Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9147E0C54611EFB3990F8C762E951A.roa
File: 3F9147E0C54611EFB3990F8C762E951A.roa (raw, json)
Hash identifier: 7I/kVCVzpNghugdTtfD1yPx1zoUn+0WlFLN3CKRDtIM=
Subject key identifier: 2F:52:18:64:CB:2F:95:92:3B:CA:6A:9F:25:C6:39:58:51:BF:94:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9147E0C54611EFB3990F8C762E951A.roa
Signing time: Sat 28 Dec 2024 18:04:58 +0000
ROA not before: Sat 28 Dec 2024 18:04:54 +0000
ROA not after: Sun 12 Dec 2027 18:04:54 +0000
asID: 17561
IP address blocks: 154.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76973 (0x12cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:04:54 2024 GMT
Not After : Dec 12 18:04:54 2027 GMT
Subject: CN=67703dca-0f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:74:ab:9b:37:7f:cf:43:48:1e:60:3f:e8:
03:ac:52:b4:3f:e9:b7:81:8c:aa:d9:d8:35:10:42:
9e:f8:d7:e1:a2:7e:d3:e9:8d:3a:29:4c:2c:c9:a1:
8d:5a:10:1b:15:c8:9d:21:30:0e:10:b6:89:34:3b:
52:cf:85:51:2f:56:dc:e9:f1:5d:26:2d:30:eb:1e:
a1:3f:3a:6d:2c:e0:37:e8:ec:a1:0c:8d:94:04:cb:
c8:2d:ee:d3:f6:cc:e6:41:62:bf:3f:03:80:ed:53:
7b:3f:f6:7e:4e:68:2d:5f:1d:1f:14:5d:56:94:ad:
c8:45:2f:32:b1:a8:48:6b:da:28:66:9c:45:dd:c7:
9f:3b:5f:7a:f9:cf:46:de:da:a9:9b:22:2c:d3:e1:
d6:12:7b:f9:37:4a:32:43:cb:78:3f:72:64:ee:ff:
21:34:ae:ff:c1:c4:89:85:87:88:62:f7:3b:ac:ad:
cd:7d:97:77:83:6a:f3:d2:4f:e9:12:57:a9:22:5f:
07:51:c0:35:7f:29:93:86:b4:bf:cc:6f:14:10:a5:
84:64:16:f9:47:70:53:d4:e9:a9:4a:46:e8:96:62:
24:82:39:91:33:04:33:61:df:5f:ef:b6:de:e3:af:
9d:7e:21:4f:d5:37:4f:b0:11:64:b6:0a:cd:f7:a2:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:18:64:CB:2F:95:92:3B:CA:6A:9F:25:C6:39:58:51:BF:94:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9147E0C54611EFB3990F8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ee:3a:33:1f:59:05:31:f6:d7:a3:fa:99:40:93:a0:d3:d6:
6c:bc:ed:7e:f2:4a:f9:8a:60:26:f1:90:65:75:2d:4e:dc:56:
0c:e0:60:1d:e6:b1:c8:52:d7:af:20:f7:ad:e1:23:3d:69:d9:
4f:38:79:28:00:46:66:83:40:a8:f4:3e:71:12:c2:f6:93:c8:
7c:20:6b:af:2e:de:74:b4:1f:7b:67:0c:14:3e:de:5c:cb:cf:
fa:76:b0:e6:ce:f1:7d:08:f6:5c:c6:28:e0:98:74:14:df:a8:
70:c9:0e:61:d3:92:79:82:52:20:c7:52:9a:5a:76:45:3b:5a:
db:2c:63:84:4e:58:67:71:c9:1c:7d:e9:59:3f:e0:61:c8:89:
75:61:9c:9b:fe:62:20:48:31:8a:33:d2:fe:f1:16:dd:4c:2b:
79:34:99:b5:0b:e5:1b:e0:a3:2f:52:1a:0d:61:92:25:b3:f5:
a8:47:75:74:ef:28:18:c2:d6:11:9d:a5:a0:1e:83:cb:1f:a2:
d3:71:de:23:52:59:3d:d9:c5:40:79:08:6c:95:94:fe:b4:7f:
9c:19:91:d0:7f:e7:8d:0b:3d:e8:eb:cb:82:53:8e:52:bb:bd:
59:33:47:bd:0d:8e:b5:f3:bb:74:63:49:90:e1:57:53:9b:99:
f9:20:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:02 2025 by rpki-client