Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A44693AC62411EF8EC47F89762E951A.roa
File: 5A44693AC62411EF8EC47F89762E951A.roa (raw, json)
Hash identifier: F7VmsBWDHltxXaZBYhE/G8qwsYlxbHTrqIjXYwZpmb0=
Subject key identifier: 09:4A:CD:C2:91:57:1A:E4:5C:9F:AF:E2:8F:46:60:ED:BA:9D:D3:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A44693AC62411EF8EC47F89762E951A.roa
Signing time: Sun 29 Dec 2024 20:34:51 +0000
ROA not before: Sun 29 Dec 2024 20:34:47 +0000
ROA not after: Sun 12 Dec 2027 20:34:47 +0000
asID: 17561
IP address blocks: 154.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77704 (0x12f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:34:47 2024 GMT
Not After : Dec 12 20:34:47 2027 GMT
Subject: CN=6771b26b-4ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:4c:93:52:b6:88:ab:89:12:3b:97:81:86:
cc:89:1e:d2:99:40:d5:42:20:14:fa:9a:41:33:ee:
ad:49:cf:4b:46:4c:8a:e5:6e:d0:1a:bb:6e:25:dd:
a8:70:b9:cf:33:24:be:3a:c5:38:30:34:d9:85:d0:
09:de:8a:ec:01:ca:70:41:69:3c:a5:1b:e3:dc:74:
00:5b:2b:52:58:f8:58:c6:a6:be:1f:83:f3:62:cb:
d2:fe:c1:3e:18:11:0e:00:91:ab:59:13:2c:d2:cb:
28:8b:db:65:0c:f7:62:68:e4:a3:85:3b:eb:e7:4a:
c7:96:eb:3a:68:2b:7b:77:58:60:a0:47:e7:d6:2a:
21:99:c6:07:e1:88:12:4c:d1:6d:8e:4a:2a:c4:d7:
4d:49:19:97:14:dd:fe:7c:42:0c:ee:a6:e0:89:e5:
26:c9:cb:02:90:de:73:0b:3d:9e:48:b1:8b:e2:82:
54:07:f5:0a:54:ed:54:21:ba:01:84:85:81:ed:a1:
76:2c:7b:43:2d:85:55:0c:a2:d1:9f:37:25:97:ee:
e0:db:d8:5d:49:75:cd:b6:7f:ba:87:0f:db:cf:34:
3f:f8:91:79:f7:43:61:c4:d0:c8:aa:f5:fe:11:25:
bc:0a:62:78:35:13:25:5c:ac:30:82:fb:28:1f:cc:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:CD:C2:91:57:1A:E4:5C:9F:AF:E2:8F:46:60:ED:BA:9D:D3:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A44693AC62411EF8EC47F89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:3e:ea:72:5c:be:90:17:5c:c9:a2:cd:d3:5d:50:6a:92:bb:
76:34:0c:4d:2d:0a:af:b3:4e:d2:b3:5a:b0:a7:13:30:ed:3e:
70:10:f6:13:cf:ee:c7:63:91:a6:34:dd:07:61:ef:b2:2c:f4:
83:c9:e5:c9:65:bd:c4:20:bf:3b:84:d4:fb:43:e3:21:ca:e1:
26:53:e5:01:e8:20:f7:2a:99:4e:1f:d1:22:55:2f:f3:a0:4b:
07:40:45:72:b9:ba:19:32:02:9e:3b:89:30:24:11:cc:cf:b9:
47:86:5a:42:48:02:01:ba:a3:e1:03:14:67:31:fb:4f:9d:b6:
ce:4c:a1:38:f1:10:8c:a8:df:80:fb:2e:ac:1a:8c:5e:60:b8:
f7:df:ee:a5:46:56:46:80:1e:49:5b:b0:06:ae:08:e3:35:56:
f4:16:21:e7:a2:5d:29:55:37:e7:f0:2b:e1:66:06:e8:fe:50:
b5:44:60:71:0a:d2:71:aa:04:c6:4f:2e:6b:b6:9d:fb:b2:ef:
62:1e:d1:08:39:00:e6:6e:b0:c0:6d:b2:69:9c:b5:56:0c:9a:
1e:b0:77:fd:33:3e:d3:ac:34:22:5d:2f:10:4a:11:26:90:00:
82:ab:2e:6d:c4:49:db:38:5e:40:6d:41:a5:b2:fc:e3:a4:79:
e1:50:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:14 2025 by rpki-client