Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A129BEC1A711EF9179BE84762E951A.roa
File: 80A129BEC1A711EF9179BE84762E951A.roa (raw, json)
Hash identifier: xIF2PUNmXZIncdg58O80GjVsnMyEdaEf0Td7ILd7wOM=
Subject key identifier: A8:21:E4:F9:A7:73:7E:F8:BB:0F:60:4C:AB:97:53:6F:C3:93:BB:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A129BEC1A711EF9179BE84762E951A.roa
Signing time: Tue 24 Dec 2024 03:31:03 +0000
ROA not before: Tue 24 Dec 2024 03:31:00 +0000
ROA not after: Wed 10 Dec 2025 03:31:00 +0000
asID: 984
IP address blocks: 154.92.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73985 (0x12101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:31:00 2024 GMT
Not After : Dec 10 03:31:00 2025 GMT
Subject: CN=676a2af7-e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:df:7f:9e:79:b7:9c:6a:6f:70:9e:c9:dd:
96:fb:4d:f5:f4:03:21:63:9e:c8:53:3d:99:92:4a:
82:39:ab:5a:ba:7b:3e:7d:da:57:3a:85:40:45:bd:
41:e6:a9:07:e4:23:76:16:76:26:56:c5:ab:60:01:
ec:24:1b:7b:2b:ee:b1:5b:b8:1f:3b:2a:5e:b3:cc:
6e:e8:fe:6e:5c:f8:ac:bf:b4:8b:36:32:bd:28:72:
9a:4f:b0:94:a9:90:90:22:b6:99:c1:c3:4b:ae:b6:
30:dc:cd:83:ad:5d:a1:95:f7:40:8c:42:c5:51:87:
e7:ee:f5:a5:be:e7:d5:8b:45:b5:09:da:b7:2a:fa:
ad:c3:f6:45:8e:bd:79:3c:69:aa:0d:cb:6b:64:ac:
70:3c:47:c4:9f:f3:32:6d:ab:ac:fb:9e:0e:4f:ea:
6c:62:11:eb:4b:bc:23:37:7b:12:68:c9:29:06:95:
77:2a:3a:9a:be:d0:40:d5:b6:ce:d2:a3:cf:dc:eb:
3d:53:0d:de:fd:b2:10:7a:86:ec:69:b1:65:e9:50:
be:c4:f6:47:36:d8:d0:3b:e7:5d:c0:c2:9a:0a:cb:
10:06:f0:f6:4a:9a:d4:6e:73:19:b3:26:55:dd:cf:
25:45:e0:4e:6d:2e:ec:dc:5f:8a:6d:45:5d:34:74:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:E4:F9:A7:73:7E:F8:BB:0F:60:4C:AB:97:53:6F:C3:93:BB:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A129BEC1A711EF9179BE84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:07:81:f2:90:7c:20:c9:d6:a0:67:f5:3a:3a:4d:ee:f3:e9:
dd:3e:4f:a2:c9:37:62:63:18:31:82:39:88:22:b6:c1:38:ed:
18:ea:3a:6c:1c:c9:04:4f:be:fc:46:0f:f2:58:d5:4d:b8:5c:
3a:52:4d:57:b2:64:b4:2f:9f:b0:cf:41:b2:ce:09:2b:ce:7f:
26:5f:d3:30:fc:b2:db:39:fe:53:92:f9:08:8e:ab:22:cc:0d:
2b:40:0b:8e:fa:b0:ac:95:58:d0:c4:a8:e2:1f:aa:7d:dd:6b:
3c:43:ac:1d:91:50:5e:c7:ec:46:0d:f8:ef:e5:ee:fc:a7:b8:
29:2e:dc:52:6e:35:10:be:d8:c6:09:8a:7e:dc:d8:c2:f3:4d:
dc:24:77:e3:02:44:a5:0f:05:49:23:ed:e5:ae:1c:70:cf:97:
92:09:39:ce:b9:b2:26:5b:77:22:2b:0a:c6:94:78:f5:8e:48:
b3:c0:0a:5a:72:fc:1e:58:fb:d3:c6:e9:f9:7d:74:5b:26:de:
a1:28:02:e1:32:b3:61:b2:2e:ad:55:1b:8f:2b:da:e4:d6:72:
12:5e:ef:4b:bf:2f:93:71:83:f2:a2:e4:a9:00:af:35:fb:9c:
a7:39:59:4f:2a:d5:77:ae:55:40:b2:80:be:23:fd:0c:ca:17:
71:1b:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:31 2025 by rpki-client