Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBFD926C1D611EF9D2B5BAA762E951A.roa
File: 5CBFD926C1D611EF9D2B5BAA762E951A.roa (raw, json)
Hash identifier: n9cG7naIRzSvGX0lgyAY6efoSyZx2xidnLns6gCp88Y=
Subject key identifier: C2:28:3B:AF:8A:B9:05:EE:A7:1D:74:B8:F5:01:FD:B3:27:92:99:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBFD926C1D611EF9D2B5BAA762E951A.roa
Signing time: Tue 24 Dec 2024 09:06:29 +0000
ROA not before: Tue 24 Dec 2024 09:06:26 +0000
ROA not after: Wed 10 Dec 2025 09:06:26 +0000
asID: 984
IP address blocks: 154.194.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74443 (0x122cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:06:26 2024 GMT
Not After : Dec 10 09:06:26 2025 GMT
Subject: CN=676a7995-0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:d4:55:73:b0:56:9c:d4:97:bc:5c:12:73:
c1:54:6e:03:97:ae:17:bb:29:e8:58:76:89:73:d9:
d4:40:99:78:4c:d1:f7:bc:37:39:20:5c:1c:e2:ae:
41:56:ca:12:e1:62:ca:2c:b3:4c:77:33:8e:11:11:
ef:f1:4d:2c:b6:ab:0f:8f:f9:93:32:c9:81:48:6f:
24:3d:c2:7a:f3:f8:15:c7:bd:9d:11:fe:8b:2e:26:
04:29:e9:a6:f2:68:46:d4:bb:c4:4a:06:7b:f7:c2:
3c:78:e3:45:84:39:53:69:48:04:51:04:0f:24:0c:
bc:7d:8c:b8:cc:ec:05:5a:ac:eb:32:fd:3a:a1:c4:
bf:dd:71:df:b3:56:dc:c2:c3:61:34:5d:66:9a:c5:
be:24:9a:2e:0b:b5:92:3c:b6:ef:22:8b:dd:be:2d:
a1:3c:30:8c:c0:f0:f2:09:32:2a:dd:f3:ce:a1:88:
96:09:5a:31:52:b0:23:3f:9a:f0:d7:84:ff:cd:2f:
3f:2c:3c:bb:5b:06:e2:db:88:79:d3:0d:29:ec:01:
f2:0b:8b:14:14:5a:c1:87:c8:66:81:7d:22:3f:74:
76:2c:06:87:6f:f5:97:e4:40:3f:46:b8:f3:fc:32:
a1:82:ab:a7:18:88:bb:ef:10:0f:a2:a8:8b:2d:cf:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:3B:AF:8A:B9:05:EE:A7:1D:74:B8:F5:01:FD:B3:27:92:99:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CBFD926C1D611EF9D2B5BAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.218.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c1:83:5d:fd:95:39:92:a0:08:01:87:ab:fa:4a:c8:75:ef:
75:a6:17:08:10:b6:28:29:ed:43:83:84:1c:d3:ec:dd:d6:37:
8b:8f:4d:0d:0f:bb:ea:75:86:ed:7a:b8:d6:6f:97:94:2a:4f:
50:d6:f0:80:20:19:9e:73:9c:77:92:e1:9a:a3:17:3a:4a:bb:
7c:ef:1e:34:44:15:6f:db:33:ad:0e:4e:c9:3f:88:6d:ba:d9:
37:fd:04:26:df:92:79:67:90:99:88:41:8e:ed:c9:6c:c5:c7:
5f:39:0b:86:eb:78:58:f9:d7:1b:ed:d0:5f:34:fe:d2:3f:ae:
02:8d:ff:f4:56:4f:68:08:e2:40:f7:2a:a9:b1:a5:a3:00:75:
9c:ba:d4:66:47:35:28:ed:f8:ea:ba:7a:7a:3f:33:66:5c:26:
f4:fe:f8:6b:6b:57:09:27:07:25:0d:21:d3:75:17:99:cb:f5:
18:81:ea:a3:cb:97:c7:cb:4f:0d:96:75:f7:8e:03:2d:12:cc:
0d:ea:02:8a:84:b6:cf:ff:f1:09:31:86:aa:b0:12:4f:8e:e3:
ef:83:57:6d:2e:62:53:cc:d6:b3:89:43:5c:44:10:5e:1a:51:
b6:0d:8e:c7:d0:f0:0e:68:6e:69:6c:8e:b7:f5:94:bb:d3:c0:
2f:af:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:16 2025 by rpki-client