Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9820699EC35D11EF9FC3476F762E951A.roa
File: 9820699EC35D11EF9FC3476F762E951A.roa (raw, json)
Hash identifier: A/0S0fxdREYo1lH1roFKC+gtJ+As5ggqqQWXA9QqxTA=
Subject key identifier: F1:F3:B1:7D:B4:8A:04:85:35:ED:92:08:7F:54:CF:AE:7E:92:C0:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012607
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9820699EC35D11EF9FC3476F762E951A.roa
Signing time: Thu 26 Dec 2024 07:47:02 +0000
ROA not before: Thu 26 Dec 2024 07:46:59 +0000
ROA not after: Fri 12 Dec 2025 07:46:59 +0000
asID: 984
IP address blocks: 154.88.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75271 (0x12607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:46:59 2024 GMT
Not After : Dec 12 07:46:59 2025 GMT
Subject: CN=676d09f6-a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:68:e6:07:73:1e:62:94:16:7d:09:0a:0f:
f4:f2:c4:51:da:2c:11:4a:2e:f4:0b:39:b8:52:76:
81:c2:c4:b8:06:49:18:85:57:ec:20:78:d5:fc:03:
08:6b:fe:02:a8:da:e1:51:4d:28:77:74:09:20:b7:
ab:22:7b:31:68:c5:1a:0f:5a:bd:16:0c:8a:ad:35:
29:75:f8:8b:84:5c:88:e3:ae:67:fe:ea:9a:90:37:
16:b2:b3:a3:f6:ab:fe:d4:ba:5d:03:8d:fd:1f:41:
b3:b1:a1:c7:82:96:b6:e4:1e:f3:fb:72:1a:86:53:
f5:58:35:56:fc:82:6a:b2:b7:d5:2e:84:53:ff:bb:
35:cc:5b:90:e9:42:ec:28:3c:0a:33:5b:ac:cd:3f:
c7:3c:cf:c7:1f:b5:96:a5:f5:22:52:f8:1a:eb:69:
a3:f2:50:89:a7:6f:24:cf:df:5a:ca:5a:ef:a5:d7:
1a:84:54:fb:b4:20:9a:be:03:ea:a7:69:08:49:10:
3b:17:1a:68:b0:5c:47:55:29:d4:2c:22:89:f6:af:
5d:1f:f4:21:be:74:2c:fa:a9:49:8e:fb:43:2f:64:
78:13:45:56:7e:83:7f:05:c2:ea:66:21:39:33:36:
74:c4:2f:21:1d:69:c1:77:a4:7f:57:88:9b:73:9b:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:B1:7D:B4:8A:04:85:35:ED:92:08:7F:54:CF:AE:7E:92:C0:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9820699EC35D11EF9FC3476F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.58.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9d:5f:c1:45:76:11:dd:4c:26:35:26:82:31:76:32:13:17:
44:8d:b0:95:30:87:1e:b0:b7:e7:ed:2a:7b:80:24:da:0e:e3:
8f:5a:fb:e6:cb:aa:b9:4a:34:b9:f3:87:89:09:c8:4c:4d:08:
c3:f6:a0:67:d8:74:74:8c:bb:38:af:ef:9c:ea:b4:03:03:5f:
cc:32:df:e9:9b:ee:fb:96:f0:ad:c4:6b:31:a5:fc:f8:28:be:
fa:3f:fd:f4:26:29:cb:5a:d7:05:8a:df:5c:26:c2:c8:c6:5e:
22:f2:d8:50:ea:d7:0e:ac:2a:ee:bf:b2:45:97:58:87:9d:98:
9f:91:85:44:de:78:dd:a5:0d:a9:17:bb:23:75:b3:f5:98:56:
76:05:95:7d:de:d2:91:1c:4c:18:43:ec:8b:89:7f:24:d9:53:
79:ef:d2:22:8a:49:59:be:7f:5e:39:79:7f:09:af:56:e0:ce:
c9:9b:ad:90:d7:b0:69:0b:3e:43:ef:4d:b3:ef:70:b2:10:2d:
f3:b4:41:00:36:1b:b8:9f:84:bf:25:f7:0a:4f:ef:c5:de:55:
71:c5:6d:be:89:09:4f:00:f5:9b:28:b8:ab:18:da:83:7f:eb:
7d:b8:cd:b8:a3:9a:fd:5b:e5:bf:a6:cc:af:0b:0d:86:76:7c:
dd:6c:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:22:32 2025 by rpki-client