Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4C004C1D011EFA2A1C784762E951A.roa
File: 52C4C004C1D011EFA2A1C784762E951A.roa (raw, json)
Hash identifier: OUL8HPiuu5gy9qOOtDUq2Wgu2GOMvvBW6DUZdxnLNE0=
Subject key identifier: E5:EC:A8:8D:3E:97:EE:DA:EE:3D:7B:3A:F3:D7:21:48:72:F8:81:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012299
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4C004C1D011EFA2A1C784762E951A.roa
Signing time: Tue 24 Dec 2024 08:23:16 +0000
ROA not before: Tue 24 Dec 2024 08:23:12 +0000
ROA not after: Wed 10 Dec 2025 08:23:12 +0000
asID: 984
IP address blocks: 154.193.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74393 (0x12299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:23:12 2024 GMT
Not After : Dec 10 08:23:12 2025 GMT
Subject: CN=676a6f74-d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:4a:c6:23:b8:a7:fb:45:c9:fa:fe:79:d4:
43:f3:49:fe:12:06:c7:44:c0:ac:e9:12:df:bf:6a:
6d:b1:c5:34:7d:90:b2:1c:4d:d5:9e:57:18:5c:c4:
84:94:ff:6b:c9:22:d2:52:4f:13:26:6c:f8:0f:65:
fe:84:90:85:c0:e0:06:ce:e2:a7:80:16:2b:63:0b:
52:bd:8c:20:c7:3a:55:81:df:6c:45:00:4c:fe:c2:
61:5c:11:13:74:e6:28:51:bb:ab:06:17:97:dd:1c:
b3:ff:b1:8d:80:ac:90:27:e8:d5:0a:8a:85:9c:32:
df:9c:a3:7a:eb:8f:db:bb:a3:78:39:74:ac:86:44:
6f:ce:f1:67:b0:cf:af:33:9d:be:42:2a:0f:9e:46:
7b:9f:4e:5a:22:02:da:7e:1b:f0:a1:b9:8c:77:f9:
68:fc:2f:9f:ff:bd:ec:2d:82:ce:fd:df:28:61:aa:
95:87:1e:b7:b2:11:e0:78:8c:da:95:73:22:80:57:
03:d5:1c:dc:e9:8d:0f:51:64:8b:f8:19:86:cd:17:
e8:12:a4:46:10:38:c8:e7:d4:21:7a:1d:e6:26:6c:
ba:81:0d:db:f5:26:27:3b:23:c7:06:c7:20:16:8c:
c0:00:13:00:8f:cf:fd:17:98:76:22:43:2c:cf:fc:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:A8:8D:3E:97:EE:DA:EE:3D:7B:3A:F3:D7:21:48:72:F8:81:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4C004C1D011EFA2A1C784762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b8:41:8d:65:3a:f2:88:1e:45:2a:05:b4:f1:40:dd:15:5f:
fa:87:7e:28:6f:e9:07:50:e2:c8:5f:01:70:55:eb:cf:12:cb:
cb:ea:43:88:1e:2b:fe:51:56:60:9e:30:de:47:9a:46:b6:5f:
53:86:05:e4:78:7b:d4:39:2c:0b:c7:61:d3:c4:ae:94:d3:a6:
c3:1a:34:af:b2:cb:4f:0f:f6:77:85:e1:16:47:eb:c9:c8:71:
8d:8d:3f:b1:bf:31:17:a5:75:19:17:e3:c2:f2:c3:01:5f:48:
a8:74:92:ad:7e:29:c1:f8:d6:35:9f:31:89:12:df:b5:7d:c5:
76:2c:1f:ab:df:a3:ca:2a:90:70:17:d2:aa:38:04:ab:7d:52:
ac:13:5c:2f:90:16:64:46:46:2e:4d:17:1a:af:0e:2b:34:fc:
33:dc:8f:27:34:d6:19:35:52:18:59:f0:fe:d9:c5:1a:94:e6:
42:5b:bf:53:d9:b0:64:05:fd:c1:78:25:f4:82:6c:4a:84:cb:
8a:f2:47:52:8a:1e:7a:c5:ef:2d:d8:a2:85:1a:76:dc:de:ca:
14:b7:46:7b:02:9c:c7:e1:11:4e:a0:e5:67:93:94:23:26:05:
0e:ed:d0:55:30:2c:36:61:aa:cd:92:b1:29:aa:63:9c:34:1d:
b1:aa:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:08 2025 by rpki-client