Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7545CC66C1B411EFA75FE356762E951A.roa
File: 7545CC66C1B411EFA75FE356762E951A.roa (raw, json)
Hash identifier: jbqbG4tKVYBQrn68rAsusKpkFesaNEEVXyCJKYLMjC8=
Subject key identifier: 88:3C:63:CB:DD:42:1A:8F:54:95:D9:01:AE:F9:2C:1D:1A:D1:C1:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01219D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7545CC66C1B411EFA75FE356762E951A.roa
Signing time: Tue 24 Dec 2024 05:03:48 +0000
ROA not before: Tue 24 Dec 2024 05:03:44 +0000
ROA not after: Wed 10 Dec 2025 05:03:44 +0000
asID: 984
IP address blocks: 154.193.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74141 (0x1219d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:03:44 2024 GMT
Not After : Dec 10 05:03:44 2025 GMT
Subject: CN=676a40b4-c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:8f:ab:74:47:a1:69:15:ea:3f:57:f3:a0:
16:78:45:07:8b:a3:c8:10:fb:8c:f2:f0:a0:46:19:
9e:31:53:22:bf:4f:0a:37:d4:9e:54:f6:b7:df:47:
84:c0:d4:15:1d:b5:16:dd:32:c3:ce:e5:8b:9f:49:
14:ff:f1:6e:5b:2a:84:1b:98:dd:27:5c:d5:89:f3:
57:a9:b4:1d:07:17:27:6d:3f:49:32:f9:d5:0a:37:
93:9f:69:b8:a6:3f:49:57:cb:3f:96:53:bb:0f:f1:
2b:c9:27:75:3c:9f:20:ae:ea:2a:3c:ba:ac:de:0c:
4e:a6:ac:1a:c2:a7:15:3a:8c:3e:87:6c:bd:09:a6:
e1:f2:d0:b1:00:e5:68:62:5f:e8:3b:82:84:2b:e0:
2e:dc:7a:6f:4b:e3:77:2f:0f:52:35:a8:97:c0:20:
f5:76:d3:74:16:c8:32:e5:0a:8c:e2:95:2f:b8:d6:
b1:f3:17:d2:b1:66:1f:82:52:71:83:9c:52:d9:a4:
61:c1:38:aa:78:ed:eb:84:7a:62:3e:ea:dd:f7:e8:
46:85:ae:d0:f3:b7:20:69:6b:82:08:f6:a8:a0:9b:
6c:c3:8f:92:84:de:69:b4:d5:b8:d2:80:58:0d:c6:
0f:a0:3f:e4:5c:71:4e:04:3f:3c:f0:d9:0d:aa:e5:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:63:CB:DD:42:1A:8F:54:95:D9:01:AE:F9:2C:1D:1A:D1:C1:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7545CC66C1B411EFA75FE356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0/24
Signature Algorithm: sha256WithRSAEncryption
32:39:99:af:8a:62:08:ee:41:b1:31:78:8f:e5:9c:3f:10:2a:
e9:49:6a:5c:20:a4:64:3e:be:33:04:4f:d7:b3:70:a6:1c:c7:
ec:2e:90:ac:f2:b6:46:07:25:49:67:3b:86:72:f4:7e:f9:59:
7b:ba:8a:25:b0:f5:87:f3:a0:87:ec:96:31:b0:c5:7a:cc:01:
5b:29:11:73:d3:97:e8:b2:04:f6:c5:a7:22:10:5c:66:12:44:
58:01:0a:06:b7:92:83:04:aa:08:f9:2e:6c:ab:1e:57:9c:63:
3e:ab:2f:7c:ed:e9:73:01:7c:5f:21:67:b5:11:e2:42:ba:c4:
be:c0:fd:2a:03:13:1c:af:73:5e:ec:e6:2a:c9:19:69:5b:4b:
4d:49:62:39:79:90:f3:8d:95:25:92:4d:07:69:1b:fc:65:3e:
fb:13:f1:20:36:7e:c6:2c:87:c4:46:a4:08:e1:b6:db:d0:29:
c3:17:87:4b:1a:98:16:4c:23:4c:86:2f:5c:e8:b1:0b:ef:28:
94:7b:fe:0d:84:d1:50:6f:39:dc:7c:0f:29:1e:b4:32:34:8c:
04:4d:61:56:20:02:e0:3a:ea:21:e7:73:13:ef:57:40:ba:9a:
7e:f7:84:62:7a:e8:29:61:32:d9:cf:cc:e4:51:d8:05:f2:94:
ce:6b:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:15 2025 by rpki-client