Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8684EC7EC91F11EF944F7383762E951A.roa
File: 8684EC7EC91F11EF944F7383762E951A.roa (raw, json)
Hash identifier: 2mrIl8SKGBJLYg9QRheO97O2BHxKoZhfASbRtJI2wdg=
Subject key identifier: 24:C8:8A:7B:1B:40:53:FD:BF:CE:07:09:3B:E1:47:FA:F7:63:F2:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01331F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8684EC7EC91F11EF944F7383762E951A.roa
Signing time: Thu 02 Jan 2025 15:37:51 +0000
ROA not before: Thu 02 Jan 2025 15:37:47 +0000
ROA not after: Mon 13 Dec 2027 15:37:47 +0000
asID: 17561
IP address blocks: 154.222.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78623 (0x1331f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:37:47 2025 GMT
Not After : Dec 13 15:37:47 2027 GMT
Subject: CN=6776b2cf-7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:e1:5d:ce:89:81:66:40:92:18:98:05:35:
1e:25:4e:8c:6e:3b:e3:d7:f0:00:68:74:e3:42:7b:
11:b4:40:6b:ed:81:95:e0:6a:23:76:ee:08:63:f6:
c7:d8:16:cf:bc:97:ac:d7:ec:ac:e6:bd:96:e2:fe:
d8:22:b8:c1:2e:89:75:b6:38:bd:a8:b9:32:35:3c:
78:27:59:7d:1d:0a:23:03:23:99:36:1f:87:59:81:
b6:4a:69:5c:65:26:e3:4e:78:d8:ab:41:e1:65:80:
68:b3:2a:cb:4a:d3:3b:91:a4:37:c6:4c:e3:8b:cf:
8b:e0:b3:7f:a7:89:29:42:f1:53:68:9c:fa:2e:f6:
d9:c1:b4:12:05:26:1b:34:72:0c:7a:b5:49:e2:6f:
30:a0:eb:1a:b7:df:6d:4b:3e:11:7e:26:03:91:34:
34:ee:6e:a4:bd:a6:c7:4e:14:91:bf:3b:df:37:fe:
85:97:c6:45:48:e7:96:e0:e0:fe:af:cd:ab:59:2f:
14:f8:0d:56:87:f3:76:48:a2:57:ec:90:29:a1:65:
55:50:47:69:f4:fb:df:c7:f0:8a:45:88:2e:c3:15:
51:ad:23:fa:5d:5c:67:92:54:3c:28:9f:30:b0:90:
93:a7:f6:22:81:4e:59:fd:96:0b:64:18:bc:b1:70:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:8A:7B:1B:40:53:FD:BF:CE:07:09:3B:E1:47:FA:F7:63:F2:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8684EC7EC91F11EF944F7383762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b8:ec:d5:15:b7:e2:c5:a0:e8:1b:b1:81:89:b4:88:12:e9:
36:3d:4f:0d:6d:dc:f7:43:82:2a:67:a4:63:4e:b8:d5:3a:40:
2e:51:55:2f:75:ba:13:68:8b:ff:20:a9:25:af:53:f8:b2:00:
61:9d:1b:9b:0a:5b:64:5c:a2:18:70:e7:1f:99:b0:9f:da:b1:
d5:b5:7a:e4:9b:1b:6d:c8:2d:22:ff:06:0e:6c:4a:7b:31:08:
37:ee:be:13:df:f1:74:04:86:ac:94:2e:87:5e:a9:7b:8a:84:
63:3b:23:be:d2:2d:dd:e5:6c:66:19:61:e5:0f:7c:e2:57:16:
f3:df:dc:ee:ee:63:48:c6:a9:29:db:dd:8b:12:fd:93:bd:ee:
ad:7e:08:b5:c5:a4:a6:6d:98:18:f6:b7:6f:8d:34:74:46:49:
a9:a7:ee:bd:16:de:33:48:7b:cf:b5:bb:62:54:d1:3d:79:44:
b5:d5:db:80:ab:7a:d3:5d:6a:64:36:fd:ff:85:10:f2:ca:c4:
f0:39:d9:83:4a:94:76:62:a6:b4:49:6e:cc:27:10:33:60:dc:
2f:be:03:57:35:47:ea:75:c0:a2:cf:24:c2:7f:76:91:94:21:
a7:5a:71:46:49:e2:91:fc:6d:d1:52:48:3b:6b:75:27:17:dd:
a6:b5:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:57 2025 by rpki-client