Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996A2EDEC53D11EF8A5DBC56762E951A.roa
File: 996A2EDEC53D11EF8A5DBC56762E951A.roa (raw, json)
Hash identifier: QspK3A5+VP8bVh5Gw0Jc124jwKwSvNN4dsCyPaEy5pY=
Subject key identifier: A9:92:2B:B9:11:AB:12:CC:C4:63:C5:44:34:CA:4E:73:F2:71:E4:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996A2EDEC53D11EF8A5DBC56762E951A.roa
Signing time: Sat 28 Dec 2024 17:03:03 +0000
ROA not before: Sat 28 Dec 2024 17:02:59 +0000
ROA not after: Sun 12 Dec 2027 17:02:59 +0000
asID: 17561
IP address blocks: 154.205.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76893 (0x12c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:02:59 2024 GMT
Not After : Dec 12 17:02:59 2027 GMT
Subject: CN=67702f47-7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:ad:a9:1e:2b:e8:6e:1e:6c:93:02:72:83:
48:0c:c4:e6:02:43:34:15:e8:85:51:d9:34:8b:dd:
e9:3d:c6:ab:63:1b:c8:7c:80:86:c5:09:d5:93:5d:
3f:54:f7:d7:3c:94:10:ba:61:dd:80:a1:96:5d:76:
29:38:3c:84:66:38:e1:5c:52:ec:7b:20:63:05:88:
33:5a:35:1a:71:51:c9:8b:77:89:89:1a:ce:84:73:
0d:21:12:04:a4:62:8c:af:1f:f6:f1:6e:21:e5:4f:
80:b0:4f:b9:a4:4a:02:be:2a:f0:0e:85:3e:96:a0:
21:dd:d5:ea:4d:fd:11:c6:9f:42:48:c7:03:0b:03:
f5:59:b5:0f:3c:00:a3:c4:02:ad:07:74:d5:31:fa:
3e:c5:d4:ff:7f:1d:75:58:f1:79:84:9b:ae:36:7e:
b0:f1:b8:0b:38:af:27:e9:f1:36:2d:fc:c0:4c:90:
35:cb:c9:07:1d:0b:56:89:0e:26:f9:85:0f:2b:e8:
97:db:a0:cc:1d:f4:a4:95:4f:64:f3:4f:2c:34:2c:
ba:9b:3f:25:ea:5b:5a:75:f3:d5:19:43:a3:e8:da:
04:7c:54:78:c6:4f:ea:52:85:e1:74:c8:74:d5:bf:
22:eb:f7:26:fc:cf:cc:f4:7b:0f:e8:3b:d3:14:5a:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:2B:B9:11:AB:12:CC:C4:63:C5:44:34:CA:4E:73:F2:71:E4:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996A2EDEC53D11EF8A5DBC56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bb:ec:c0:d7:ef:78:21:98:d5:28:05:b0:7e:77:9b:9c:8d:
de:54:13:ca:b8:0b:40:69:3b:25:e5:b8:78:f7:56:f8:ea:c4:
97:00:37:3c:57:f0:a5:4d:00:63:6c:44:f6:18:3d:1a:46:b1:
94:6d:cc:6d:95:bc:ae:75:0a:36:68:aa:b7:8d:b3:ec:ea:66:
84:c9:38:0c:9f:55:a2:c0:08:eb:e0:83:79:26:64:37:49:7e:
70:59:10:ca:03:5e:3e:5b:4a:e4:97:87:9b:13:12:e0:a9:d3:
a0:36:b8:40:0d:6d:97:b0:1b:a7:a1:6d:d8:8f:a5:3b:01:1e:
c9:fe:7b:14:bd:3c:e6:b1:b7:b2:15:9d:64:83:3b:8b:26:d3:
c3:bf:c8:1f:67:eb:81:fe:ac:45:f4:ec:bf:de:f9:e8:93:29:
ba:71:a0:7e:4b:26:23:0e:e0:12:77:b1:0f:fd:7a:e4:e6:3c:
35:31:2d:1d:f0:8f:03:c5:b3:e3:0b:d8:b7:90:2e:fb:29:70:
cf:09:ba:44:cb:f7:33:c5:4d:03:ec:ac:33:1f:73:9c:4b:c1:
f4:77:17:26:f2:02:be:e5:0b:e7:7f:5c:24:1d:61:67:71:ca:
96:b5:81:94:7d:90:5c:9f:32:62:64:f2:b3:85:4b:a8:7d:6b:
4f:2e:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:33 2025 by rpki-client