Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A013B66CDD511EFB3FFDF7E762E951A.roa
File: 5A013B66CDD511EFB3FFDF7E762E951A.roa (raw, json)
Hash identifier: s5voZX6DS05UAOkfCIf7fZA4pMJkg/J/i0Cd/e7On0g=
Subject key identifier: 8F:3D:4B:07:2E:3A:C4:08:FB:CA:92:D8:2C:1D:5D:93:10:A7:48:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013765
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A013B66CDD511EFB3FFDF7E762E951A.roa
Signing time: Wed 08 Jan 2025 15:29:29 +0000
ROA not before: Wed 08 Jan 2025 15:29:26 +0000
ROA not after: Mon 03 Jan 2028 15:29:26 +0000
asID: 17561
IP address blocks: 154.88.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79717 (0x13765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:29:26 2025 GMT
Not After : Jan 3 15:29:26 2028 GMT
Subject: CN=677e99d9-2985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:da:b6:2e:9c:3f:fd:07:d6:ce:f5:20:9a:
76:42:0c:8f:77:7a:48:fd:4e:7a:06:64:0e:d7:46:
18:1a:46:07:d7:0f:d2:fc:81:3b:17:0b:f7:69:4a:
f4:67:0c:5d:03:bb:c7:d7:67:6c:a4:dc:db:0f:13:
d4:61:27:4b:f0:19:7e:98:e1:e1:ec:62:9a:cf:06:
ff:00:c5:d8:ba:71:15:db:82:0e:a8:2e:b3:10:8a:
b6:d0:50:ca:d0:5f:9b:53:1a:16:d4:c7:99:d1:e4:
f4:54:16:79:6f:8c:55:63:6f:70:ab:12:cc:7e:84:
d1:5d:7a:dd:b2:d6:5a:78:58:9c:55:ee:dc:98:7f:
d2:58:17:06:8a:9b:51:1e:34:df:bd:e1:35:f7:05:
6d:4c:e1:a8:d8:65:22:04:59:19:85:32:25:5d:9c:
35:be:99:9f:15:88:9d:b2:15:7b:98:4f:16:a5:09:
0e:c4:ed:de:2c:1e:26:7e:7c:0c:28:5c:99:45:80:
53:2a:bb:31:3c:1c:87:b8:f8:f3:d8:d2:a9:2a:94:
ff:b9:d6:ac:72:44:45:7d:2b:19:7f:91:b6:b7:f9:
be:db:94:83:3f:f8:e8:b8:45:0c:04:51:5b:4b:a6:
70:d6:43:02:76:25:f7:1d:47:e8:d7:77:ed:65:b9:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3D:4B:07:2E:3A:C4:08:FB:CA:92:D8:2C:1D:5D:93:10:A7:48:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A013B66CDD511EFB3FFDF7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.34.0/24
Signature Algorithm: sha256WithRSAEncryption
63:60:55:6b:4a:43:7a:22:e4:98:d2:f9:5d:b0:43:5c:33:ec:
c9:ca:df:fa:0c:96:99:ed:d1:16:58:f6:29:5c:fa:49:af:db:
67:f0:5b:ad:53:fc:4b:bf:2e:1f:26:48:bc:78:01:2a:c2:a5:
99:79:9b:db:d7:08:d1:07:85:cc:81:e2:96:37:30:37:66:b7:
b6:ae:5b:d6:5a:5e:11:9c:2f:c9:e4:c3:f4:d0:81:88:ab:63:
6b:bf:77:61:aa:6a:8f:52:29:25:b5:10:57:61:ca:8f:10:1b:
e8:ae:12:c5:80:ea:6e:f9:0d:74:a5:08:20:4f:6f:93:30:cb:
fe:30:19:8b:5c:60:49:e7:60:b4:22:20:f9:21:fe:58:4e:30:
09:89:4f:fc:54:16:7f:c9:0d:10:56:d2:f4:19:5a:00:33:f6:
97:b0:9b:c5:b9:7e:ee:e3:c5:60:41:52:3a:bf:c6:bb:83:5e:
e9:ed:48:28:84:24:8a:ce:ba:ce:31:a2:de:bd:0c:b6:41:c9:
cd:d6:a1:fe:8e:0d:76:4e:30:bd:40:ca:7f:bb:45:06:d2:1d:
bb:52:95:1c:94:11:02:d2:73:e8:b1:65:5b:f2:3a:02:d8:0f:
44:e8:2f:69:82:fd:a2:60:15:a9:91:21:73:f9:5b:d0:ff:54:
c8:1e:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:05 2025 by rpki-client