Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75543A4AC40611EFB01606AC762E951A.roa
File: 75543A4AC40611EFB01606AC762E951A.roa (raw, json)
Hash identifier: Upr96iUmz+L/Awq6PN0c6B4gSdWTHUVMBhfdY1a/gwU=
Subject key identifier: 46:CE:79:B1:99:25:0C:06:F5:D2:C8:96:C6:0F:0F:C4:BD:B4:A7:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75543A4AC40611EFB01606AC762E951A.roa
Signing time: Fri 27 Dec 2024 03:55:49 +0000
ROA not before: Fri 27 Dec 2024 03:55:45 +0000
ROA not after: Sun 12 Dec 2027 03:55:45 +0000
asID: 17561
IP address blocks: 154.194.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76005 (0x128e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:55:45 2024 GMT
Not After : Dec 12 03:55:45 2027 GMT
Subject: CN=676e2545-2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:5f:0f:d6:69:cf:ac:1e:08:7b:45:fa:7a:
20:0e:b6:1a:f7:79:6e:2a:5d:bf:68:99:8e:23:77:
53:60:12:c0:75:3b:47:51:4c:38:95:05:cb:86:e5:
df:31:9c:4e:7f:4d:d9:d2:a3:b5:6e:a7:7d:6e:57:
07:cb:e2:51:fb:28:68:20:b1:33:5b:5c:88:36:98:
92:11:3c:65:f3:c7:b9:50:89:68:75:b1:d5:35:b3:
91:e2:33:f6:7c:a9:90:98:61:f2:ae:26:37:21:fb:
fc:73:06:05:b8:36:ea:3c:d8:ab:17:9d:c6:1d:fe:
3c:98:b0:9e:de:f8:cf:c4:7c:e1:40:7c:c2:3d:23:
e8:6b:e0:48:66:67:49:dc:7f:29:e9:12:6f:47:04:
12:26:c3:0c:08:1a:1f:fb:c5:09:c0:45:0d:b5:79:
5b:ce:af:7e:33:28:42:4e:6e:3c:94:cf:9e:c8:50:
85:57:94:f4:52:7f:3d:86:86:88:48:5f:84:ac:16:
57:61:5e:3f:7d:af:57:fe:3f:d8:a5:ae:64:b5:a4:
32:dc:de:ed:c8:0c:8c:dd:23:6f:3b:dc:4f:9e:5d:
3f:82:3d:5d:a4:19:28:f3:92:e7:fe:c8:f5:9c:1f:
c7:85:32:ef:1c:7e:b0:82:ec:32:17:15:3f:72:9a:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:79:B1:99:25:0C:06:F5:D2:C8:96:C6:0F:0F:C4:BD:B4:A7:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75543A4AC40611EFB01606AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:35:ac:5a:5a:c3:c0:6a:b6:14:60:aa:8e:2f:a3:de:86:ba:
1a:d4:57:93:f8:e3:5a:3f:36:38:e4:a6:c2:b6:05:bb:c2:47:
c5:b5:99:34:43:43:4c:db:58:eb:4e:21:7f:fd:76:c5:49:6d:
41:c2:79:1f:c0:f2:9c:48:64:b6:db:c1:9c:73:06:06:90:70:
ec:8a:11:5f:31:95:c3:61:2a:78:68:28:e3:bb:60:ef:d8:74:
df:ca:50:7a:14:81:f9:ef:c6:0e:4e:bf:f1:4d:94:59:23:13:
3f:6b:a5:47:7b:80:89:d0:06:11:07:ef:d6:ed:50:62:e6:23:
ed:93:78:18:9c:52:8e:9e:b3:67:23:2f:7f:23:cd:84:b4:e2:
1f:f9:22:cd:c0:32:37:41:c5:be:c5:90:1f:7f:13:e1:07:90:
a2:2c:ed:2a:4c:b7:70:fd:47:96:67:12:82:fe:94:0a:87:74:
03:32:44:08:02:06:60:f0:cd:0a:13:0e:b4:bf:12:2a:cc:53:
9b:55:8d:66:05:99:01:41:71:a6:e2:7f:f1:be:39:9a:ba:a6:
5f:e0:fb:c1:f0:01:08:c8:32:b7:0a:f4:04:1b:04:28:03:36:
8f:3e:26:9f:cb:b5:9c:2e:96:3d:91:0a:c1:42:49:64:39:d5:
87:41:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:55 2025 by rpki-client