Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82507C08C1A511EFBE859375762E951A.roa
File: 82507C08C1A511EFBE859375762E951A.roa (raw, json)
Hash identifier: UVRhbw+WcVvGIz5+hZp9mtZu0p7Ak4jn73gZ8lkuW7M=
Subject key identifier: 31:9A:99:3D:0E:96:32:0A:11:4C:9B:BA:73:AF:D2:84:DD:A8:94:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82507C08C1A511EFBE859375762E951A.roa
Signing time: Tue 24 Dec 2024 03:16:47 +0000
ROA not before: Tue 24 Dec 2024 03:16:44 +0000
ROA not after: Wed 10 Dec 2025 03:16:44 +0000
asID: 984
IP address blocks: 154.92.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73961 (0x120e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:16:44 2024 GMT
Not After : Dec 10 03:16:44 2025 GMT
Subject: CN=676a279f-e37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:cf:c1:3f:94:29:12:05:e7:28:41:c3:b3:
52:99:16:79:29:88:e2:a3:5a:1a:28:66:f8:27:67:
71:02:98:66:1e:44:d1:ad:6c:92:be:65:e2:1e:7b:
ba:b0:8a:99:ac:24:6b:81:57:d7:2f:31:40:a0:29:
2b:ba:bb:7c:1a:bf:0d:57:9d:a6:a1:7d:f8:b5:f3:
6f:0f:f5:1e:c5:b1:d0:d1:5d:6e:62:ae:3d:1a:b7:
27:83:4f:07:3b:1e:57:2e:a7:34:1b:58:be:44:6c:
6e:7d:be:37:bc:61:d1:9a:68:a4:4b:74:5c:5f:80:
aa:81:68:38:67:c7:34:5a:7b:50:b1:0d:73:ac:77:
1c:8d:d3:e8:21:9f:3e:0a:15:26:66:0c:19:90:c7:
08:58:7d:cb:93:e5:bb:d2:f7:2e:a8:9d:48:74:57:
7c:15:76:f0:be:3f:57:12:1f:44:26:3a:77:44:84:
83:ea:c7:8e:26:4a:ad:d3:14:ec:58:a2:00:95:c1:
fc:bd:cf:e9:17:69:3c:6f:4f:88:c5:57:6b:d6:48:
a0:62:31:ce:bc:64:78:10:fb:7b:56:9e:d6:2e:9e:
ab:60:04:4e:d6:22:37:81:e1:06:d4:e2:24:dd:3f:
86:33:9d:16:7e:75:05:21:03:da:9f:e5:14:75:19:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:99:3D:0E:96:32:0A:11:4C:9B:BA:73:AF:D2:84:DD:A8:94:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82507C08C1A511EFBE859375762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.156.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c7:91:8e:71:47:09:cb:f3:50:8f:74:50:b0:f3:4d:dd:4e:
26:20:a9:bd:08:0f:a9:76:15:36:7b:56:45:d1:8b:85:22:67:
e9:91:dc:93:ff:aa:67:39:1f:43:f6:a2:6a:eb:14:44:c1:86:
3b:57:4e:1e:b1:fc:16:63:ac:52:e9:0f:65:19:47:69:0d:99:
60:9a:4a:8e:5c:4c:77:f3:c9:ea:c2:ed:65:14:a8:01:56:65:
16:69:17:a9:25:86:e7:cb:01:d8:8f:b4:de:3f:a7:37:21:c9:
ea:12:82:63:15:2d:fb:82:a1:e1:5a:87:b4:65:9f:3d:73:98:
52:c8:5e:de:e2:c1:11:6a:08:77:98:d9:a5:ec:e9:15:ca:08:
f2:0e:e1:c4:46:1e:f9:dc:15:cb:88:ca:2f:16:17:e1:3b:97:
76:e5:ef:a5:ae:3e:d4:78:ff:bb:95:ca:85:97:fb:d9:8f:0e:
e6:ef:d1:6c:a4:8d:3f:55:4d:97:5c:74:47:d6:c0:a3:63:cd:
28:c2:9f:66:8c:c3:bf:ba:2e:e2:3c:e0:35:0a:f0:25:eb:13:
48:38:2c:fb:53:24:ef:8b:3e:54:a6:00:58:b1:e7:ac:1c:a5:
97:bd:78:c4:2c:3d:e9:71:fe:9d:aa:aa:63:f2:57:aa:28:00:
f1:e7:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:07 2025 by rpki-client