Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD9D658C26E11EF83270C84762E951A.roa
File: 7FD9D658C26E11EF83270C84762E951A.roa (raw, json)
Hash identifier: BYJ4jKnslUV56EsNJ/sJ4+agRpI+0KEAhw6RL+jg2Ek=
Subject key identifier: C7:D2:8E:1F:22:76:69:0F:DF:4B:3A:78:2A:08:F8:7B:59:76:D2:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012448
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD9D658C26E11EF83270C84762E951A.roa
Signing time: Wed 25 Dec 2024 03:15:32 +0000
ROA not before: Wed 25 Dec 2024 03:15:28 +0000
ROA not after: Wed 10 Dec 2025 03:15:28 +0000
asID: 984
IP address blocks: 154.211.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74824 (0x12448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:15:28 2024 GMT
Not After : Dec 10 03:15:28 2025 GMT
Subject: CN=676b78d4-5420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:64:c6:ca:b3:ab:e1:7a:9b:7f:c1:02:cb:
76:7f:52:cb:af:4e:a1:81:f8:19:7d:20:3b:72:be:
52:28:c5:5a:9e:6e:c4:18:8b:d1:1c:28:cf:9d:09:
00:d0:7e:ce:7f:d8:7d:3b:2e:b4:b4:5c:ae:cd:d0:
27:8b:7f:46:42:7f:6a:fa:09:cf:f1:5e:9d:2f:0f:
d9:eb:88:27:e8:70:c6:b0:ed:07:20:43:dc:cd:2b:
0c:d9:ab:65:b5:bf:6b:1c:8a:73:2e:32:7e:65:96:
1b:1c:d8:a5:d1:d6:83:ac:b1:3d:c5:42:1b:c0:30:
de:d1:81:76:b3:5c:8a:72:34:de:bc:45:93:a4:90:
ea:21:c5:f8:77:56:47:a1:cf:d5:02:f5:5d:49:b6:
3e:ad:59:27:ce:98:31:77:cd:8c:1d:d3:62:21:c0:
65:28:85:b7:b4:d6:69:b7:41:b8:70:57:b3:1f:b3:
b4:67:93:7b:24:79:01:67:ae:41:23:0f:ba:7d:47:
c8:97:b7:ca:84:8b:cb:0c:4e:f4:7c:03:da:00:7f:
b2:d3:80:38:4c:45:e1:75:6b:b3:0c:6f:08:de:b4:
77:4e:97:8c:4d:73:f2:fd:41:85:b0:1c:ad:4f:de:
e5:da:5b:e9:79:f2:33:eb:9d:11:99:66:1c:6f:8f:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:8E:1F:22:76:69:0F:DF:4B:3A:78:2A:08:F8:7B:59:76:D2:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD9D658C26E11EF83270C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.176.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d9:e2:00:4b:42:79:70:d6:0e:61:41:9f:88:98:ff:85:e3:
3b:00:ff:a0:31:06:d7:5b:0f:38:46:b2:87:fc:d3:1c:aa:c7:
80:38:10:a6:52:62:53:b8:88:b1:20:1b:a3:af:58:a6:66:8e:
ec:69:ce:37:aa:9a:da:52:4b:3d:e1:81:a9:41:ae:df:c5:83:
84:d2:4f:6b:03:c4:4c:50:e6:7e:2f:22:5c:6d:db:21:5e:a1:
c5:c5:03:33:fb:14:e4:5e:1c:94:7f:5c:28:29:e1:a2:34:40:
2d:46:1e:98:bd:fb:64:cf:4f:24:04:de:5d:e5:c7:45:4b:e3:
56:4e:34:65:3d:00:ec:be:61:a8:82:a8:a8:f3:34:67:5e:e8:
9c:f4:b4:bd:1d:a0:da:39:9b:37:8e:57:8e:e3:a1:b0:cf:9d:
19:df:41:cb:bf:cb:13:f8:de:4b:37:88:d9:80:07:bb:bc:69:
ff:a4:cd:dc:74:e3:fd:e6:9c:55:f2:c1:9b:31:86:75:d5:fc:
eb:df:46:7c:6c:a8:0a:b8:6a:62:26:c8:f9:19:6f:39:ec:c5:
00:6d:35:0a:6b:a8:e2:23:68:27:45:09:a5:5d:a1:c3:40:df:
4a:a7:39:82:74:d6:53:ac:33:45:50:be:a2:7a:a9:65:a2:e1:
27:2a:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:55:47 2025 by rpki-client