Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9581484CC3D611EF877A8B68762E951A.roa
File: 9581484CC3D611EF877A8B68762E951A.roa (raw, json)
Hash identifier: m4MjQq2NJ7bU4Iy6Mm3x1r7A6Y259i42NPGeQEOIxjw=
Subject key identifier: CB:E9:96:7B:44:5C:D0:B6:8E:5F:6B:5E:E9:37:56:1C:53:72:79:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012878
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9581484CC3D611EF877A8B68762E951A.roa
Signing time: Thu 26 Dec 2024 22:13:07 +0000
ROA not before: Thu 26 Dec 2024 22:13:03 +0000
ROA not after: Sun 12 Dec 2027 22:13:03 +0000
asID: 17561
IP address blocks: 154.84.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75896 (0x12878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:13:03 2024 GMT
Not After : Dec 12 22:13:03 2027 GMT
Subject: CN=676dd4f3-b4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:60:9a:51:e3:29:67:0f:02:c3:5f:d3:cd:
0d:09:b3:d7:2c:14:8e:a9:ec:b8:a3:3c:7c:b8:d0:
89:60:d4:00:7e:f8:c1:6c:21:5c:d4:4b:b9:7e:f2:
a3:44:4b:06:7b:e9:b8:0b:a4:41:64:fe:a4:0e:fe:
d1:02:ec:59:2a:49:58:6a:89:aa:79:5c:eb:bd:5e:
3b:23:dd:05:da:97:1a:b5:af:32:19:7f:4c:3c:b0:
ac:68:8b:11:6b:e0:52:83:ce:ec:ed:65:01:6b:00:
38:92:45:31:f6:6c:76:08:75:43:cb:4e:bc:c7:ec:
de:1c:d6:e7:69:04:4e:24:c7:4e:23:23:be:6c:f3:
86:23:5d:0c:2e:67:78:d9:7c:01:fc:25:08:0a:3c:
76:f7:87:c1:53:37:a0:6b:25:ac:9c:38:15:9d:b5:
fe:1c:ca:a3:f5:94:b8:f1:da:6f:f2:5d:1e:53:ba:
00:f2:2d:ff:9a:5a:81:1b:77:b2:84:fd:6b:77:ea:
87:5e:e3:05:a0:15:1b:f5:85:44:d8:a4:61:0c:f7:
c3:15:bb:81:9e:30:d7:2e:fe:ab:cc:38:1a:e2:09:
d1:4b:3e:09:74:fa:56:7e:d2:7a:f6:07:bd:c3:a4:
c8:16:e0:c9:d0:7a:b8:24:97:b6:60:72:18:9e:43:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:96:7B:44:5C:D0:B6:8E:5F:6B:5E:E9:37:56:1C:53:72:79:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9581484CC3D611EF877A8B68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:bd:6b:de:27:41:e7:5b:ef:af:4b:13:d5:5a:13:26:04:70:
71:5b:76:71:88:12:11:78:0d:3f:6e:82:52:57:b4:ba:e4:1d:
ea:a5:47:62:d0:97:38:cd:0c:11:d9:94:04:db:37:bb:89:2c:
37:9f:ba:5a:88:2a:54:15:22:8e:71:3a:0c:dd:e8:39:e4:37:
1c:14:75:11:21:93:da:2f:d4:57:93:db:1d:5d:4b:03:7b:9e:
bd:1b:14:e0:a7:67:f8:24:da:48:d5:85:d8:85:02:26:10:90:
f1:32:27:4d:a3:ee:c5:01:20:3c:33:c2:26:77:53:97:0b:b8:
7f:bd:42:e0:42:20:af:ec:08:3b:e5:96:73:1d:93:17:8c:4b:
cf:8e:d0:11:da:a5:43:7f:95:7b:c4:82:8f:c2:78:8d:63:3d:
9d:ac:1e:64:c4:e5:1a:62:90:53:3f:dc:5e:29:8a:4d:4d:8c:
51:da:3c:6c:ee:c3:2f:c4:49:0f:5d:05:15:b5:fb:8e:2d:39:
c8:f3:8f:e1:82:f6:33:a2:6d:23:65:20:4c:ab:c4:b7:bc:f0:
6a:10:f1:51:61:3d:12:89:31:b2:29:f6:63:3e:f1:e2:33:8e:
0f:8d:ea:61:80:ab:94:d3:5d:e9:10:2e:77:5a:f4:da:d6:42:
53:f6:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:18 2025 by rpki-client