Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828DE75CC62111EFAD06A176762E951A.roa
File: 828DE75CC62111EFAD06A176762E951A.roa (raw, json)
Hash identifier: dZKBnpsbklNt1G7tkTJZuoN/kabDCCWn4W8U0L65eSE=
Subject key identifier: 03:7A:F4:D9:B9:26:A4:C8:98:4D:B5:DD:E4:83:6B:41:AA:54:59:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828DE75CC62111EFAD06A176762E951A.roa
Signing time: Sun 29 Dec 2024 20:14:30 +0000
ROA not before: Sun 29 Dec 2024 20:14:26 +0000
ROA not after: Sun 12 Dec 2027 20:14:26 +0000
asID: 17561
IP address blocks: 154.217.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77680 (0x12f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:14:26 2024 GMT
Not After : Dec 12 20:14:26 2027 GMT
Subject: CN=6771ada6-0261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:f0:c7:5a:6a:8b:a7:cc:79:79:17:80:11:
70:11:6b:80:1f:c3:bb:4d:e1:12:6d:48:94:48:b6:
3c:cc:cc:d2:26:46:ca:3a:95:3b:94:ed:30:a8:61:
0c:2d:c5:0b:9b:d3:46:af:d7:d2:a2:56:e9:5a:0d:
52:74:ba:96:92:76:72:fb:3a:d0:87:21:36:20:90:
0d:72:65:49:e9:ce:a6:c8:d0:03:8e:04:3f:2e:d7:
9f:c5:da:eb:bf:67:af:69:b0:2c:84:23:08:0e:27:
07:c3:94:eb:00:62:40:cb:21:70:84:b1:8c:62:76:
e0:ea:e4:e0:86:6b:5b:41:c9:aa:5a:25:a8:d4:fc:
c4:2b:bd:87:6d:a2:a0:4a:2e:3b:92:38:47:62:c8:
83:dc:0a:af:45:0d:21:09:18:60:32:e4:28:04:04:
44:a1:63:28:46:9f:69:cd:03:80:5a:2f:b9:fa:f4:
d5:61:08:c0:73:43:6b:f1:87:d1:41:38:4c:ef:58:
a2:f6:63:45:2c:00:a2:0f:1d:65:3b:ba:46:8b:76:
d2:80:9b:44:5e:b1:1e:db:2d:c1:05:1f:7b:66:f5:
15:4e:23:18:24:4d:1a:85:61:0b:a4:e6:71:32:4d:
59:8d:09:ad:99:dd:e2:93:45:72:dd:5c:30:49:3e:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:F4:D9:B9:26:A4:C8:98:4D:B5:DD:E4:83:6B:41:AA:54:59:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828DE75CC62111EFAD06A176762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a4:34:6a:f1:e6:57:5b:ac:ce:2a:1e:d8:ee:a2:41:0c:f6:
ef:68:fa:e5:81:fa:75:03:38:09:1d:ab:d9:32:ff:99:41:a6:
eb:bd:1c:15:e2:a3:2a:c6:3b:3e:48:28:47:39:3e:91:be:89:
3b:6c:33:bb:67:59:1e:7b:e5:09:43:63:1c:a2:ac:79:4b:ac:
07:d5:ef:34:fe:1a:ee:22:97:ad:62:61:2d:8a:ce:08:5f:bb:
e0:75:e4:6b:d6:8a:2e:0e:7b:b9:17:0a:df:36:71:eb:58:43:
f3:fa:27:27:12:c1:8f:4b:70:61:1e:da:52:c7:cb:8f:90:a5:
88:13:db:27:fc:ab:6d:a3:e9:0b:4e:19:ea:a1:08:4e:c9:6f:
b4:1d:ca:eb:fe:72:27:cc:25:85:2e:20:4f:27:f7:e8:2f:e0:
cc:75:5b:7c:73:c8:3c:43:04:da:35:b9:a4:3f:02:08:00:fd:
56:6f:02:a1:b1:fb:cd:92:33:65:f4:e3:41:df:e0:55:81:8b:
14:2d:92:bb:99:84:15:1c:68:44:27:76:dd:a1:a0:55:e5:06:
04:47:0e:e5:d0:75:99:71:b5:01:50:19:04:58:45:5e:35:29:
3e:dc:2b:c5:ff:64:64:6f:dd:0b:86:23:2f:01:cb:c2:a0:56:
a4:52:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:13 2025 by rpki-client