Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A6E654EC3C911EF80252C94762E951A.roa
File: 5A6E654EC3C911EF80252C94762E951A.roa (raw, json)
Hash identifier: Yo97fRtu/fLAqYOQz96Gzsmm8JHi40TK3W+UrmDxiCU=
Subject key identifier: 06:20:58:3E:9B:24:E0:2A:47:A5:7A:F8:17:CF:C8:9D:98:71:65:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A6E654EC3C911EF80252C94762E951A.roa
Signing time: Thu 26 Dec 2024 20:38:25 +0000
ROA not before: Thu 26 Dec 2024 20:38:21 +0000
ROA not after: Sun 12 Dec 2027 20:38:21 +0000
asID: 17561
IP address blocks: 154.83.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75762 (0x127f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:38:21 2024 GMT
Not After : Dec 12 20:38:21 2027 GMT
Subject: CN=676dbec0-e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:cc:cc:e4:6c:51:b6:71:ce:67:01:fb:73:
ab:35:a8:38:b4:23:48:f3:aa:8b:da:d0:ae:5a:cc:
c1:e7:75:f2:c4:18:d7:10:94:3e:21:3b:74:f4:05:
ff:31:1d:cb:89:e8:30:2b:4e:d6:88:d8:ee:c5:6a:
df:34:52:ab:17:9f:91:d8:ad:1c:10:09:b4:b5:4a:
c1:c2:fd:5e:67:d3:fa:0f:f4:ce:67:16:a2:fb:4c:
af:a8:8e:dd:9d:c8:7e:ae:90:fc:93:aa:56:c4:98:
57:44:f6:4c:17:3b:96:31:82:1e:3f:09:83:61:2e:
26:e3:ba:af:43:95:58:1b:79:67:e2:0d:34:02:74:
ca:df:b3:df:78:a4:b6:4c:00:1e:27:ca:83:ee:d5:
cc:4e:74:4f:35:fb:c8:27:bf:43:68:3d:e6:5d:99:
f4:01:cc:df:01:e6:c1:83:b5:0f:91:4e:5e:c7:21:
81:69:44:a0:7c:ac:5b:2b:f9:30:70:05:4d:f4:19:
be:ce:f3:4c:5e:f9:f8:84:52:fe:5e:f6:82:13:ad:
2a:46:d9:5f:83:34:8e:1e:8e:a9:0b:99:89:50:ea:
d8:67:57:95:d6:d7:03:f0:bb:93:2a:c8:be:56:70:
ac:8f:94:09:bd:2a:1a:e0:86:25:62:98:fc:79:ca:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:58:3E:9B:24:E0:2A:47:A5:7A:F8:17:CF:C8:9D:98:71:65:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A6E654EC3C911EF80252C94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.142.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:ed:ef:e4:92:26:db:83:5f:1b:bb:44:51:f5:03:7c:f0:
3f:60:48:30:62:c7:16:f1:33:3d:00:0f:25:49:2a:05:43:41:
98:ce:5c:2a:43:74:b6:85:3c:4d:c9:64:6f:d7:ab:9b:0b:e7:
86:a8:4a:6a:9c:98:1e:86:f4:8f:af:d7:40:b9:47:91:46:3d:
d6:dc:92:01:81:ad:e3:be:ab:36:44:5c:0c:9f:7d:f2:f9:96:
cc:3a:b0:b2:67:a2:07:ed:0f:93:5d:58:b2:bb:4a:65:01:8a:
b7:ae:8c:14:c9:db:ca:5e:0e:84:c9:17:60:eb:e3:6a:cb:b1:
21:c9:5c:5a:17:e8:8c:da:3c:23:a2:91:63:c7:14:9f:1f:91:
4b:67:fa:13:90:59:36:b5:2f:bf:66:2b:66:30:50:c2:4c:2d:
23:aa:a3:b2:64:34:91:6d:d7:88:3f:85:e3:2f:40:c5:03:ec:
c5:fd:fc:52:dd:53:2f:36:20:33:46:9a:3f:b0:be:33:cb:6a:
33:39:c2:47:96:1c:69:fc:bd:06:75:dc:10:b5:31:11:e0:a2:
72:5e:b0:3d:75:ec:52:b1:42:ba:a5:40:28:21:d7:63:4c:0f:
93:62:5b:fe:83:51:94:4a:f6:17:6b:fc:0e:4e:e7:32:86:1c:
86:d4:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:58:08 2025 by rpki-client