:62:29:1e:42:bd:
3a:84:d4:d8:8c:d3:60:fc:60:1b:3a:5e:68:64:95:6f:85:a6:
14:20:6b:f6:21:34:6e:fa:94:d7:91:bf:1b:3b:01:a2:6c:81:
81:49:1f:d1:c3:b7:13:28:2b:9c:75:a5:98:9d:ff:4a:5f:4b:
7f:65:ad:bd:96:58:1e:c1:eb:cc:30:9b:4d:21:fb:73:64:9e:
0b:d8:ab:b2:0b:31:ca:ca:7a:1c:40:47:de:6a:5a:ab:0d:03:
a6:bf:1b:23:41:59:7e:28:e7:ee:0a:0b:94:25:11:08:b3:1c:
9f:3f:a7:a2:4b:f4:4f:d5:d2:ba:30:8d:87:a5:1b:2c:d1:34:
5d:c5:a3:15:e1:f8:05:c8:8d:c3:45:26:33:a8:72:1e:0c:af:
3a:04:4e:ae:5d:54:a7:75:53:5a:73:24:12:c4:8f:a5:74:54:
a4:bd:c6:5b:73:ad:7b:4c:44:39:58:55:07:72:1c:99:dc:e3:
d7:27:c5:39:5c:0d:5a:e4:40:4a:b8:37:a2:7a:d3:28:36:b1:
64:82:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:39:26 2025 by rpki-client