Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C50196AC92C11EFB734B755762E951A.roa
File: 7C50196AC92C11EFB734B755762E951A.roa (raw, json)
Hash identifier: 4EiWuWO+qJKqxtBxIvjEqHU1u+2K3aijYH62eZxSrHc=
Subject key identifier: 6F:BD:56:F8:B1:DD:C2:A5:8C:DB:A5:30:A2:AF:14:88:96:9D:C7:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013387
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C50196AC92C11EFB734B755762E951A.roa
Signing time: Thu 02 Jan 2025 17:10:37 +0000
ROA not before: Thu 02 Jan 2025 17:10:34 +0000
ROA not after: Mon 13 Dec 2027 17:10:34 +0000
asID: 17561
IP address blocks: 154.222.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78727 (0x13387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:10:34 2025 GMT
Not After : Dec 13 17:10:34 2027 GMT
Subject: CN=6776c88d-7951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:30:93:50:dc:22:5e:b5:54:e5:d5:19:74:
b1:3a:a3:14:8a:f6:f7:54:53:d3:8d:6c:70:d0:a8:
c9:cf:b0:b0:a7:4c:0a:3f:5b:b7:62:be:4d:3b:50:
d0:42:4c:d6:1b:e2:a6:55:c1:d1:bd:17:f3:5d:e4:
48:26:f1:aa:34:bf:7d:17:65:7e:13:eb:dc:80:5e:
3b:b8:ce:68:34:31:92:e4:bb:bd:d5:96:1c:99:da:
10:cf:a9:a0:83:f5:ad:32:bd:53:8a:db:43:0e:af:
71:11:2a:15:57:ad:82:e9:2f:5c:6e:6d:9f:e6:c5:
94:cf:ed:82:37:55:e6:80:69:7c:e7:e7:1b:08:9f:
c9:5a:1b:09:a9:18:cf:ef:70:af:29:a7:b5:80:53:
d2:12:98:f3:57:b6:2f:da:31:43:08:95:fb:22:aa:
19:16:fe:fa:8a:31:88:5c:95:22:23:cb:a6:2b:1f:
65:35:15:ae:ba:1b:6b:40:09:51:20:fb:b2:c7:a2:
d4:e4:04:0d:f7:9b:61:86:6b:aa:07:c1:28:0c:96:
3c:ff:b0:0e:e4:6d:66:66:b9:74:0a:c7:6c:0c:2b:
32:4a:1a:41:02:b2:8a:1a:65:da:0e:1f:c4:3f:78:
d2:eb:e1:a6:26:ec:f4:6a:67:9d:76:5e:aa:e3:46:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:56:F8:B1:DD:C2:A5:8C:DB:A5:30:A2:AF:14:88:96:9D:C7:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C50196AC92C11EFB734B755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.144.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ad:e9:2a:7c:55:91:7b:4b:c5:5c:f7:90:8f:5d:cf:17:be:
cc:6d:f1:d6:0f:df:a5:e9:a3:78:0b:06:00:37:57:91:3f:56:
9a:84:d2:86:96:00:77:50:21:64:a9:52:ad:5d:b2:ec:91:75:
7f:b9:b1:d1:15:4b:af:2c:f8:41:79:5a:31:0e:ad:12:0a:65:
5f:3d:82:6f:24:0e:f3:aa:6a:d1:91:43:8b:a6:48:4c:97:8a:
7e:ff:d8:08:37:d8:c6:79:6f:f8:3a:80:5e:62:41:43:59:19:
50:b4:76:84:15:00:32:ee:8c:8e:8f:cc:4d:e3:fa:5f:35:81:
0b:e3:2c:55:58:fa:86:cf:ae:f8:5f:be:aa:37:da:31:db:0c:
e0:f7:fd:80:b5:28:43:2c:a0:1a:bf:53:1d:ca:03:59:94:21:
18:b5:81:93:2a:7a:89:06:fe:39:07:44:86:a0:1f:24:09:67:
c7:03:63:ba:86:2a:84:95:31:9c:50:80:e6:e7:d0:e7:45:43:
61:d3:25:8d:65:eb:86:3d:94:02:ac:df:65:7a:0d:47:0d:90:
8c:c4:44:95:73:82:1c:fe:b6:22:c5:16:54:ec:ef:77:6a:db:
0c:fb:5e:56:0f:99:a7:5e:09:2f:a3:e6:14:63:c3:86:1f:9f:
22:a5:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:44 2025 by rpki-client