Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9191A5F0C62A11EF882E49AF762E951A.roa
File: 9191A5F0C62A11EF882E49AF762E951A.roa (raw, json)
Hash identifier: mkVYJ4NREMSttaQogwa2Er/FyqJsh0qnAZJMu9RrrcQ=
Subject key identifier: FC:E0:CC:96:E8:53:F9:8A:2D:0B:6E:72:F0:E8:FF:1B:28:84:CB:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9191A5F0C62A11EF882E49AF762E951A.roa
Signing time: Sun 29 Dec 2024 21:19:20 +0000
ROA not before: Sun 29 Dec 2024 21:19:17 +0000
ROA not after: Sun 12 Dec 2027 21:19:17 +0000
asID: 17561
IP address blocks: 154.217.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77756 (0x12fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:19:17 2024 GMT
Not After : Dec 12 21:19:17 2027 GMT
Subject: CN=6771bcd8-3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:5a:65:fa:c1:61:78:0c:3e:3a:71:8b:4e:
76:95:8f:52:4c:3b:e7:14:c6:c1:60:de:89:48:67:
55:1c:76:6f:c4:72:51:0b:1c:ab:f3:c6:64:3e:a4:
af:07:29:ca:22:65:42:26:41:62:9a:88:16:b5:ea:
69:97:a0:bb:b8:7a:ee:fb:e5:18:83:07:81:35:46:
39:a5:46:61:5f:ec:b2:74:15:22:47:4b:fe:a2:1d:
f6:fb:46:8e:6f:60:ba:45:6a:22:8b:15:cb:6d:2e:
d1:1e:ad:b2:69:fe:9f:46:7c:4a:ec:15:58:08:dd:
b3:64:77:d2:2e:a3:6e:cd:d5:a3:f7:d4:fc:a8:bf:
a3:16:18:5c:55:83:38:c8:07:81:c8:c3:f3:cf:1d:
24:7b:d8:64:f4:bc:2f:de:b9:98:6b:c3:0d:6d:77:
d4:b7:b8:6f:da:47:5e:3c:f2:8a:c7:1c:aa:18:41:
a1:82:3f:fd:fb:f4:81:77:0f:82:59:f2:d6:1f:80:
f9:ce:31:6a:9e:d2:f3:d6:10:35:d6:90:82:80:5c:
af:7d:04:66:e8:37:cb:27:e9:60:2a:6b:3d:3b:65:
ca:6e:83:00:94:96:47:e5:02:01:17:d1:8d:5b:51:
0c:e8:3e:3e:e4:97:14:7d:3e:d5:b0:ee:0f:c3:18:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:CC:96:E8:53:F9:8A:2D:0B:6E:72:F0:E8:FF:1B:28:84:CB:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9191A5F0C62A11EF882E49AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:30:d2:55:05:2e:e6:87:12:d3:fa:cc:bc:f7:f6:16:fc:00:
73:4f:33:9e:7f:32:e6:b4:04:fe:00:d8:87:c6:f6:4d:f6:96:
4f:58:12:82:11:05:32:2b:e4:72:5f:de:27:d9:68:2f:9b:0b:
3e:3d:cd:1c:20:bb:c2:be:68:f3:66:3f:50:d1:9e:81:9e:74:
6f:cd:2f:f4:da:19:4d:d0:fa:93:dd:26:a5:bb:40:57:cb:91:
ab:e2:93:7a:ee:9a:92:cb:a0:d2:f9:6c:54:23:17:7d:d6:54:
ad:6e:2a:78:94:dd:c1:19:26:1e:b7:c3:4b:eb:49:bf:1b:20:
01:b9:00:71:74:5e:17:1a:5c:61:6c:8e:e0:36:9d:d7:ef:6f:
7b:25:ee:9a:e6:42:45:a6:1b:2b:f1:07:36:cf:61:aa:3f:74:
20:7e:db:e9:dc:17:60:9e:c9:2a:0a:38:70:28:9e:39:60:db:
7e:b8:c2:3b:bd:c3:5b:a5:2e:63:15:f5:93:74:61:3c:e1:83:
ac:d1:fa:56:b3:0a:04:4d:d3:f7:04:ad:a2:14:77:3b:62:5a:
12:13:2a:0a:d4:a8:3a:1c:4f:8a:9f:2c:07:56:d6:fb:cf:20:
98:4f:de:16:d0:2d:b2:05:98:c9:cd:3e:36:04:5e:0e:80:b9:
5a:10:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:45 2025 by rpki-client