Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A24FBDACF6011EF98586956762E951A.roa
File: 7A24FBDACF6011EF98586956762E951A.roa (raw, json)
Hash identifier: Cz8Zgq9pYJGVY5Gxp5dt403//fUcIpQtYNtplotJ9ZE=
Subject key identifier: DE:99:0F:6D:2E:0D:95:D3:55:6B:E0:F0:E5:CD:44:BD:23:85:D9:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A24FBDACF6011EF98586956762E951A.roa
Signing time: Fri 10 Jan 2025 14:37:54 +0000
ROA not before: Fri 10 Jan 2025 14:37:51 +0000
ROA not after: Fri 12 Dec 2025 14:37:51 +0000
asID: 984
IP address blocks: 154.81.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80395 (0x13a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:37:51 2025 GMT
Not After : Dec 12 14:37:51 2025 GMT
Subject: CN=678130c2-b0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:5c:6a:79:24:02:cb:68:bf:20:75:be:be:
d3:b9:11:42:f1:42:1f:cb:7f:1f:d4:3a:84:46:80:
d0:f8:c1:fa:60:c5:a2:d6:57:80:da:1c:35:53:4e:
82:95:bb:d0:9a:0e:52:ac:0c:cf:36:27:b9:86:77:
6f:8b:b8:39:59:49:7b:43:71:b6:ca:2f:be:41:c3:
7a:e3:6f:c7:72:17:e6:b2:b5:3c:43:ca:6f:01:e2:
65:e2:da:75:8a:40:a0:36:43:e1:ac:e1:fe:2a:ac:
1b:65:35:0d:85:52:12:20:4f:1a:1f:9b:3e:e9:36:
37:8d:f2:29:d8:90:11:6b:dd:dd:c9:ed:a9:19:5b:
23:5b:02:50:83:49:a8:23:66:91:0d:1a:d4:9a:4c:
97:d3:3f:23:54:0a:0e:99:dd:9e:50:1a:26:8f:9e:
e9:05:8d:3e:7d:4a:60:6d:71:9e:79:6c:17:29:81:
ac:6f:94:2e:3e:6b:32:0c:7f:2f:ec:1e:a2:a8:65:
fe:ec:32:ed:f1:d9:21:ef:d3:ce:d7:81:c5:fc:c4:
4c:f7:2e:c8:94:6a:cd:14:23:d6:b7:78:84:f0:e1:
1a:52:93:76:15:84:b0:c5:b7:84:77:ec:2f:6b:ec:
98:5a:27:9f:5e:9a:5a:24:3d:04:d0:67:a9:ce:48:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:99:0F:6D:2E:0D:95:D3:55:6B:E0:F0:E5:CD:44:BD:23:85:D9:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A24FBDACF6011EF98586956762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fa:b3:c2:b3:29:d7:42:fd:88:a6:48:fc:bd:d7:33:55:6a:
7a:9a:65:62:3f:9a:6e:1b:98:d4:7e:b2:fe:bf:b9:85:48:26:
24:25:ff:23:b0:9c:f6:7d:93:eb:23:dc:b9:4d:28:ed:71:9b:
76:f8:af:7b:d6:5e:19:e2:0d:b1:00:bc:12:1a:9b:7e:9c:30:
8b:bc:1c:87:1e:38:16:04:b9:c8:a2:0b:8c:d9:0b:de:69:f8:
53:07:c2:96:c7:fa:50:1f:e3:ef:21:63:4f:56:d1:5f:cb:bb:
36:e9:be:8f:96:54:81:91:52:88:90:b6:b7:7b:66:fd:1b:1d:
e7:6d:0b:ef:e5:b4:c6:1c:6a:62:1a:34:f8:a7:8e:d1:ae:a4:
1e:df:95:e1:50:cc:da:5d:c7:38:6e:92:bd:ad:6d:08:6d:30:
41:ad:45:1f:08:00:5a:8e:5a:ab:5d:41:ae:6a:60:5c:84:33:
89:92:7e:a8:e3:0c:db:35:3f:06:47:7f:a2:f3:21:cb:9a:cc:
32:68:f6:8e:c3:38:62:a6:70:ce:cb:b0:74:84:cd:a2:1e:4c:
26:75:fd:3f:0e:2b:9d:12:f3:b9:52:c4:71:3a:6d:32:15:97:
0b:b6:d5:cd:3b:98:7f:08:f0:04:97:3c:e6:34:f0:85:d0:2e:
21:e2:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:02:07 2025 by rpki-client