Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4319600AC41011EFB806EE69762E951A.roa
File: 4319600AC41011EFB806EE69762E951A.roa (raw, json)
Hash identifier: lZd/RSlh9nWVsJC2DaB/e82xEN+59/Utf/KGV/Q2x/g=
Subject key identifier: 9F:98:B1:EC:7C:0E:54:73:54:C8:24:3E:F1:2A:AA:CC:25:D7:D9:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012949
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4319600AC41011EFB806EE69762E951A.roa
Signing time: Fri 27 Dec 2024 05:06:00 +0000
ROA not before: Fri 27 Dec 2024 05:05:56 +0000
ROA not after: Fri 12 Dec 2025 05:05:56 +0000
asID: 984
IP address blocks: 154.196.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76105 (0x12949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:05:56 2024 GMT
Not After : Dec 12 05:05:56 2025 GMT
Subject: CN=676e35b7-9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:c4:af:ce:08:a6:e5:30:7e:3e:39:11:cf:
39:fa:a0:8a:59:ad:41:54:a5:4f:db:93:d4:7d:47:
49:00:6c:ba:3e:54:b3:78:7f:99:80:72:7f:4e:1e:
63:01:ba:4d:60:58:aa:f3:5f:33:f8:8d:91:72:1f:
ae:28:ef:82:c8:74:a8:d0:63:da:21:fb:5e:5d:e7:
a6:65:08:67:d0:12:31:a4:00:d3:c4:c6:c1:60:6b:
53:b7:84:37:cb:f7:6b:78:0e:13:5a:f9:06:25:bc:
30:30:cc:6c:96:33:68:e3:df:5f:40:80:d6:59:2f:
8c:23:1b:20:ff:6a:d1:51:92:10:7b:14:3b:2e:0c:
99:ff:2e:c6:e5:96:45:b3:fe:45:75:1c:5e:97:98:
66:19:47:56:8f:37:1f:40:fa:68:c8:c3:27:62:c4:
8b:d1:ad:50:f7:94:2a:2f:0c:65:5d:0d:0d:bb:e9:
f2:51:82:e9:14:35:0d:06:6c:68:ea:e0:c3:d7:e4:
d9:42:e0:91:b1:24:b2:76:69:4c:25:b0:f9:5b:9e:
b0:fe:66:9b:de:52:b8:6e:00:76:6b:e0:2b:ac:8b:
8f:27:b6:1f:66:ea:19:36:b2:b1:be:9e:82:4a:0d:
c5:bc:ec:c3:ef:d0:8e:60:62:4a:bd:41:c7:e1:c3:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:B1:EC:7C:0E:54:73:54:C8:24:3E:F1:2A:AA:CC:25:D7:D9:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4319600AC41011EFB806EE69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.238.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:c1:2d:9e:9c:bb:0f:24:a4:06:7e:43:23:c4:ba:c5:be:f2:
77:c2:90:f6:ec:60:a2:de:5a:fc:94:28:65:2f:b1:c9:ca:8f:
4c:b0:db:a5:a1:fe:b9:c5:99:cd:14:ba:9b:ca:40:59:67:e8:
aa:1d:5b:9e:df:f3:35:1f:b5:25:03:40:11:f1:ee:0b:75:19:
3b:0e:47:b7:3b:ee:f6:7f:a8:d7:4b:9f:04:55:b1:09:90:9b:
69:e2:02:c3:2c:78:17:3b:96:02:ee:c8:ff:8d:b5:f7:5a:89:
0c:c3:c4:11:7c:20:03:8d:24:6e:35:d3:dd:83:19:85:0e:7e:
b8:78:55:58:96:8f:02:f4:c7:fe:df:0f:fd:36:21:66:11:e8:
22:47:2f:37:2e:61:2b:14:50:a7:46:42:03:c8:cf:92:03:3f:
58:92:64:fe:e7:60:8a:da:00:b2:72:0a:e6:c8:47:44:34:e4:
10:04:95:1b:2d:b8:ab:64:50:87:51:f5:69:06:a6:26:4c:23:
f0:40:b7:cb:f4:2e:45:a3:fd:96:85:ad:d5:88:f3:aa:80:d1:
8d:9d:d3:74:62:28:d5:b2:5a:a7:7b:59:e1:6e:db:a5:2a:c9:
4e:da:e9:6e:d7:66:76:d2:b7:d4:8a:a1:82:5d:fe:d6:a5:70:
e5:c5:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:27 2025 by rpki-client