Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DA6F8CC27011EF91C51F93762E951A.roa
File: 82DA6F8CC27011EF91C51F93762E951A.roa (raw, json)
Hash identifier: gyrRA0PIxFAr+Xdzxviyhv5h4scWIGHj+9K//0bCe80=
Subject key identifier: 5A:AE:56:32:7F:A1:BF:E4:13:D8:14:3B:54:D7:E5:85:09:23:F1:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01245E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DA6F8CC27011EF91C51F93762E951A.roa
Signing time: Wed 25 Dec 2024 03:29:56 +0000
ROA not before: Wed 25 Dec 2024 03:29:52 +0000
ROA not after: Wed 10 Dec 2025 03:29:52 +0000
asID: 984
IP address blocks: 154.211.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74846 (0x1245e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:29:52 2024 GMT
Not After : Dec 10 03:29:52 2025 GMT
Subject: CN=676b7c34-07c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:f3:49:af:31:e9:82:2e:8d:d1:b4:8b:bd:
d3:78:c0:31:0b:62:33:aa:d5:00:4e:bc:e8:7f:13:
b0:67:1f:d1:89:2d:c2:45:20:2e:29:ee:20:7b:e4:
03:13:a9:a3:9f:9e:af:35:2f:4b:16:a1:01:21:44:
2e:5d:f8:17:25:a5:92:76:5d:d6:8c:4c:aa:74:fc:
d2:ae:7b:d4:82:c3:fa:d4:4f:17:87:1c:b4:04:db:
79:41:d7:de:7d:5c:b4:6c:f1:f7:0d:ac:54:de:e8:
23:f9:68:97:79:78:6c:34:f2:0d:aa:70:1d:f8:5a:
78:00:74:17:61:81:4f:8c:42:4f:40:9e:31:85:99:
c7:fa:6a:d1:5f:9d:26:ba:ff:0e:26:73:21:ba:40:
0a:30:57:7b:5b:03:44:fd:38:5c:08:25:2c:9f:17:
4c:87:f2:3f:7c:c6:9b:8f:9d:79:2b:c7:7d:b7:0e:
de:a8:c9:6a:f7:6d:6d:71:41:ab:47:46:78:f9:91:
c2:6a:d9:99:2a:08:e5:ab:54:db:80:c5:4c:33:63:
8f:12:05:bc:2e:e7:7a:f4:df:15:93:e4:11:fb:b8:
d8:05:fb:3a:f2:63:5e:6e:54:af:b9:90:b7:f7:66:
3c:72:5e:ca:8a:4d:0e:b9:ce:05:ba:24:24:51:1a:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:56:32:7F:A1:BF:E4:13:D8:14:3B:54:D7:E5:85:09:23:F1:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82DA6F8CC27011EF91C51F93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:10:fe:9e:61:5e:6b:71:59:07:f7:bc:7e:58:04:81:fc:25:
d2:d1:52:c4:62:3b:84:08:a5:a1:35:5b:2b:0d:ed:a3:76:a3:
b5:be:71:c5:16:42:4c:d1:88:9c:84:c0:5d:52:e9:05:d1:f4:
73:88:71:9c:b9:4c:be:77:10:f6:52:7e:33:11:0c:6d:d8:bf:
5e:97:1f:3c:c3:46:dd:67:0a:d0:be:59:5f:f8:c5:97:ae:20:
4e:c4:d2:51:a8:d0:38:84:ad:e4:7a:54:bb:19:8a:ca:e8:45:
59:8e:f0:6b:97:60:87:b7:61:10:0b:7d:20:c3:80:39:23:9c:
59:78:9a:4d:82:43:9e:19:da:b9:a9:d6:5b:f4:18:04:3e:43:
fc:59:4b:da:cf:76:9a:a1:69:2c:30:96:11:96:19:7f:c8:f3:
f9:42:7c:c1:cf:21:86:f9:78:4f:d1:b8:db:03:73:9b:c4:03:
07:fd:84:0e:91:54:7d:37:eb:3d:6d:12:85:cb:63:0b:f5:a5:
bd:67:d4:43:7b:7e:23:d0:0a:bf:c5:32:b6:ac:4e:e1:99:22:
0d:ff:5b:ec:d6:1d:28:9d:b4:98:81:8b:4c:50:9d:61:87:ff:
28:a9:a7:53:85:42:fc:30:c0:36:1d:cf:47:1e:a1:0d:41:a2:
c4:f6:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:45 2025 by rpki-client