Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47002434C51D11EFBBCAC589762E951A.roa
File: 47002434C51D11EFBBCAC589762E951A.roa (raw, json)
Hash identifier: XxsJQs4QmxROOe88wXXQlVmV9YvwaGEPIQQoG7XXFEc=
Subject key identifier: 23:BD:7C:D1:35:91:0F:07:B6:13:9E:BD:01:98:A9:DE:14:CE:4D:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47002434C51D11EFBBCAC589762E951A.roa
Signing time: Sat 28 Dec 2024 13:11:41 +0000
ROA not before: Sat 28 Dec 2024 13:11:37 +0000
ROA not after: Sun 12 Dec 2027 13:11:37 +0000
asID: 17561
IP address blocks: 154.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76597 (0x12b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:11:37 2024 GMT
Not After : Dec 12 13:11:37 2027 GMT
Subject: CN=676ff90d-2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:27:af:25:6b:e7:ad:65:57:8a:90:78:63:
ec:0a:45:ce:f3:c5:d0:19:04:6d:1a:2a:ec:df:10:
49:f1:12:cf:c7:94:5d:63:c3:f3:78:26:e3:12:3c:
cf:53:b3:65:c6:be:d7:64:48:b6:5b:75:7e:aa:06:
c9:97:1a:90:10:ba:62:e8:f7:33:9b:0c:1c:ce:d9:
61:00:0a:89:2e:1c:79:a0:61:1e:30:a3:f0:2b:a7:
4b:87:47:fd:22:fd:9b:7e:bb:39:87:c9:88:0b:0b:
fa:f5:f6:80:94:b6:67:27:d9:a8:15:15:c8:34:c0:
5e:6b:3a:d9:bc:2d:e4:f4:da:37:b0:4e:80:5a:86:
2e:e9:5f:3c:3e:b9:d1:e7:94:a4:c2:ff:e2:2b:01:
58:c2:f9:25:82:5f:6e:38:3c:9f:6b:75:56:1b:db:
51:bf:7e:7e:6b:a5:f4:26:eb:9a:0b:03:4e:43:6b:
2c:f5:24:ed:83:8c:cd:88:78:75:13:10:15:27:65:
5c:90:5b:bf:f3:63:b0:3e:78:1e:ac:29:b2:77:c2:
25:68:1b:ae:ea:ab:0b:e0:21:0f:37:59:f8:71:a1:
0c:87:2f:87:af:5e:fb:c0:11:a9:99:19:33:87:16:
29:e0:64:85:30:fb:73:17:7e:59:1e:bb:d6:a1:d8:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:7C:D1:35:91:0F:07:B6:13:9E:BD:01:98:A9:DE:14:CE:4D:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47002434C51D11EFBBCAC589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
81:df:12:68:b1:e6:77:68:ca:a0:5f:90:b3:f0:47:4a:c2:92:
4f:fa:4f:2d:0f:f7:93:44:ff:d6:60:92:0d:43:13:c7:2d:bc:
81:e0:6b:54:94:92:82:89:3a:31:cb:e8:b2:d0:21:44:64:dd:
54:37:39:04:ed:94:6a:b1:34:87:12:cf:f3:6b:fa:15:9b:e1:
3c:e7:ad:25:7f:05:33:54:1f:79:46:75:1f:81:41:10:01:e1:
18:65:d0:f6:bf:1d:a9:42:29:3b:e5:3a:f5:d5:ad:74:4c:df:
2a:47:fa:f4:4d:98:e5:31:4d:90:a4:3a:16:9b:c8:b9:6c:e5:
f4:29:bb:71:65:28:92:99:1e:cd:b7:4c:ad:01:42:87:99:75:
16:bf:68:1d:33:5c:c0:72:85:a5:77:33:72:79:32:a6:1e:10:
8f:da:df:60:f7:df:33:32:c1:6b:01:c7:2f:8d:a7:a7:21:fc:
16:9d:29:5e:da:69:1f:25:8e:57:62:cd:b3:01:3d:5b:fe:0b:
28:e6:90:73:25:56:45:93:39:8c:8a:aa:e3:56:93:f7:ea:92:
52:cf:9a:9c:29:a0:04:45:43:f8:02:c4:1b:ae:17:fc:9e:e5:
fd:a9:76:2e:68:02:4f:3f:76:7d:8d:2e:b5:80:4f:8e:dc:0b:
e6:2f:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:40 2025 by rpki-client