Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC516C2CF6211EF8EF74E61762E951A.roa
File: 4DC516C2CF6211EF8EF74E61762E951A.roa (raw, json)
Hash identifier: o8W0EebT4yd0/n12dN8Bj8D9IiCsu4Fc9OcjOolg9n0=
Subject key identifier: 9D:98:2B:1E:BB:6A:58:9E:81:80:D1:7A:67:F6:FF:A7:D7:FE:0E:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC516C2CF6211EF8EF74E61762E951A.roa
Signing time: Fri 10 Jan 2025 14:50:59 +0000
ROA not before: Fri 10 Jan 2025 14:50:56 +0000
ROA not after: Sun 12 Dec 2027 14:50:56 +0000
asID: 17561
IP address blocks: 154.81.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80409 (0x13a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:50:56 2025 GMT
Not After : Dec 12 14:50:56 2027 GMT
Subject: CN=678133d3-1cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:b2:38:5a:d6:b0:a4:3e:d5:ee:c0:1d:d6:
de:60:65:55:68:4b:e1:ba:15:8b:09:cd:2b:5c:08:
46:07:f2:92:de:c6:ec:51:7c:a5:9b:9e:db:53:55:
d9:54:4e:1b:7b:5a:0f:80:76:2e:60:f3:8f:c9:1f:
dc:14:16:90:2c:81:48:c2:30:07:6d:60:2c:e1:be:
de:98:f4:0d:d6:86:d0:fd:50:7b:3e:cb:00:e9:56:
91:12:5e:cb:5b:6c:c3:be:fd:ad:3a:98:84:0d:2d:
47:e6:26:85:f4:bb:58:d6:5d:67:0d:e3:69:ea:12:
f5:72:e8:12:a8:d1:3c:d0:56:a1:59:37:76:33:69:
72:cb:ef:39:73:7e:4e:ab:be:ea:0e:8d:a0:98:8f:
21:80:22:32:60:9c:58:a0:11:64:f3:85:07:d0:1c:
00:01:ee:42:21:f0:07:55:02:3a:c7:a6:61:3d:f1:
2c:49:93:b8:29:04:d5:b3:f9:85:f7:c5:24:87:f8:
50:66:b5:ce:00:78:ac:30:56:3a:45:0a:bf:f6:95:
1e:fa:56:35:b8:c1:07:3b:35:56:0a:3a:2a:85:e5:
6c:83:0b:ee:43:f2:00:cf:35:ab:d5:64:68:46:94:
4b:f2:84:70:c3:41:86:fd:f3:d5:1c:e7:18:4c:ec:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:2B:1E:BB:6A:58:9E:81:80:D1:7A:67:F6:FF:A7:D7:FE:0E:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC516C2CF6211EF8EF74E61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.144.0/24
Signature Algorithm: sha256WithRSAEncryption
73:34:4a:a3:e2:46:17:eb:22:5d:5b:94:68:f0:9b:8b:0e:d0:
da:34:8b:db:91:4e:79:4b:7e:e0:5a:bd:98:b3:33:39:b1:c3:
db:59:4a:6e:b7:db:07:bc:ea:f7:7f:84:26:78:e4:1f:8c:bc:
9e:c8:57:d2:f5:a7:d9:04:e1:de:de:07:87:db:b6:35:8b:03:
57:d8:ef:d4:67:f4:17:e2:4e:ff:6d:96:82:ba:77:02:93:87:
b2:3c:47:c2:41:d5:92:7e:8e:a3:8b:88:48:82:23:b0:4d:04:
a1:6d:78:1e:66:da:05:d7:a7:43:db:ce:23:04:2f:f6:20:64:
bd:39:d2:00:4b:5e:40:c8:ea:63:6e:ec:aa:17:b5:18:2f:4e:
12:ea:be:96:42:0c:15:42:88:e7:6d:cc:9e:72:cf:a7:8c:a4:
e2:11:53:9e:47:87:f1:17:d1:ca:bd:d5:64:5f:a7:20:87:76:
e3:ed:82:fd:cf:82:1d:a1:41:a3:b0:a4:32:d9:cb:49:16:39:
a8:37:7b:0e:15:a5:02:83:ac:8c:65:35:5e:61:78:a4:a3:6b:
8c:43:73:02:23:0b:d3:2b:fb:47:64:4c:dc:b7:bf:60:25:d4:
78:54:50:dd:e8:ed:a5:50:4a:1a:a8:ed:21:3f:cf:7c:d7:da:
f5:46:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client