Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B924304C90F11EFB56EFB9E762E951A.roa
File: 6B924304C90F11EFB56EFB9E762E951A.roa (raw, json)
Hash identifier: EWlNxvfS9EZnE024DBntCGLG8zZbHMDSp3bD8RoK+ys=
Subject key identifier: 4B:77:0C:F8:FE:9B:B9:9E:FA:12:D8:FC:F1:B6:A7:53:0B:3F:33:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01329B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B924304C90F11EFB56EFB9E762E951A.roa
Signing time: Thu 02 Jan 2025 13:42:34 +0000
ROA not before: Thu 02 Jan 2025 13:42:30 +0000
ROA not after: Mon 13 Dec 2027 13:42:30 +0000
asID: 17561
IP address blocks: 154.221.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78491 (0x1329b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:42:30 2025 GMT
Not After : Dec 13 13:42:30 2027 GMT
Subject: CN=677697ca-ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:f1:fb:55:eb:33:bb:07:3b:36:f4:44:6e:
37:d6:c0:9a:e0:47:5d:53:bd:23:b9:5a:90:92:dd:
0e:f0:03:da:c8:88:2d:d3:6b:cd:89:cd:52:0a:cc:
49:2c:8c:12:f5:19:92:2b:bc:64:40:04:ea:08:76:
11:be:92:66:37:e4:12:64:81:f1:0c:45:e9:e5:eb:
4b:e5:3e:74:22:62:3d:e4:a2:f3:7b:c2:e4:23:63:
26:a9:93:6c:e4:d0:e8:04:07:7d:4b:0f:3f:d7:bf:
72:6e:9e:82:ad:1c:4c:40:d9:2f:c4:53:2b:74:06:
91:a0:0d:6f:8f:3e:da:33:f7:4d:3e:dd:0e:28:58:
06:65:79:79:e9:c1:c4:dd:51:f8:1d:93:f3:45:e3:
19:45:2b:80:86:cc:d3:d1:b9:e9:05:e4:6c:9c:a4:
e6:c2:5c:09:9d:67:ed:45:a9:52:9c:11:10:19:08:
a3:77:73:ed:65:78:23:d7:f4:d7:f2:12:90:95:00:
f8:37:12:73:c2:23:0b:2d:cc:c6:a0:a6:1b:66:34:
3d:84:92:05:7a:e5:0f:a0:d1:50:4d:4a:52:de:7f:
8e:a7:e9:f0:dc:1e:2c:1b:6f:54:78:41:8c:e9:a3:
6f:32:7e:ad:ce:ed:13:90:83:d9:b4:ce:96:9b:00:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:0C:F8:FE:9B:B9:9E:FA:12:D8:FC:F1:B6:A7:53:0B:3F:33:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B924304C90F11EFB56EFB9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:34:79:23:c6:de:f8:bb:8b:fd:1d:59:6c:e8:f7:22:71:f3:
13:80:74:bb:6d:69:1d:57:11:cf:86:16:80:c9:fb:30:7f:74:
d8:db:2e:4b:cf:01:f1:ec:cc:19:7d:70:62:53:77:7d:0c:07:
65:7a:10:06:b7:6f:1f:6d:64:c1:87:ca:dc:a3:1f:61:d4:95:
37:25:bc:6c:df:0d:4b:fa:48:7c:ed:19:60:8d:db:70:77:23:
d9:f7:27:bd:33:cc:32:ba:a1:3e:04:bf:a5:df:9f:d8:09:ac:
ff:95:7d:1b:7c:4a:c8:f4:08:a6:35:dc:97:bc:45:75:95:7f:
2d:17:56:5c:50:d0:37:6b:9c:01:2b:a3:cf:d9:de:35:4e:6e:
3d:af:01:d3:80:00:f0:db:bd:72:78:22:ab:db:d9:7c:31:d3:
0e:e5:3a:22:7a:4d:ad:c0:30:a4:be:cd:e6:e9:0a:a4:e6:5a:
a9:ee:11:fb:80:b0:e3:a6:47:c4:c2:91:db:95:98:44:37:3f:
04:81:4b:68:c5:71:0f:d8:95:2a:46:b3:1b:8d:7a:12:28:1a:
7d:de:b1:cc:02:64:2d:bb:31:8f:e5:2d:74:13:5e:02:1e:12:
1c:5a:59:3d:09:23:a8:06:e3:e0:79:1f:23:03:89:f7:cb:8d:
b3:ff:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:41 2025 by rpki-client