Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400E812CC0ED11EFB7FFC66B762E951A.roa
File: 400E812CC0ED11EFB7FFC66B762E951A.roa (raw, json)
Hash identifier: 34oqSyqCPyH18Kvpixlq5c/I46pUU9E/ldSzZIGHgmw=
Subject key identifier: 46:55:38:69:AC:CB:F5:EA:7E:CB:E3:4A:27:9A:E2:EC:66:E1:50:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400E812CC0ED11EFB7FFC66B762E951A.roa
Signing time: Mon 23 Dec 2024 05:18:00 +0000
ROA not before: Mon 23 Dec 2024 05:17:32 +0000
ROA not after: Wed 10 Dec 2025 05:17:32 +0000
asID: 984
IP address blocks: 154.90.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73528 (0x11f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:17:32 2024 GMT
Not After : Dec 10 05:17:32 2025 GMT
Subject: CN=6768f288-09a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:76:08:5d:99:38:3d:0d:b0:79:d0:00:59:
4a:f7:cb:cb:2a:8a:0d:6d:fd:30:f3:b4:55:1f:e1:
05:d5:84:03:b1:a2:28:a9:34:62:d3:7d:64:24:1f:
6b:1f:bd:72:db:69:37:42:12:d3:3f:ab:41:bd:02:
23:8c:7c:88:b8:56:cd:e9:29:87:32:19:2c:63:97:
4d:e5:3e:f7:51:f6:7c:be:1a:d1:14:2a:ff:52:63:
84:4b:88:71:da:87:ce:45:23:19:1d:f6:7e:06:fa:
97:af:ec:06:41:4a:e2:db:f5:30:6d:a1:d7:a0:53:
24:25:64:b6:a9:37:c4:16:88:f9:1c:02:22:d6:e2:
5b:e4:ac:5b:f8:92:e0:7f:95:99:04:ea:92:c8:55:
8d:47:d4:0b:a1:d2:16:6b:10:df:6c:bd:0b:34:31:
3a:e8:53:11:c5:3d:15:e6:c7:2f:31:cf:c2:c9:9f:
41:85:d2:8b:bf:cd:18:aa:c2:ee:71:7c:dd:36:3d:
70:22:3a:a7:ff:21:35:68:73:81:5c:b3:0b:2d:70:
a1:a7:a6:d0:72:c7:4d:60:38:cb:f6:00:56:2a:02:
e2:d6:b1:d6:cf:7c:98:9b:ec:bc:ec:53:8f:08:51:
47:a3:a2:26:38:8b:1b:81:25:26:e5:dc:7f:46:79:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:38:69:AC:CB:F5:EA:7E:CB:E3:4A:27:9A:E2:EC:66:E1:50:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400E812CC0ED11EFB7FFC66B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.82.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:3f:27:67:34:aa:24:3b:df:b3:dc:eb:8c:4c:f0:90:96:
6a:c1:3c:47:d4:b1:13:37:f9:a5:31:1e:e6:6a:5f:eb:ef:ec:
b6:60:bd:90:22:1d:1a:a0:73:44:3b:28:28:e2:b8:50:0d:5c:
64:63:81:e7:9e:b6:df:88:7c:93:67:19:52:98:50:cd:17:84:
13:a1:58:7d:13:62:f4:99:97:fa:66:ad:7e:5d:d7:7a:70:a4:
92:8f:73:61:84:c1:b5:dc:89:a8:a3:0e:01:9c:55:83:07:32:
61:50:ed:37:c3:8c:e4:40:a9:45:eb:dc:7c:4c:47:98:fa:55:
d0:0f:92:5f:f3:a1:f0:13:6b:8c:b2:3b:59:a8:32:2a:23:91:
6e:7a:e0:8a:71:91:83:da:89:46:9f:3d:67:53:26:fd:91:1d:
3b:09:b0:5b:c0:ab:af:eb:b9:45:6e:38:b4:a7:88:22:29:a5:
ab:c8:f4:0c:01:b6:56:cd:d7:3f:01:8b:83:7c:82:04:b6:89:
9f:0d:14:e3:94:7d:a8:6c:21:78:50:00:80:3d:54:ae:1c:b2:
e5:91:a9:2e:31:15:bb:a7:01:2d:f8:69:2b:a5:e8:73:47:03:
02:b9:1a:a6:0e:5f:2a:2d:eb:ec:da:75:7b:c3:5c:81:86:2d:
a5:ae:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client