Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5222480AC38411EF830F1D63762E951A.roa
File: 5222480AC38411EF830F1D63762E951A.roa (raw, json)
Hash identifier: rA5VN11jPeTT6B9X/nRy7NVMNAzzcYBFuT7G8CZcFNM=
Subject key identifier: 11:68:E9:B6:5F:BF:D4:7B:C4:ED:6B:D2:0C:EC:A2:D2:4A:F5:27:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012780
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5222480AC38411EF830F1D63762E951A.roa
Signing time: Thu 26 Dec 2024 12:24:15 +0000
ROA not before: Thu 26 Dec 2024 12:24:12 +0000
ROA not after: Fri 12 Dec 2025 12:24:12 +0000
asID: 984
IP address blocks: 154.94.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75648 (0x12780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:24:12 2024 GMT
Not After : Dec 12 12:24:12 2025 GMT
Subject: CN=676d4aef-38c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:4e:9c:14:d2:bb:e8:c4:18:74:41:dd:94:
d1:9e:1e:0a:35:f3:a6:ec:21:d2:64:ca:bd:9d:87:
21:50:12:59:fd:3d:0f:a3:a1:72:39:a1:32:47:8f:
c2:1e:b7:be:6f:7b:ff:70:3a:de:18:cb:43:f3:d0:
35:c1:2a:f1:97:1d:d2:5d:51:59:68:8c:be:cb:ad:
bd:ed:d5:a4:89:90:91:93:e7:a7:58:1d:d3:0e:65:
01:3a:88:b6:41:21:fd:af:dd:53:f9:66:6c:be:fc:
ad:52:40:93:d6:09:82:98:93:08:05:f2:23:e4:ab:
17:06:51:c8:f1:82:4b:d4:cc:76:9a:19:d0:91:ea:
3b:96:f0:9b:d3:b1:85:3f:c2:c3:61:e2:40:4c:82:
47:cb:2a:45:f0:a3:69:f8:da:69:3c:2e:fb:9e:8b:
45:2e:97:95:90:73:fb:8d:1f:6b:33:c0:49:28:61:
e5:bd:11:ad:0c:b5:79:58:31:98:a6:dd:f6:03:61:
d5:55:bd:48:a5:84:ff:2c:79:a3:33:3d:89:8c:3c:
44:ae:69:a0:90:dd:58:46:80:93:83:9b:3b:ee:be:
de:b1:5b:46:b1:98:5b:d2:32:9b:7b:5e:4d:64:83:
7b:26:d6:23:e8:70:20:da:7e:6e:a0:e3:92:4b:d3:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:E9:B6:5F:BF:D4:7B:C4:ED:6B:D2:0C:EC:A2:D2:4A:F5:27:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5222480AC38411EF830F1D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:43:c5:cd:ff:bf:95:7e:90:3c:34:95:4e:70:7c:06:2b:de:
b7:8c:f3:e7:8e:43:4d:1f:d3:9f:7a:10:22:2d:46:8f:80:35:
fc:6f:b9:85:56:a9:db:33:69:99:aa:fd:f4:0a:d1:7c:4d:33:
95:cc:bb:51:41:e6:e2:87:f2:15:d9:4e:af:02:d6:e9:18:d8:
9b:92:5e:97:38:39:5c:74:82:66:ef:dc:ce:94:d9:00:f2:23:
7c:16:9b:16:e6:fc:c2:71:b9:09:0b:6f:cb:44:8b:17:9f:6e:
52:07:4c:f3:5c:db:e3:26:ed:f3:bb:40:ad:0d:ec:6d:f6:23:
e2:85:2c:2a:30:e9:94:58:bf:9b:2e:90:e7:39:7b:6e:d7:0c:
18:c1:87:fa:df:89:ee:fb:f0:51:36:bb:2c:70:fc:cf:b5:d3:
38:82:94:e1:d7:27:0d:70:91:41:38:f2:ed:f1:f7:a8:7a:37:
2e:e5:ae:11:f2:5f:0f:da:b2:82:f7:a7:1b:dc:96:98:7a:1d:
72:73:ac:ac:bb:44:cd:c7:5e:fd:88:0d:0a:19:a4:aa:47:4c:
d7:13:38:4a:15:58:76:95:0c:8b:1b:be:04:b2:d1:08:25:cc:
51:72:12:46:a7:ce:0b:56:a2:60:b0:59:62:22:43:f6:d0:ba:
6d:7c:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client