Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52732014C52211EF8987DDA7762E951A.roa
File: 52732014C52211EF8987DDA7762E951A.roa (raw, json)
Hash identifier: YSQ4Ypr54k4Ib6lbzfsZw0iaWR2hy3uimtfGIeigC30=
Subject key identifier: D1:6D:FF:75:86:4A:B5:1B:27:9F:05:49:2D:E6:BA:42:06:1A:C6:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52732014C52211EF8987DDA7762E951A.roa
Signing time: Sat 28 Dec 2024 13:47:47 +0000
ROA not before: Sat 28 Dec 2024 13:47:44 +0000
ROA not after: Sun 12 Dec 2027 13:47:44 +0000
asID: 17561
IP address blocks: 154.203.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76643 (0x12b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:47:44 2024 GMT
Not After : Dec 12 13:47:44 2027 GMT
Subject: CN=67700183-4d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:6f:dc:26:63:53:02:78:cc:c4:5d:f8:6b:
f9:8e:ad:fa:21:4c:eb:77:54:2c:2b:d8:06:25:39:
ab:54:a8:35:47:a7:db:d0:69:5f:5c:fa:21:c2:47:
e9:c6:4a:e2:ac:e3:76:32:1a:d8:d0:ff:c7:62:5a:
df:86:a5:df:2f:31:06:90:a8:24:e3:15:81:9b:54:
bd:cf:6e:74:46:4d:a4:22:35:aa:f2:5a:7f:4d:97:
7b:1a:2c:50:28:8a:bb:cc:b9:39:b9:b6:49:d2:ce:
1f:e7:fd:7c:9c:9b:94:df:4f:94:e3:3e:3e:b4:bd:
bf:64:0e:9a:dd:57:4f:6d:4a:3e:e7:a2:8d:04:46:
58:b3:71:0a:c8:7e:16:45:58:7f:bd:44:3e:ef:b9:
af:6e:fa:ae:d8:c2:cc:01:c5:ea:02:aa:26:a6:fd:
2f:75:5d:be:ee:fd:e4:2f:82:ef:2a:55:a7:b0:b0:
d6:6a:1d:39:86:83:0b:6c:cc:ac:b5:47:7f:9a:38:
59:fc:0c:85:83:e2:e5:70:43:a5:28:8b:af:a4:73:
a2:20:7c:30:ab:76:ca:54:a9:b0:28:db:ac:68:33:
9f:e3:f4:29:9a:1d:4a:01:8a:4f:7c:9a:cb:7e:83:
a7:15:f5:08:00:27:53:e2:0d:5a:0c:36:fd:bc:ca:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:FF:75:86:4A:B5:1B:27:9F:05:49:2D:E6:BA:42:06:1A:C6:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52732014C52211EF8987DDA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:9b:f7:3b:36:bb:a5:ca:43:7d:9d:2a:29:df:94:9a:99:
ee:fb:65:4d:73:23:2e:2e:3c:44:c4:18:a9:5a:42:71:29:e5:
d8:b3:12:8d:70:f4:b8:da:02:22:5e:98:8b:0b:c0:9d:38:67:
23:c8:c9:5a:d3:70:99:2b:5b:9f:c6:a2:fe:1c:1d:1e:f3:3d:
72:fc:a0:6f:bc:27:d4:5f:6c:24:cb:64:3a:c3:0e:04:6f:40:
cc:62:b6:23:99:e4:eb:45:ab:3e:27:c1:05:3f:a4:ac:a1:79:
d7:ad:1a:8e:40:15:ff:ba:3b:d8:d9:9a:7e:08:1c:56:2b:db:
15:1a:6d:07:ae:f3:ad:b3:7c:56:06:19:e0:1c:4d:48:bd:32:
34:ef:59:ae:dd:c4:ab:c5:4e:45:5b:59:d6:92:b7:af:a7:25:
21:8e:34:93:e5:30:15:b8:8b:ec:98:aa:b1:ce:57:20:09:4e:
f9:10:3a:7d:b6:41:a2:c1:cf:3a:d8:c0:57:d5:87:46:46:e2:
dd:2e:f6:ed:d1:e6:20:82:70:a1:3e:15:12:3f:ce:3c:b9:74:
9f:b0:e5:97:78:6a:29:78:6d:bd:b6:fb:a3:50:e0:41:34:66:
e6:97:b4:e1:4b:56:b7:ce:f9:cd:cb:60:61:e7:fa:4f:96:d5:
61:dd:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:35 2025 by rpki-client