Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8124C6D8C8BA11EFA7875289762E951A.roa
File: 8124C6D8C8BA11EFA7875289762E951A.roa (raw, json)
Hash identifier: ng+Qmjfp9qpY4XgUshGR/d+l86kyrlQvjkJRlit45Nw=
Subject key identifier: BD:C7:D1:82:C1:C2:A5:D2:6D:46:B8:D3:E5:C2:A8:65:15:AD:72:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8124C6D8C8BA11EFA7875289762E951A.roa
Signing time: Thu 02 Jan 2025 03:34:43 +0000
ROA not before: Thu 02 Jan 2025 03:34:39 +0000
ROA not after: Sat 13 Dec 2025 03:34:39 +0000
asID: 984
IP address blocks: 154.221.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78282 (0x131ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:34:39 2025 GMT
Not After : Dec 13 03:34:39 2025 GMT
Subject: CN=67760953-4899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:76:f9:6a:77:4f:27:33:e2:86:82:9c:72:
33:85:e2:97:b2:51:f6:c8:d3:17:d4:ca:b9:41:2b:
cf:9a:e4:ba:2c:01:d0:07:8e:c9:a2:66:fd:5d:79:
32:b9:af:de:ec:bc:0f:a6:a0:eb:bb:a6:e5:aa:f1:
d2:eb:12:c9:85:e1:d5:57:56:e2:71:52:83:9f:93:
5f:60:a5:2a:78:61:c1:08:2d:97:66:87:cf:ba:89:
20:f8:8b:78:48:29:15:15:09:b9:1c:4f:df:aa:37:
c9:01:d7:53:58:4f:d4:b7:d7:8c:44:44:96:38:41:
7f:aa:62:b2:b7:2e:05:55:22:10:0e:e8:42:59:e2:
30:a3:ff:2e:1c:47:9b:9d:50:d4:9e:2e:ab:29:ec:
0e:c4:40:77:69:25:9c:a2:38:cf:7c:bc:8f:e2:2b:
66:5b:a4:47:68:8c:ad:22:d3:37:ba:dd:c8:d7:75:
30:bb:57:e5:f6:4e:85:c4:40:cb:fd:a7:04:3a:fb:
03:38:17:c4:7a:ba:8c:c3:c0:d5:80:8f:1c:01:0f:
42:f8:e4:6e:ad:d2:b9:c9:76:e1:d1:e1:b6:dd:60:
48:b8:31:c0:a5:28:dd:d6:8d:c3:19:fd:76:07:eb:
66:27:01:b9:ed:22:5a:f1:32:ea:91:44:0b:1b:0b:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:D1:82:C1:C2:A5:D2:6D:46:B8:D3:E5:C2:A8:65:15:AD:72:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8124C6D8C8BA11EFA7875289762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.37.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3e:22:09:b0:2a:ff:e8:70:70:5a:64:e5:69:c4:b3:e4:65:
56:57:19:dc:dc:2f:24:80:b7:6c:4a:eb:db:93:21:67:98:36:
df:03:45:35:17:64:db:c2:a8:7b:24:44:cc:c6:23:e3:4e:98:
80:25:4c:d2:01:3f:dd:b2:b1:eb:6d:6a:2e:e6:c4:e0:3d:81:
00:8d:64:58:1b:de:5f:a8:9d:fa:71:b0:b0:1f:ab:b6:78:e4:
94:59:5c:f2:2b:5b:f9:be:bc:0f:ca:af:e2:02:ff:13:09:16:
45:4e:e8:8a:bf:c0:90:98:f4:77:17:77:67:fa:91:eb:e1:88:
cf:dc:64:9b:ba:4a:f3:06:a4:66:15:ce:f5:d0:41:54:5e:29:
22:5c:81:ed:2b:c8:5c:8f:3d:4c:2b:a0:35:b7:9c:d4:ba:57:
fa:79:33:4f:a6:98:41:e3:d4:79:7c:67:39:e6:43:f1:f6:a8:
79:6b:9f:88:e0:2f:6e:2a:96:c1:5f:3e:a6:48:b9:55:d3:19:
a3:d1:3c:ca:84:8c:06:d5:c0:25:bd:9f:00:52:36:4f:41:ca:
ce:b7:ff:cf:81:2e:c7:f0:09:b1:c3:24:60:91:e8:70:c6:23:
bc:6c:52:0d:36:3a:46:aa:62:03:fc:d9:40:7e:02:73:c0:9b:
ad:cd:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:42 2025 by rpki-client