Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C41FE8C63211EFB35E4D62762E951A.roa
File: 76C41FE8C63211EFB35E4D62762E951A.roa (raw, json)
Hash identifier: ljwb4X9r90rIuG7o5JX8vMNhHrGy3BODf/JWLWBEi7s=
Subject key identifier: DC:F4:B2:3C:97:D8:AF:11:5C:68:AC:47:C4:7C:5C:1F:34:E7:A0:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C41FE8C63211EFB35E4D62762E951A.roa
Signing time: Sun 29 Dec 2024 22:15:51 +0000
ROA not before: Sun 29 Dec 2024 22:15:48 +0000
ROA not after: Sun 12 Dec 2027 22:15:48 +0000
asID: 17561
IP address blocks: 154.217.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77822 (0x12ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:15:48 2024 GMT
Not After : Dec 12 22:15:48 2027 GMT
Subject: CN=6771ca17-f626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:d8:fa:22:6a:bd:82:61:b2:03:b2:44:25:
6a:0b:9c:75:28:8d:8c:ab:3d:26:2a:08:90:74:45:
16:64:17:4a:4e:a2:64:dc:d5:af:03:3d:10:4a:2b:
a3:85:94:8d:74:a4:95:78:ef:c0:97:56:e8:5d:47:
ae:de:e7:9f:d9:fc:6d:05:22:1f:0e:ae:75:88:58:
5e:87:24:0c:a5:5a:71:e7:34:29:a1:f3:c1:15:7f:
6f:03:9c:bf:61:0a:3c:24:f6:81:a9:94:10:e2:3a:
2d:e1:ec:61:8d:3d:54:4a:fc:04:48:3f:ec:4f:3a:
1f:cb:54:85:6e:5e:73:47:ef:37:81:05:15:58:20:
a6:5a:60:f8:2f:38:c9:fd:76:45:cc:11:6c:49:2e:
58:d0:d0:1d:44:7c:c1:07:d0:52:1b:07:56:ae:d5:
bf:8c:7f:89:87:26:f9:63:c4:26:18:d6:64:16:94:
c6:80:02:66:91:21:ae:c4:a7:6a:31:e4:18:b1:e9:
88:98:d1:05:95:9f:78:be:f0:18:dd:e1:50:bc:12:
01:06:7d:fc:0a:76:af:85:6f:67:2b:74:29:00:2a:
c6:f6:be:83:ea:41:ed:0b:66:4d:90:66:34:62:78:
11:70:94:5c:69:f0:40:d9:28:44:4e:68:cf:00:91:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:B2:3C:97:D8:AF:11:5C:68:AC:47:C4:7C:5C:1F:34:E7:A0:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C41FE8C63211EFB35E4D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.226.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:5c:12:80:18:15:e9:d7:c2:bc:9e:4f:7f:a2:7a:c3:54:
a9:29:95:66:da:a1:1a:e8:f4:38:ed:25:9f:1f:eb:24:28:c1:
a7:bc:11:5d:38:b4:9b:72:bc:5e:f0:c5:1e:bb:34:c6:e0:62:
3e:5d:79:07:97:1d:c9:e9:7d:e4:8f:28:23:17:74:12:76:d9:
bd:15:94:8f:1f:c7:c7:ef:db:a3:74:54:66:3f:ea:20:dc:5b:
4d:81:65:10:2e:62:41:51:12:b7:02:d9:f3:4d:c5:d7:33:53:
00:84:be:2a:2e:b7:fc:74:91:79:88:c5:85:6e:b1:3f:e5:ed:
8a:64:5e:d4:20:71:4c:83:eb:9f:70:bc:52:bc:3e:8a:2c:5d:
6c:0b:ea:c4:29:56:28:58:43:f5:0b:3f:77:86:f3:6f:77:0b:
44:7d:68:67:26:ca:e9:89:39:bb:e3:e2:e8:e6:58:29:07:80:
80:f9:32:0f:37:03:f7:c0:1b:3e:60:09:80:83:ea:aa:80:45:
b7:7d:f2:cf:fa:e4:49:72:a9:19:f5:e8:33:0f:51:09:38:2a:
b3:d5:b4:06:09:3b:2a:bc:3d:5c:59:75:6b:0c:81:dc:a6:d3:
74:95:74:a0:e8:2e:27:63:e3:9f:6b:d1:12:c0:13:84:0e:ab:
e6:d0:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:25 2025 by rpki-client