Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF76B06C1B611EF9915A763762E951A.roa
File: 7DF76B06C1B611EF9915A763762E951A.roa (raw, json)
Hash identifier: 8UaqqK9RpnLADsrk3Dr71xkstKQ385m0UQM7y4He7gM=
Subject key identifier: 91:50:30:56:2E:19:75:7B:5A:F0:D8:3E:E2:22:FE:83:DA:A6:16:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF76B06C1B611EF9915A763762E951A.roa
Signing time: Tue 24 Dec 2024 05:18:21 +0000
ROA not before: Tue 24 Dec 2024 05:18:18 +0000
ROA not after: Wed 10 Dec 2025 05:18:18 +0000
asID: 984
IP address blocks: 154.193.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74165 (0x121b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:18:18 2024 GMT
Not After : Dec 10 05:18:18 2025 GMT
Subject: CN=676a441d-eb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:eb:1f:0a:3d:25:46:f2:a8:67:0e:70:35:
77:55:a4:3e:2d:98:73:0f:e0:55:40:79:2f:91:37:
19:d3:e2:6a:59:78:aa:83:3d:8d:24:1f:c8:bf:d1:
a9:99:f0:04:52:3a:9c:47:e4:da:ef:50:4b:ce:c9:
57:16:eb:71:96:1d:8d:e8:e7:69:50:e2:2b:eb:33:
e3:28:4c:46:9a:11:f0:11:24:46:e9:fe:b8:fb:e4:
5a:c3:a4:16:c4:e7:40:39:f7:0d:8e:2a:99:83:76:
cc:03:53:d2:4a:2d:1a:3a:9d:e8:31:4e:b6:46:80:
64:87:5f:9e:c0:52:c0:d4:ba:fa:54:65:c2:45:4c:
63:b7:6a:ce:84:f0:c3:ca:e3:5a:1f:d2:e0:e1:a3:
de:ef:26:20:a6:14:b0:48:a9:65:b6:b0:b8:7a:d9:
0f:af:f2:e2:36:50:3a:c0:1c:ea:5c:09:1f:03:2f:
aa:6e:93:d4:de:6e:39:4b:df:55:f9:4e:71:e3:ee:
56:af:f5:7c:f2:49:e4:37:e7:3a:c2:59:4e:66:bf:
1b:70:0a:b0:3f:0b:1a:13:4a:51:2a:de:93:e1:b9:
ed:16:80:a4:c1:b4:de:81:fc:15:b1:0c:2c:78:91:
0b:e5:e0:60:d7:59:77:92:cb:40:42:ba:8b:1e:ac:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:30:56:2E:19:75:7B:5A:F0:D8:3E:E2:22:FE:83:DA:A6:16:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF76B06C1B611EF9915A763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0f:ad:fd:2d:7a:90:19:1d:65:60:03:00:13:ae:b2:85:83:
ab:f9:57:65:3b:f1:14:9b:af:81:84:6f:9b:a4:cf:09:18:ca:
7c:45:ba:e9:63:99:53:bc:22:d0:c1:c4:62:b9:8a:66:cd:01:
a9:df:f3:65:c3:db:95:3d:c7:4f:ef:78:6a:4e:51:4d:88:2c:
a9:85:fa:f1:bc:d0:c0:c5:53:15:f5:77:c0:ac:99:18:64:f1:
06:2f:77:c9:f5:ed:47:7b:c4:c4:3c:b0:a5:aa:0c:c7:8e:6e:
7b:87:40:ed:d6:b2:a3:1e:3c:52:af:97:be:2a:4f:85:f3:bc:
b8:7a:4b:3c:3d:3d:3f:cd:17:cf:ad:58:7c:e1:0f:4b:34:90:
05:56:81:3b:f3:86:e3:e9:5d:3b:e2:6e:9d:0f:fd:dc:12:e3:
bb:5b:8d:0d:39:49:13:69:4d:9a:4b:ac:dd:31:f4:b3:84:71:
35:ca:1b:f4:47:be:37:47:4d:a2:63:19:da:ea:96:d0:6a:56:
1a:de:a3:25:0e:f5:81:79:5b:eb:2f:04:53:b5:92:ff:de:e5:
34:81:6e:66:e4:1a:5d:38:9a:06:94:f5:e0:ce:e9:97:89:8b:
a2:ed:68:98:8d:e9:ae:01:10:87:4e:2c:c8:a2:dc:fd:a0:09:
dd:77:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:50 2025 by rpki-client