Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6A3B0CC61111EFBBC84D91762E951A.roa
File: 6C6A3B0CC61111EFBBC84D91762E951A.roa (raw, json)
Hash identifier: yJJy1fV7nfE10FjaibEYxx1NuWvA5lzlnx0zWbkax6Q=
Subject key identifier: 27:DC:3F:20:F1:92:99:E9:E0:C4:CC:3A:E7:16:35:C5:BB:6C:51:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6A3B0CC61111EFBBC84D91762E951A.roa
Signing time: Sun 29 Dec 2024 18:19:21 +0000
ROA not before: Sun 29 Dec 2024 18:19:17 +0000
ROA not after: Sun 12 Dec 2027 18:19:17 +0000
asID: 17561
IP address blocks: 154.217.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77546 (0x12eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:19:17 2024 GMT
Not After : Dec 12 18:19:17 2027 GMT
Subject: CN=677192a9-eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:76:17:4d:f4:77:51:16:81:34:82:d8:f1:
28:6d:ac:6c:b9:6e:ca:6e:cb:a1:9a:e8:7e:a7:e9:
86:80:ef:2b:67:1a:a7:76:dd:22:54:39:c6:f1:2f:
ff:b1:9f:c0:67:dd:d6:0a:a2:ac:f9:b0:47:14:8b:
23:cf:c8:96:e4:fb:7d:7a:19:58:59:16:ef:3a:c4:
34:8f:d1:f1:42:ad:cf:a9:29:95:08:37:6f:54:fb:
7f:45:b1:18:9f:d0:83:39:1a:f4:8f:4b:da:f0:08:
54:8f:b0:c8:67:0d:d3:31:d2:02:10:8c:f4:e8:56:
a3:20:ae:bc:c1:b4:f7:a9:44:a6:05:21:0f:d1:a8:
54:63:62:91:e8:a3:67:de:b2:2a:37:54:5b:db:7b:
32:e9:a8:00:a0:5b:60:a7:42:60:5c:53:d1:fd:df:
ed:d2:49:ab:33:23:b4:b0:b9:50:9c:b4:52:81:a9:
61:00:7e:33:ba:a8:37:37:fe:9e:33:b1:77:64:57:
0a:5f:c3:92:e1:29:fd:c5:2a:b0:c3:87:7c:e9:ca:
8b:0d:86:71:80:a3:8c:3c:ba:d9:b2:dd:eb:13:04:
dd:0a:38:ab:11:f2:b5:bf:28:59:80:53:c5:37:ef:
77:f2:05:b7:39:26:6b:ee:73:64:02:63:fa:76:cc:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DC:3F:20:F1:92:99:E9:E0:C4:CC:3A:E7:16:35:C5:BB:6C:51:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6A3B0CC61111EFBBC84D91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.88.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e8:6e:69:1e:88:83:4d:f5:ec:fc:79:72:9a:4f:e6:b4:56:
27:cc:c4:a1:eb:32:dd:dd:f0:18:ca:1f:50:04:4d:8e:a5:d4:
1a:f8:2e:8f:db:c3:91:26:f6:40:79:91:aa:11:ce:66:13:a0:
2a:03:b2:2f:1a:8e:94:b5:e4:44:11:0c:c0:0d:7b:6a:cc:ba:
df:e6:e0:14:97:c9:e7:43:4d:cb:57:47:ec:25:74:ec:da:fe:
c8:b8:d3:c1:85:cf:a0:66:23:d0:a5:61:f3:8d:54:6c:00:49:
01:ed:4c:dc:b7:b6:46:89:27:2d:15:5a:0e:9a:c3:52:34:b9:
be:1e:73:88:62:6b:44:c0:69:6f:37:c7:77:6c:77:2b:7b:f1:
91:be:8f:ee:07:53:63:44:28:fa:fd:4f:1e:b7:52:c1:31:c3:
e8:30:20:de:7d:cf:f7:2a:55:42:8c:64:5d:73:51:bf:d9:75:
5f:bb:32:89:11:e4:f3:81:e3:de:a7:e4:1c:83:83:61:99:1b:
02:c9:53:ee:0e:b1:1f:af:fd:79:e4:49:e4:5e:0f:09:c7:cd:
98:f8:e2:d3:76:bb:99:0f:b8:48:c3:4d:c6:d0:b3:62:e0:ae:
31:f0:71:01:0d:08:1a:7e:cd:ba:d6:77:e9:0d:3c:c5:ba:c1:
e7:80:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:56 2025 by rpki-client