Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8ABCF6C1A411EF8997E16E762E951A.roa
File: 5B8ABCF6C1A411EF8997E16E762E951A.roa (raw, json)
Hash identifier: +Dy5s4MyhmNlqHNzEyVXFTm9KntT7NdfeYmPYKrw3GU=
Subject key identifier: 53:97:BA:1D:6C:8F:F6:EC:29:12:8C:91:5C:B1:B2:BB:88:FE:5B:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8ABCF6C1A411EF8997E16E762E951A.roa
Signing time: Tue 24 Dec 2024 03:08:33 +0000
ROA not before: Tue 24 Dec 2024 03:08:29 +0000
ROA not after: Wed 10 Dec 2025 03:08:29 +0000
asID: 984
IP address blocks: 154.92.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73947 (0x120db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:08:29 2024 GMT
Not After : Dec 10 03:08:29 2025 GMT
Subject: CN=676a25b1-3897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:8e:1e:f7:0a:5f:6c:68:9e:51:3d:73:1d:
5d:a1:e4:c0:07:0a:9a:e7:73:00:c9:ab:4a:66:7d:
ff:44:87:de:c1:9d:fd:03:0d:ef:9f:ad:c6:6b:b9:
a2:a6:1a:f1:bc:e1:4f:d4:06:5b:ee:b3:78:d2:10:
7e:73:f9:ff:b1:13:38:d1:c0:37:4b:80:72:a1:a0:
8a:0d:6c:6b:eb:ee:18:27:b7:b7:d3:94:b2:7c:11:
1b:77:51:7d:84:dd:37:68:03:e1:f3:54:e5:4a:ae:
75:68:8e:14:96:f3:7c:cf:5f:dc:18:e5:3d:d2:35:
2d:9b:30:04:33:d3:0f:a1:7b:b9:bf:4d:ac:00:a6:
6f:9e:e6:44:95:c6:7a:cb:6b:5c:11:b3:4e:7d:89:
01:03:77:bf:17:40:f8:37:4d:5e:23:f9:8c:d1:15:
32:34:2f:5b:a6:ff:53:66:b9:8b:86:a9:9b:32:8b:
6d:a5:49:2a:d8:e6:a3:bb:10:f5:bb:13:82:c1:65:
0d:32:20:36:fa:33:eb:08:02:6c:8a:37:ac:1d:e6:
2c:4c:e5:50:93:b7:ef:26:b3:7c:81:c6:a8:7b:2c:
5e:82:e7:f4:c3:23:d9:a1:01:5f:83:fc:97:17:2b:
40:01:42:41:e5:61:79:97:74:fe:ec:2e:7f:e9:0f:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:BA:1D:6C:8F:F6:EC:29:12:8C:91:5C:B1:B2:BB:88:FE:5B:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8ABCF6C1A411EF8997E16E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c8:77:28:55:ca:cf:46:ea:f2:0f:cf:29:c3:64:55:64:bc:
f8:7b:5c:24:d7:60:cd:cb:61:1b:e7:31:7a:3f:0d:65:43:8f:
03:e3:e0:44:de:75:fe:39:05:d8:59:a8:ca:1b:09:c3:ae:ba:
19:65:9b:4a:3e:ae:c9:5b:89:79:c6:ee:ed:22:21:f5:a3:4a:
77:4a:d6:2d:d6:9e:f8:e1:7c:fc:13:21:f3:d1:db:b3:bc:ac:
99:3e:e1:79:77:d1:72:82:29:8d:ae:7e:e9:4d:ce:f3:91:eb:
cb:76:cd:de:f1:a4:db:77:4c:be:d8:4c:28:85:cf:c3:84:54:
63:84:63:f9:b2:51:68:64:b5:23:5f:5e:0c:ac:86:f6:e1:7f:
94:fb:19:5b:95:ab:6e:de:17:10:7e:df:77:5c:ad:7b:1a:8b:
79:43:79:9d:69:43:0d:b3:f9:2c:94:9d:90:06:de:61:be:6c:
6b:23:ac:a0:cd:69:80:36:f5:29:43:75:f6:39:7b:4e:50:95:
65:8d:f2:02:be:ca:51:dd:9e:0e:e9:05:b6:51:f4:51:9e:93:
d2:2d:1b:7d:b6:9b:01:01:94:dd:46:18:96:fd:72:28:b8:d4:
b3:7b:e9:36:d6:39:b1:b6:d0:fc:a9:0e:48:cc:44:47:2e:fe:
47:60:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:05 2025 by rpki-client