Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2851A4C53411EFB073EE9B762E951A.roa
File: 8D2851A4C53411EFB073EE9B762E951A.roa (raw, json)
Hash identifier: zYANip8wl75GG9TOwsRAIyal/Od66NmEF48qMiy0Lmc=
Subject key identifier: 18:9F:FD:AA:18:44:5C:5D:1C:66:4B:1B:AD:76:55:C0:92:F0:28:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2851A4C53411EFB073EE9B762E951A.roa
Signing time: Sat 28 Dec 2024 15:58:17 +0000
ROA not before: Sat 28 Dec 2024 15:58:13 +0000
ROA not after: Sun 12 Dec 2027 15:58:13 +0000
asID: 17561
IP address blocks: 154.204.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76809 (0x12c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:58:13 2024 GMT
Not After : Dec 12 15:58:13 2027 GMT
Subject: CN=67702019-d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:96:52:b0:eb:69:74:ca:ee:d8:b2:31:01:
2e:73:ec:75:1f:73:f7:fa:5d:21:61:5e:56:e0:ee:
67:d4:0e:b4:cf:22:5a:fb:94:4f:8a:18:9a:54:fc:
fe:09:39:80:41:2f:b3:7c:e0:76:7d:0d:1f:1b:38:
ac:ed:82:61:fe:c7:b9:4a:af:69:1e:6e:e2:7f:ce:
f8:f8:c5:3c:27:ec:cf:45:8f:80:f1:16:d7:5f:b6:
27:36:1a:16:49:27:dc:a8:d3:d6:c8:9b:ce:f3:c9:
ff:ce:32:b7:e7:67:35:dc:b0:aa:e9:a3:91:75:1a:
1c:74:e3:78:0a:23:7c:bb:07:fa:5a:2e:8f:ba:51:
1e:7f:79:fc:61:64:09:9c:e6:64:7e:bf:f4:a7:b4:
ec:22:a8:b3:71:28:88:93:a8:c3:0f:09:98:e4:71:
83:90:8d:47:78:e1:cb:ba:b6:a5:b3:44:bc:f3:07:
fd:85:73:38:3d:52:82:d4:5f:3d:c8:ff:8d:91:ab:
cb:ce:bb:e3:b1:04:1b:8e:6c:0a:95:59:9e:19:3b:
db:1a:31:d1:87:82:45:cb:4e:a8:09:3c:c5:75:3b:
20:0a:02:ad:c7:e6:fb:93:c1:3c:ef:1d:61:c3:1f:
50:95:0b:6d:81:63:e1:f0:56:75:18:f7:70:5b:30:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:FD:AA:18:44:5C:5D:1C:66:4B:1B:AD:76:55:C0:92:F0:28:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D2851A4C53411EFB073EE9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.109.0/24
Signature Algorithm: sha256WithRSAEncryption
90:aa:50:34:52:5e:39:d1:14:6a:17:c2:e6:e6:39:4a:94:12:
58:f4:fc:c1:00:41:46:8e:0c:5e:66:d3:bd:2f:df:59:89:d7:
db:82:00:84:21:17:43:ad:61:d2:14:6a:9d:3e:83:91:5a:7d:
1d:b0:70:e3:60:6e:7c:e1:d9:60:66:97:39:1e:0d:e5:c1:7e:
a1:89:95:84:b0:86:f6:d0:ea:e4:61:d9:97:10:3a:7a:4d:06:
cc:a2:61:96:ba:30:41:7f:e1:af:42:8d:b6:06:36:ff:40:d4:
c1:db:b3:c3:13:93:4a:ce:98:8c:7f:e7:a3:8a:2c:27:5b:77:
72:50:f6:42:9e:5b:1c:ef:cb:32:4f:8c:3a:0a:e4:92:31:73:
2f:3a:1a:bc:2d:17:5f:66:dc:5c:cc:ee:b9:60:d3:35:85:1f:
cb:8c:c6:1a:60:3f:2e:e1:a0:32:ae:5d:52:43:f9:74:6a:fe:
3f:31:b2:f2:72:21:d6:14:5c:a1:d6:0e:5e:3a:ff:63:72:fc:
e6:37:21:64:a9:2a:34:f1:fb:7e:fb:0b:e6:28:d9:a3:ab:b2:
25:4d:10:69:cf:c6:c1:70:25:57:27:6c:1c:19:19:8f:4d:45:
a4:6f:86:3d:ab:56:98:bb:5b:3b:4b:62:a4:81:05:2d:99:27:
ec:a6:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:19:25 2025 by rpki-client