Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987E53DAC42311EFAF565662762E951A.roa
File: 987E53DAC42311EFAF565662762E951A.roa (raw, json)
Hash identifier: Skchs+5hQhJlr6P0ETbVo4Q9r8OJtzqtTm9qAgccE7c=
Subject key identifier: EE:EB:F2:6B:57:40:BB:5F:B6:9A:72:18:1F:84:69:9D:58:8C:BB:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987E53DAC42311EFAF565662762E951A.roa
Signing time: Fri 27 Dec 2024 07:24:23 +0000
ROA not before: Fri 27 Dec 2024 07:24:20 +0000
ROA not after: Sun 12 Dec 2027 07:24:20 +0000
asID: 17561
IP address blocks: 154.202.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76255 (0x129df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:24:20 2024 GMT
Not After : Dec 12 07:24:20 2027 GMT
Subject: CN=676e5627-6823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:98:a0:cb:79:d1:8d:78:ea:7e:d3:78:85:
ab:4b:bf:1c:32:af:56:3b:59:92:3b:c9:46:13:63:
1f:91:fe:f1:6c:9c:82:9d:01:a3:7f:22:12:20:a1:
8a:46:a8:f1:9f:af:6d:9f:12:b3:26:13:af:ba:64:
4e:a9:23:a7:e0:fe:b4:3c:4c:3d:17:b9:5c:4e:b8:
90:c9:01:16:44:79:27:32:01:56:26:9f:58:5f:84:
a1:32:a2:ff:a4:7e:30:2c:92:ab:94:fd:54:9e:e2:
b1:0e:08:45:2e:7e:b5:f7:b0:97:b9:3e:6d:1f:3f:
a4:35:30:dd:f7:30:36:3a:0b:54:79:30:7e:e4:08:
f4:9b:7b:be:c4:9a:e2:40:25:4c:28:30:4b:c6:85:
6a:cb:35:8c:64:28:14:67:27:dc:d3:4f:f0:fe:8f:
ab:c1:82:94:65:1e:97:73:1b:7a:12:90:3c:dc:11:
43:4b:ec:58:9d:e9:9f:cb:9a:95:4e:d9:82:c7:a7:
81:81:1e:76:06:b6:2f:b2:5d:51:6e:02:80:af:f2:
56:1f:9b:27:e4:27:36:84:00:f2:30:80:b0:5d:55:
e9:80:15:42:f2:a8:3a:7f:a0:ec:3a:6d:f2:cb:63:
9d:9e:37:19:e8:21:79:2e:47:11:8d:72:8d:39:a6:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:F2:6B:57:40:BB:5F:B6:9A:72:18:1F:84:69:9D:58:8C:BB:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987E53DAC42311EFAF565662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.69.0/24
Signature Algorithm: sha256WithRSAEncryption
40:55:08:99:b6:df:ba:e8:10:a6:eb:06:60:03:09:b9:05:e9:
99:91:09:d2:ac:0b:33:98:0b:e7:1b:e0:3d:af:bd:e8:a1:52:
1d:15:99:32:f6:9e:58:35:72:a8:70:8e:8d:ae:61:1b:11:75:
01:45:5c:10:b6:3d:f2:1f:e0:56:e3:a3:c5:01:f2:cd:c5:81:
cb:37:68:0a:9d:8d:94:e1:1a:9b:74:d3:fe:8d:32:05:54:e4:
8e:48:66:bb:00:54:3a:44:1b:64:af:5c:d5:66:3c:74:79:b8:
ed:21:87:4a:43:45:7e:29:a3:74:91:05:b0:5d:3b:e1:2e:3c:
a2:8c:50:fa:cb:da:ec:78:76:d1:12:7b:d1:bf:89:8a:bf:87:
8f:92:2b:87:d3:4c:b3:35:c5:30:c2:64:c3:f9:02:f2:05:0f:
b3:af:64:0b:5d:9a:23:7a:d1:ff:98:c4:79:f9:da:cf:cf:d0:
8a:de:96:46:25:75:13:ad:fc:52:ef:c3:bd:38:fe:af:11:89:
15:2d:60:bd:01:d2:22:c4:f0:38:bd:13:cd:d4:3b:2e:20:1f:
e4:77:f9:af:a6:6f:9a:79:88:57:68:39:57:fb:b2:41:5b:ba:
d6:cf:8e:b1:ca:ba:5f:a1:b5:7b:e7:9b:96:3b:32:65:ee:e6:
e5:d1:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:25 2025 by rpki-client