Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D562CD0C26D11EF81C2E07B762E951A.roa
File: 6D562CD0C26D11EF81C2E07B762E951A.roa (raw, json)
Hash identifier: W1pc2wWxNGRv36k5PvlEB3+f8tHROXPioRxoxnvlZN8=
Subject key identifier: 44:C0:D6:F0:BA:58:D6:18:29:EB:CE:65:D5:5F:E0:96:29:69:EF:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01243C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D562CD0C26D11EF81C2E07B762E951A.roa
Signing time: Wed 25 Dec 2024 03:07:51 +0000
ROA not before: Wed 25 Dec 2024 03:07:48 +0000
ROA not after: Wed 10 Dec 2025 03:07:48 +0000
asID: 984
IP address blocks: 154.211.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74812 (0x1243c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:07:48 2024 GMT
Not After : Dec 10 03:07:48 2025 GMT
Subject: CN=676b7707-9224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:31:8e:27:e2:2d:b8:f8:d7:8f:fc:47:ac:
c4:6d:d9:85:80:e2:60:e2:40:65:8a:4c:62:00:fe:
01:24:c9:bb:da:3b:2f:6e:86:83:4e:c2:cd:f2:bf:
80:70:da:0a:e3:af:83:05:05:ad:69:af:f9:d7:6c:
cd:57:69:e5:0a:94:9b:f9:28:f7:21:19:65:56:3d:
76:1e:1a:fa:f1:c4:bb:cb:91:64:ce:8b:e6:7d:5d:
51:6b:16:ae:8b:60:3c:6d:06:c7:53:dc:e1:9f:ad:
1c:e5:51:68:25:67:b5:c7:ca:fd:64:96:e4:45:fc:
63:ea:78:18:9c:3a:d0:7f:e1:b4:75:c4:90:d7:d3:
fe:e3:5a:6d:67:09:4d:98:1f:bd:af:ea:38:e2:6b:
b5:d6:c7:bd:13:4b:53:dc:79:5e:b5:f3:51:9a:20:
e2:32:62:66:96:fd:bf:33:a7:2c:0b:aa:e8:4a:8e:
00:0c:ed:21:dd:93:98:9b:9b:a6:68:e4:a5:de:1f:
79:41:1c:37:94:1b:5a:a2:ed:b2:5d:32:8c:06:3a:
c2:68:10:4a:06:f8:a7:2d:a7:06:47:78:d0:f4:4f:
6f:cc:58:e1:1b:f1:83:f2:4e:2f:11:63:ad:30:da:
3e:c4:b0:d0:7a:d5:0e:ee:a8:06:90:ba:0d:71:e3:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:D6:F0:BA:58:D6:18:29:EB:CE:65:D5:5F:E0:96:29:69:EF:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D562CD0C26D11EF81C2E07B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.170.0/24
Signature Algorithm: sha256WithRSAEncryption
90:04:d7:20:cd:cb:d9:7f:57:c7:d8:a1:48:d4:9d:52:35:ed:
e2:2e:a1:4b:c4:de:f9:e5:3f:eb:c9:91:e9:f7:bf:c4:50:f6:
66:ee:e5:8b:4c:a7:06:fb:df:e2:f8:e1:2a:fd:9e:4e:48:98:
45:9c:3c:33:cd:8d:91:44:08:04:c7:ba:0e:8a:64:5d:81:7c:
75:4a:b3:34:23:c5:18:e4:28:39:e6:67:f5:a0:e6:84:55:54:
bf:24:3a:37:1c:d5:6d:7a:28:10:0f:17:7e:f7:4d:c2:1b:08:
f6:b5:56:9a:d0:bc:2e:d4:99:71:18:83:ca:b1:27:c1:53:78:
79:54:04:0f:60:f3:f7:27:5e:3f:f7:d2:6e:6b:7b:b6:8f:b4:
d1:c7:33:d7:a3:79:d8:1d:51:bb:ef:04:70:cc:37:91:31:30:
e7:f1:dc:6e:74:a9:0c:9e:fd:ea:f2:76:d3:da:7e:a2:35:fa:
8b:92:4c:0f:2b:d7:65:74:5e:01:fb:49:ad:58:4c:03:d9:c2:
30:37:23:40:23:22:70:1a:23:bb:c4:29:c5:75:3c:33:d5:10:
c6:d9:cb:7f:d8:1d:90:14:11:23:d0:95:fb:2b:8b:a3:ae:1d:
eb:cc:1d:2f:c1:d6:d0:af:92:a3:a7:c2:db:46:6f:5b:04:53:
0b:31:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:06 2025 by rpki-client