Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7670D8E0C36411EFAAA00F9B762E951A.roa
File: 7670D8E0C36411EFAAA00F9B762E951A.roa (raw, json)
Hash identifier: AV8Sa0Hs+jD35oKDVIL3qPAvE/9wFgtA3864HFJvRvY=
Subject key identifier: 3A:34:F5:60:55:F2:64:AA:AF:B1:A7:47:54:BB:C4:23:4F:31:91:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012696
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7670D8E0C36411EFAAA00F9B762E951A.roa
Signing time: Thu 26 Dec 2024 08:36:12 +0000
ROA not before: Thu 26 Dec 2024 08:36:09 +0000
ROA not after: Sun 12 Dec 2027 08:36:09 +0000
asID: 17561
IP address blocks: 154.93.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75414 (0x12696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:36:09 2024 GMT
Not After : Dec 12 08:36:09 2027 GMT
Subject: CN=676d157c-7b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:82:1c:39:f3:6b:ba:b2:2e:2c:a4:9e:60:
8b:95:a1:d5:f1:ae:2a:25:f0:22:26:03:a9:cb:d2:
47:78:f9:94:b7:99:16:e8:be:7c:8f:97:1f:0f:99:
62:89:eb:97:3e:90:aa:2f:85:d1:c5:4d:3f:01:f4:
68:21:8e:0d:fe:c5:41:19:4c:17:98:fd:fb:86:28:
ee:97:84:41:10:7e:59:aa:cf:7c:9c:9d:3c:53:c8:
12:e3:d6:01:90:d0:b9:0c:d7:6c:e7:bf:63:81:4d:
d0:a3:76:0d:51:66:29:05:29:25:18:fe:81:fc:60:
92:1b:63:5a:f8:6c:2d:66:54:06:33:94:62:03:ea:
7b:d2:84:7e:14:ca:4c:15:7a:13:6f:5d:ef:e5:c2:
9f:ae:66:64:7d:eb:6e:6b:29:54:8f:4e:8a:74:25:
0c:8c:4f:e1:a8:1d:eb:96:0e:30:79:66:05:52:f1:
f7:3b:a7:07:e3:67:25:dc:93:0b:1d:3a:37:a5:c4:
dd:93:94:f3:5d:86:05:ff:64:df:db:bd:ce:82:dd:
09:a2:eb:d9:26:8d:03:b6:ab:28:e8:02:f2:1b:6e:
4b:6e:d1:13:bf:49:5d:81:50:29:7f:d1:32:57:16:
49:7c:fc:57:c7:63:46:02:ae:ea:7e:99:6e:0e:c9:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:F5:60:55:F2:64:AA:AF:B1:A7:47:54:BB:C4:23:4F:31:91:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7670D8E0C36411EFAAA00F9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.28.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a3:bd:5a:c2:c4:15:9a:0c:1b:0c:cd:21:b1:94:69:d0:11:
2d:38:02:e9:ae:56:3f:85:76:c5:b1:09:a5:38:67:79:d8:99:
6e:e4:4f:37:a2:b0:99:47:c2:c5:62:3c:ba:12:19:fa:04:27:
9f:94:1c:eb:be:52:02:0c:bd:67:78:99:ee:d6:63:84:17:ea:
ac:dc:45:b5:37:6e:c3:94:69:0f:a6:de:62:a3:6c:4c:b7:45:
44:31:67:54:ee:83:ee:c3:69:ac:ea:4d:33:31:a2:0b:74:07:
f8:b8:29:5b:6c:51:32:23:35:b7:92:af:3c:87:a9:bb:75:ee:
3f:a1:b6:ce:5f:68:fc:5b:23:c7:e1:46:7d:de:cf:2a:f2:02:
85:ab:c1:13:c8:b5:a7:37:d6:a6:e5:13:3b:4e:84:82:36:76:
95:5f:3e:5c:5c:bb:29:af:fc:a6:ed:94:3d:ad:3b:d0:b5:d0:
3d:be:1d:ae:7e:e9:da:12:2a:6f:fc:af:48:2a:7c:7b:1d:46:
4b:63:3f:86:4c:19:a6:a2:32:38:c7:27:91:10:ad:1f:6f:eb:
29:07:89:d9:9b:33:b4:50:30:eb:c9:4e:cd:b6:c5:07:ec:37:
54:76:8d:03:c0:81:22:36:b6:49:d6:73:af:59:d5:a3:81:52:
38:f9:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:51 2025 by rpki-client