Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408A38FAC62C11EFBE9E0EBA762E951A.roa
File: 408A38FAC62C11EFBE9E0EBA762E951A.roa (raw, json)
Hash identifier: L5F44Jk96zYKywJC91y7PBLAkf0exsUVKNhgldDka6I=
Subject key identifier: E7:FB:EF:B3:38:84:57:93:F0:17:B2:80:B5:54:D6:15:83:0D:29:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408A38FAC62C11EFBE9E0EBA762E951A.roa
Signing time: Sun 29 Dec 2024 21:31:24 +0000
ROA not before: Sun 29 Dec 2024 21:31:20 +0000
ROA not after: Sun 12 Dec 2027 21:31:20 +0000
asID: 17561
IP address blocks: 154.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77770 (0x12fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:31:20 2024 GMT
Not After : Dec 12 21:31:20 2027 GMT
Subject: CN=6771bfab-d529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:eb:13:a9:2b:c5:a3:a5:49:2a:77:11:95:
00:8a:b4:82:83:bc:89:7c:77:41:87:fe:07:01:a3:
88:2f:61:9f:f6:12:c3:a5:90:cb:ab:b7:66:77:9f:
09:39:1b:73:dd:ef:a3:ae:27:8b:92:54:13:1f:13:
0d:14:a6:86:c0:0f:87:6b:86:ad:7c:66:06:6f:7f:
3b:1a:15:ca:69:e9:ff:90:4e:07:d6:93:bc:31:17:
bf:2d:b6:e8:76:8a:1f:55:4a:8c:28:40:41:28:54:
46:bf:04:b8:7d:8b:07:ff:08:b1:28:9a:48:5f:c9:
5e:6a:fb:53:e3:78:22:c3:6e:7d:e6:c2:98:78:af:
a9:67:b1:3a:3b:79:ca:9f:23:67:48:6b:bf:7b:ed:
d6:2b:a7:e9:4e:db:9b:cf:e3:48:67:76:c0:9a:34:
4c:a0:bc:33:6f:16:37:a9:09:cd:64:88:c2:42:df:
0f:65:73:3d:15:b4:ca:d5:b0:ee:75:0b:5e:d3:7b:
6d:f9:dd:8d:31:f0:a4:db:29:0f:ed:97:47:12:b6:
a3:e9:40:4c:fd:3a:f4:65:44:8b:ce:9c:14:60:df:
04:98:f1:59:1d:f3:31:3f:7b:24:c3:57:7a:d7:74:
08:81:8a:4a:ca:e1:b9:01:79:01:76:83:e6:00:96:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:EF:B3:38:84:57:93:F0:17:B2:80:B5:54:D6:15:83:0D:29:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408A38FAC62C11EFBE9E0EBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e0:99:87:90:83:b6:d2:7b:33:7b:75:7a:de:23:0d:cb:b3:
77:0a:17:1c:5e:dc:8e:47:14:3f:c9:bb:21:71:ef:9a:80:22:
33:78:a9:ee:8f:71:c6:e4:89:fb:d9:18:86:23:66:36:b1:99:
7c:d5:1e:12:23:f3:2f:16:80:7f:f6:f2:44:32:02:39:c4:6c:
15:78:af:c9:f3:09:74:43:f7:77:54:07:4e:7c:61:1d:f2:58:
79:d9:83:8d:95:ff:c1:c9:5a:b5:39:f4:91:01:a3:bc:53:8e:
d0:11:7a:d0:1f:76:4f:e3:96:c0:ff:84:dd:70:0c:5c:8a:95:
e3:52:f9:49:bd:ed:06:ea:00:1c:39:36:47:99:61:28:27:42:
7d:33:e9:4e:7f:20:72:97:24:e4:ed:82:00:04:ef:6a:4b:62:
71:a8:10:6f:fd:b9:71:11:04:51:bd:3b:45:33:f4:4e:99:6f:
b0:6e:78:91:43:fe:4e:9a:f2:3b:41:95:7d:3e:be:0e:90:ef:
00:3b:79:25:9a:46:84:b2:f3:05:ae:7c:df:41:92:2a:52:f4:
2b:87:a7:85:df:77:cd:3a:03:49:c1:9b:31:67:5f:0e:e8:1a:
64:3a:2d:36:62:4c:52:5b:34:49:f8:25:2a:7d:34:2b:bd:10:
b5:0b:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:32 2025 by rpki-client