Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F29DC0AC54111EF9C4A4C6E762E951A.roa
File: 7F29DC0AC54111EF9C4A4C6E762E951A.roa (raw, json)
Hash identifier: pCl/XwAjnJnoxWPNAkssraB++36MJJ8rEmhNqozM0zE=
Subject key identifier: 5A:E5:5A:A8:5A:64:35:54:CD:BF:D0:F8:ED:63:B0:50:69:CB:34:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F29DC0AC54111EF9C4A4C6E762E951A.roa
Signing time: Sat 28 Dec 2024 17:30:57 +0000
ROA not before: Sat 28 Dec 2024 17:30:53 +0000
ROA not after: Fri 12 Dec 2025 17:30:53 +0000
asID: 984
IP address blocks: 154.206.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76929 (0x12c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:30:53 2024 GMT
Not After : Dec 12 17:30:53 2025 GMT
Subject: CN=677035d1-8199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:4f:e4:fe:4c:c8:ac:e7:35:d1:6f:3b:b4:
0e:41:7f:bc:4a:a1:40:4e:2c:b8:d3:12:ce:1b:cb:
78:06:c7:dc:97:2d:95:ba:b3:5c:39:ae:7f:83:09:
58:8e:0f:a8:c4:af:36:c9:3c:7a:8e:2c:ee:c1:d2:
4e:01:8f:39:2f:bd:e3:13:11:83:07:f8:4b:97:fa:
ed:cc:9a:11:71:f9:a8:8a:1b:4f:11:e4:b6:51:b0:
88:2a:94:97:b6:76:e9:cb:3a:df:8a:51:5c:db:45:
13:51:0c:ce:a8:c4:60:0e:a1:9f:fb:fb:8a:ae:52:
da:45:37:41:74:d0:4b:ee:f1:a6:24:74:0c:1b:e0:
04:31:ad:4b:9f:09:e0:50:3a:df:ab:45:4a:6a:41:
2d:f5:10:23:45:61:d7:34:53:fd:88:e6:9e:7f:0a:
99:17:85:47:eb:ed:eb:79:57:f8:f7:4e:fd:39:4c:
9b:34:0e:51:eb:a3:eb:66:21:80:28:fa:36:79:de:
dc:e7:d4:13:4c:d6:56:3d:ad:de:df:68:82:4b:56:
60:ce:aa:99:64:8c:a2:b3:ab:6f:89:98:dd:b2:ea:
ab:c8:44:87:65:ed:df:ba:bd:2b:0d:07:f2:0b:d0:
9c:e8:ea:ff:b0:ec:b3:7d:3a:97:3a:25:6d:07:77:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:5A:A8:5A:64:35:54:CD:BF:D0:F8:ED:63:B0:50:69:CB:34:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F29DC0AC54111EF9C4A4C6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f1:5d:09:f8:a4:b4:4e:7b:d6:52:b0:30:ff:34:0f:38:05:
de:61:2c:3b:7c:d1:f0:83:78:dd:ab:e3:06:29:40:b1:bd:43:
8e:3b:42:9f:32:3d:e3:03:30:c7:6b:62:81:f6:3c:ff:f2:d3:
6f:97:3f:ff:96:0a:76:60:1b:d8:a1:fb:ac:19:8b:4e:d7:34:
e6:95:d9:87:59:dc:dd:96:ef:3f:4f:fe:5e:58:5a:2e:24:40:
de:56:15:7a:af:65:bc:9a:08:ec:bf:69:10:de:36:53:75:06:
e9:aa:b4:ad:a6:ad:07:5b:93:fc:97:6a:56:ff:ab:cb:63:a1:
78:41:29:24:2e:39:88:fe:5f:85:bd:8b:b9:10:48:4b:b1:ab:
a8:df:3f:38:14:1f:81:f4:3e:51:5e:ad:b2:2b:3c:6f:ba:23:
3c:0c:9c:55:33:4f:41:6d:c3:ef:0c:8c:4d:83:a6:cd:a7:81:
0e:99:50:78:c8:f0:4b:16:24:f8:bf:2d:d1:c0:9f:66:35:02:
e8:28:49:42:75:13:82:6b:a2:95:9a:ba:0a:f0:99:0f:78:6f:
2f:f0:83:3d:8c:79:a8:50:2f:03:9a:bf:8a:72:d2:e8:35:d0:
b4:e4:f1:8a:74:87:94:d0:9d:7c:7a:e3:00:2c:1f:7e:52:95:
b3:54:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client