Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D27E82C25E11EFB93D438C762E951A.roa
File: 42D27E82C25E11EFB93D438C762E951A.roa (raw, json)
Hash identifier: Gkr8NFByPu+Mpg2yMP2deutnMnGqK/b4u5mHxc+Rb1g=
Subject key identifier: A3:F5:97:F3:4C:E2:D2:4E:84:A5:A8:5E:D9:36:16:97:7A:B1:7F:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012392
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D27E82C25E11EFB93D438C762E951A.roa
Signing time: Wed 25 Dec 2024 01:19:18 +0000
ROA not before: Wed 25 Dec 2024 01:19:14 +0000
ROA not after: Wed 10 Dec 2025 01:19:14 +0000
asID: 984
IP address blocks: 154.199.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74642 (0x12392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:19:14 2024 GMT
Not After : Dec 10 01:19:14 2025 GMT
Subject: CN=676b5d95-4585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:83:4e:19:17:d0:0e:2a:5a:14:2a:91:48:
e0:13:ce:cc:ca:b8:03:ad:99:3c:4c:5e:72:98:7f:
08:d9:05:7d:b8:dd:63:91:cf:c9:fa:36:d0:1d:f2:
e2:b1:30:88:50:7d:ab:40:ef:b8:33:74:d2:28:b7:
36:1c:b6:35:20:da:10:bd:fd:2f:d1:2b:27:a2:4f:
8a:2f:2f:8c:56:a3:df:b8:41:15:91:c3:de:67:ec:
e5:a7:94:47:44:7e:0e:7a:d1:19:32:cf:7b:b7:6d:
40:6c:d8:6f:64:38:05:03:18:53:39:bd:9c:7b:cc:
3a:96:b2:1c:8e:2d:07:59:a4:2c:b8:72:4d:9b:23:
c2:bf:2b:c4:6c:99:2d:14:bd:c9:9b:88:24:ef:ff:
50:21:f3:fa:ec:02:bd:00:c5:a5:36:e9:b1:a8:8d:
6d:e5:f3:57:54:0a:1c:b7:5c:4b:31:e3:43:dc:61:
7a:c0:04:c1:fe:9e:d9:0e:6f:ec:fd:9c:05:e7:2a:
0a:b4:cc:d1:51:b1:8f:d5:31:f1:84:99:75:27:e0:
7e:0f:b8:0d:ed:21:4d:c0:17:15:90:c4:cf:6c:91:
d0:56:7a:6f:0f:14:c4:c8:3d:84:45:54:d0:63:69:
7a:cd:1f:d5:b2:e1:4e:f2:13:ac:13:2b:f9:5f:0d:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:97:F3:4C:E2:D2:4E:84:A5:A8:5E:D9:36:16:97:7A:B1:7F:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42D27E82C25E11EFB93D438C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.86.0/24
Signature Algorithm: sha256WithRSAEncryption
32:10:2e:cb:ff:72:99:0d:06:b0:45:94:56:16:25:c4:52:fc:
7d:8b:e1:36:02:1b:69:bc:07:d6:82:fb:48:23:ec:4c:76:09:
48:ec:b5:c9:11:61:31:79:b8:9a:fb:04:b1:e4:8b:00:16:9f:
24:5a:22:89:2e:2d:c0:f9:c8:06:28:73:b1:8e:42:52:c1:d3:
47:09:17:4d:b9:e9:1a:fe:0b:0d:2b:2e:80:03:46:86:13:33:
26:3a:84:e6:66:98:0e:57:47:f9:49:10:1a:81:ed:89:e5:d5:
f1:db:5a:a8:49:ee:cb:0c:75:f7:a2:72:42:5e:d5:dd:97:0c:
06:12:bd:4d:92:95:51:6d:52:8b:8d:fe:85:df:5a:a9:36:8c:
68:ca:0d:ad:52:1d:c3:b7:bd:52:b5:65:b7:a1:82:65:8f:1f:
7a:b9:b1:4f:f9:3b:47:3d:59:6b:d0:e8:85:cb:74:e9:15:68:
77:7b:92:46:d0:a4:50:cf:85:c5:d0:36:7a:40:51:af:89:ce:
52:76:c4:09:cc:66:dd:03:11:73:7d:47:ac:ab:b5:c1:60:de:
9c:2a:94:c8:bf:b9:ef:4e:f8:d2:cc:9c:d3:d6:9b:76:08:30:
db:d4:cb:7d:d6:20:21:24:0a:02:1e:74:47:29:f7:3b:a2:49:
ff:31:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:48 2025 by rpki-client