Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE8FF9AC1D811EF8F5B25B7762E951A.roa
File: 6EE8FF9AC1D811EF8F5B25B7762E951A.roa (raw, json)
Hash identifier: B9FTe2NDXrxGyTxq9mhWCZy/RYB/EVjpw7oVrN8XAOs=
Subject key identifier: 47:11:96:8E:66:6C:DF:7E:56:45:BC:12:A0:C4:1A:B3:03:0A:8D:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE8FF9AC1D811EF8F5B25B7762E951A.roa
Signing time: Tue 24 Dec 2024 09:21:19 +0000
ROA not before: Tue 24 Dec 2024 09:21:15 +0000
ROA not after: Wed 10 Dec 2025 09:21:15 +0000
asID: 984
IP address blocks: 154.194.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74467 (0x122e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:21:15 2024 GMT
Not After : Dec 10 09:21:15 2025 GMT
Subject: CN=676a7d0f-ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:d9:a5:e7:57:a6:44:db:8f:42:2d:1d:3c:
b8:ad:04:e0:f5:86:f8:63:0a:46:f2:31:7d:08:83:
9f:05:7d:7a:51:ad:8f:66:32:ca:f0:c9:36:43:ef:
2c:6c:7f:3d:27:73:65:68:fb:ba:8d:f5:d1:f1:eb:
18:8d:57:29:c5:d6:89:12:03:99:01:c2:5a:9e:c3:
f9:64:76:34:97:0b:3b:89:27:b7:3d:0b:20:73:18:
ac:f7:f5:8e:af:dd:24:0d:77:07:c8:56:6f:c5:7b:
af:6e:3b:bc:4d:b3:14:13:f9:f5:ef:b7:4e:fa:60:
6c:80:98:8b:c3:54:3e:86:fb:29:5d:9a:3b:3c:74:
f0:26:a2:be:a6:12:ed:d8:31:6a:15:e0:db:4b:b0:
27:6c:aa:9f:ac:90:12:c8:6f:a5:2a:62:64:76:8c:
42:28:70:39:da:71:64:f7:7c:3a:24:d6:4d:de:86:
83:f7:18:3d:d3:02:67:52:54:4d:b7:ed:e0:6e:92:
2d:2a:5c:a8:76:4a:da:ff:c2:81:0d:3c:d6:aa:c6:
53:92:12:b0:c5:11:08:8c:8e:6a:b5:00:1e:78:ad:
2c:86:c4:90:1d:e1:c9:12:93:a5:2a:f3:41:50:f7:
04:f9:26:36:0f:37:44:cb:fa:84:7b:92:76:a6:1e:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:96:8E:66:6C:DF:7E:56:45:BC:12:A0:C4:1A:B3:03:0A:8D:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE8FF9AC1D811EF8F5B25B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.230.0/24
Signature Algorithm: sha256WithRSAEncryption
25:75:7a:f1:cd:76:04:b5:26:1c:82:ba:2d:51:ad:8e:25:74:
3b:a8:ff:1f:f8:11:4a:4a:32:1e:84:14:08:ab:d1:f4:36:e6:
72:28:b6:e5:5e:ea:7f:59:cc:17:15:ed:bb:8e:37:ec:6c:65:
0b:a8:c9:bd:48:58:f7:50:68:40:b9:58:18:59:3e:d5:71:9e:
00:cc:8d:bb:b8:ed:f1:bb:4a:7f:90:f1:17:95:25:d8:fb:4b:
9b:4c:bf:ae:e1:cb:1c:5d:ee:c8:87:40:e0:57:4d:86:ad:4d:
01:f0:7d:f0:59:94:77:ea:dc:13:92:73:77:d3:8a:ca:26:f5:
71:cf:af:46:f4:e6:4a:cc:52:c5:8c:4c:26:23:d6:bc:f5:da:
a2:de:6c:78:9e:55:56:36:83:0f:e4:da:1b:00:9a:f6:30:b8:
cb:08:46:54:4a:7b:2f:53:69:10:e0:e9:a1:a7:02:f3:8b:36:
84:38:55:a8:b6:f8:58:6c:58:14:ee:94:a9:8a:1d:86:a4:ad:
bd:e4:35:9e:3b:a9:e4:e4:00:f1:01:aa:95:88:c6:93:fa:e5:
1a:47:42:98:02:a6:66:4c:0f:09:ab:be:90:28:0a:cd:f9:ac:
f7:f0:e3:0e:ca:8c:f6:a6:4e:4f:06:49:c8:bd:6c:97:4a:6a:
41:96:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client