Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0CE720C1D511EFAA18C4A4762E951A.roa
File: 7C0CE720C1D511EFAA18C4A4762E951A.roa (raw, json)
Hash identifier: nNLLYEp1WTuJYKpJzNcBkPM9jAJFXj1midA2BvTc1+M=
Subject key identifier: 5F:67:E6:A8:39:18:F5:7B:E4:24:1A:74:19:16:6C:51:EC:37:13:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0CE720C1D511EFAA18C4A4762E951A.roa
Signing time: Tue 24 Dec 2024 09:00:12 +0000
ROA not before: Tue 24 Dec 2024 09:00:09 +0000
ROA not after: Fri 10 Dec 2027 09:00:09 +0000
asID: 17561
IP address blocks: 154.194.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74433 (0x122c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:00:09 2024 GMT
Not After : Dec 10 09:00:09 2027 GMT
Subject: CN=676a781c-17fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:4e:ac:a1:ab:7a:c4:cc:47:ae:cd:e9:ee:
d2:2c:0a:0e:8c:3d:43:57:bf:b3:06:9c:75:39:df:
c0:cf:af:d0:fb:43:8b:04:81:2c:77:10:50:ca:60:
bb:a6:a0:ef:9d:19:aa:e3:23:4c:1b:9e:32:00:42:
d2:42:33:7a:54:fb:98:95:e9:be:fe:8c:6e:39:b2:
40:21:d3:5d:7c:f5:d9:59:63:0e:ca:9f:b8:ab:a5:
2e:d9:e4:c6:05:8f:e6:e8:6e:5e:25:a0:21:2c:9c:
68:a7:66:32:97:f4:cd:61:c9:43:46:2e:40:5d:b2:
ee:3b:fb:39:56:b2:93:32:7e:f2:42:4b:fd:05:2d:
94:71:ff:d1:97:f9:37:98:ae:17:f5:fa:d4:88:d7:
72:47:5e:c6:88:31:63:c0:bd:59:eb:10:ab:4f:5c:
c4:e7:dd:76:e5:98:73:02:01:f0:f1:9e:e1:87:5f:
a6:ee:20:06:c2:e8:e7:d7:fa:aa:5b:d1:70:13:90:
9c:52:68:7f:26:1c:bc:34:e4:a1:6f:f0:36:95:7d:
f5:73:d6:0f:7e:3c:43:42:f0:b9:6e:e6:c8:6a:5b:
08:4f:e7:89:13:89:45:aa:cc:ea:fc:42:12:7d:fc:
40:a6:80:71:88:37:8c:22:34:f5:c3:e2:75:0d:63:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:E6:A8:39:18:F5:7B:E4:24:1A:74:19:16:6C:51:EC:37:13:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0CE720C1D511EFAA18C4A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.207.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e1:9c:dd:9d:74:92:40:47:d2:1e:f2:96:5e:cd:c1:2e:bb:
35:32:2e:8c:64:0f:41:54:23:fd:97:66:5e:91:fe:91:58:17:
74:4b:61:8c:a2:17:47:0d:6c:b1:83:33:01:88:27:74:48:ab:
b9:2a:6b:4c:7c:e4:bb:a2:7e:9b:63:a2:1f:28:78:a7:81:ec:
dc:15:0c:b9:08:6c:36:6e:a3:5a:ae:b5:38:75:f6:09:c9:eb:
22:2d:23:6b:c3:73:53:44:09:cc:b8:7c:3a:6b:cc:f9:99:90:
b3:cb:3b:b7:19:41:e7:de:af:eb:e2:3f:7c:99:2c:84:34:01:
b8:22:d2:c0:af:bc:6e:0e:e4:7f:b4:39:07:28:6f:c1:83:8a:
ea:47:a2:62:0b:c1:ea:62:ec:67:3d:7d:dc:13:e7:9f:fb:e5:
2c:07:4a:8f:2c:36:43:ff:cd:35:b4:f5:08:0c:03:68:7b:5b:
be:79:86:d1:48:2c:31:fd:0e:a1:81:4a:f6:eb:fa:63:df:7b:
e4:db:ea:6f:69:b2:b3:94:3e:99:c0:0d:b5:51:48:80:1f:94:
72:ae:7d:21:86:8d:d6:5b:58:f6:ad:a0:92:ad:ac:9e:c4:e3:
87:38:1f:7f:09:67:7f:93:79:c2:34:f3:18:75:50:23:2e:cd:
87:49:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:05 2025 by rpki-client