Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730A84D2C25911EF981C0D6B762E951A.roa
File: 730A84D2C25911EF981C0D6B762E951A.roa (raw, json)
Hash identifier: t+goLO+u5W6rGkoPXXZDf29XbtZMrxoATm0kEoMAYmc=
Subject key identifier: DF:9A:60:36:8F:A6:1D:2E:B7:AE:6D:EA:D5:52:9D:6B:A3:09:FA:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012359
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730A84D2C25911EF981C0D6B762E951A.roa
Signing time: Wed 25 Dec 2024 00:44:51 +0000
ROA not before: Wed 25 Dec 2024 00:00:47 +0000
ROA not after: Wed 10 Dec 2025 00:00:47 +0000
asID: 984
IP address blocks: 154.199.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74585 (0x12359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:47 2024 GMT
Not After : Dec 10 00:00:47 2025 GMT
Subject: CN=676b5583-8501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:6d:92:00:5e:95:ef:e9:84:4a:39:3c:ea:
93:57:8a:d2:43:7b:47:6b:20:22:60:90:1f:c1:ea:
b7:34:76:c1:e1:98:36:2f:b6:eb:c1:7e:76:4a:9a:
3d:e2:06:e5:37:ad:38:1d:62:d9:c1:ae:12:2e:d2:
2b:77:9f:2e:58:0c:39:cf:31:67:eb:10:73:61:2a:
4c:2e:31:6c:69:50:17:36:ba:e1:c0:84:4d:24:96:
cf:56:86:cb:80:6a:3b:d5:4a:61:7e:c5:f8:53:e7:
c0:c8:c8:4a:46:d4:a7:56:2d:df:e3:c3:67:8b:e1:
8c:11:0d:9b:9c:3a:74:d4:5f:30:d1:72:4a:ff:35:
c9:c7:9a:f6:31:06:13:b0:a8:f2:dd:18:1c:f8:ca:
2b:e3:ea:01:13:eb:03:b1:95:a4:2a:f3:6c:02:aa:
9b:5a:24:f8:67:95:01:7c:a3:77:80:ea:8a:91:72:
e0:20:96:cc:f4:6f:7f:30:ff:d6:6a:1f:08:25:8a:
36:d8:f5:b8:3e:c4:a7:65:14:0d:25:b5:19:d9:b9:
3c:bf:7d:73:44:ee:91:95:38:58:4b:a1:cc:c9:b3:
ca:81:c3:97:78:96:90:9f:b3:bc:03:e1:01:a2:d0:
03:f7:c6:5e:d3:a4:5f:c8:c4:b2:8f:e2:d5:dd:d8:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:60:36:8F:A6:1D:2E:B7:AE:6D:EA:D5:52:9D:6B:A3:09:FA:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730A84D2C25911EF981C0D6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bc:0c:c7:92:67:e4:20:a1:d3:7a:d1:cd:73:6a:c3:3e:4d:
df:20:4d:87:2d:c3:4f:ad:97:a3:e6:a1:f8:6f:9d:7f:dd:36:
05:80:81:11:25:a1:5f:db:cc:61:6e:f2:d8:d3:3f:25:41:9e:
29:b4:49:b6:a1:43:97:80:ca:bf:fd:9b:18:dc:fd:99:f1:67:
18:e6:60:5d:38:f2:9f:13:a3:4b:ab:25:20:e3:52:81:61:bc:
1c:8b:86:2f:27:13:3d:58:75:77:5d:20:7b:70:46:87:c3:ad:
f2:e8:53:fd:38:e8:3f:8f:f8:a5:a4:33:14:bb:7a:b4:c5:a5:
0f:bb:20:2e:c0:7c:62:db:ed:bb:33:8c:22:66:75:28:80:ad:
7c:1b:38:f5:6a:e7:73:cd:2e:24:5b:8b:fc:de:a0:b6:aa:18:
46:81:e9:26:39:c6:1d:db:94:0f:11:3e:e5:61:06:55:4c:2f:
8e:7d:64:cf:94:d1:a9:76:90:9c:62:81:d1:d9:b5:f9:19:dc:
a0:71:f0:eb:41:81:52:71:f9:cd:97:e8:be:5c:c3:d6:0e:48:
18:0a:69:2d:a7:5f:19:63:88:2b:ff:b0:d1:51:cb:20:b3:34:
92:91:24:06:83:d5:02:2a:67:c5:76:8d:e1:85:4c:5b:59:b7:
27:29:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:32 2025 by rpki-client