Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB4FBB0C41611EF9CBD2090762E951A.roa
File: 9BB4FBB0C41611EF9CBD2090762E951A.roa (raw, json)
Hash identifier: Z/0KFttl7FOe+xSjHEgzOWXSuoraQRFWBpymSVCI0C8=
Subject key identifier: 39:9C:4E:89:BB:E7:F4:69:5F:E3:C9:9D:35:EC:29:55:2C:74:09:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012961
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB4FBB0C41611EF9CBD2090762E951A.roa
Signing time: Fri 27 Dec 2024 05:51:25 +0000
ROA not before: Fri 27 Dec 2024 05:51:22 +0000
ROA not after: Fri 12 Dec 2025 05:51:22 +0000
asID: 984
IP address blocks: 154.197.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76129 (0x12961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:51:22 2024 GMT
Not After : Dec 12 05:51:22 2025 GMT
Subject: CN=676e405d-557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:f5:98:79:06:85:16:8b:f6:51:35:e5:29:
5b:ff:dc:ca:3b:da:bd:8f:bd:3e:63:5b:cb:bc:28:
53:0c:12:db:d6:05:9d:0e:c4:5b:8f:b3:6e:40:74:
d8:4c:16:2e:43:8d:5c:47:5d:a9:7e:16:30:cb:4c:
0f:26:5d:44:86:06:ac:96:1e:05:14:54:ea:7c:5a:
7b:03:de:5e:79:52:d4:cb:c2:3f:54:21:65:9b:27:
23:02:f9:7a:fd:6e:22:a1:e7:34:6d:d4:b3:40:0c:
44:d0:c9:c2:72:e0:ac:9e:7a:ba:fe:cb:16:1b:06:
82:3d:0f:33:ae:0c:04:3e:34:80:20:99:b0:c4:40:
17:e7:d8:bf:a7:ba:48:19:a2:26:8e:d6:ba:b0:63:
a3:2a:d7:5d:66:ce:ea:59:81:d1:fc:af:ab:b0:41:
ab:52:81:b7:aa:46:90:b1:81:e7:81:20:47:6d:45:
8d:2d:51:55:c2:f7:11:f0:81:1e:b9:c6:67:f8:f8:
9b:30:2b:8f:08:92:dc:90:99:e4:fd:04:b4:a2:ef:
e3:cc:e4:d2:f4:66:f5:55:d8:81:26:55:cf:b0:04:
b8:f1:43:bf:57:b0:4c:6e:4f:e4:18:0a:46:45:82:
19:a1:fc:09:23:b8:8d:f6:7e:28:c8:53:ec:4a:7e:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:4E:89:BB:E7:F4:69:5F:E3:C9:9D:35:EC:29:55:2C:74:09:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB4FBB0C41611EF9CBD2090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.68.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:9a:4e:1f:ce:09:40:56:20:fb:fb:ba:4b:b5:21:32:e0:f3:
d9:19:9d:19:5a:88:fa:27:cd:6e:75:1e:e0:23:c1:cb:49:ce:
3e:a6:53:78:7b:0d:55:de:c5:7d:c1:b6:2b:59:a2:9c:08:3e:
7d:f8:ac:5a:07:bf:53:da:0c:e3:ca:a0:3e:cc:1f:8b:84:2d:
e7:f4:0f:18:e1:d1:a6:21:b6:38:5c:5d:6b:04:21:d2:69:8f:
8d:6a:3e:79:b8:3f:b6:4c:66:2f:c0:f9:a1:7c:45:56:41:35:
e8:b5:5d:57:ef:30:2e:c2:ac:84:96:14:e2:37:70:40:b0:36:
da:25:53:1d:9b:32:29:3f:7c:50:4c:a9:0e:15:f0:a7:f2:a5:
30:46:0b:25:f5:27:94:54:5b:55:5a:90:92:6b:3e:c3:6e:1b:
4d:08:29:98:bd:a4:31:cb:0e:88:b0:12:fa:e9:6e:29:68:cf:
c9:8b:84:2e:dc:7c:e6:d7:80:d0:2c:3e:96:92:f5:36:c9:53:
81:ec:ae:a1:cf:15:f7:12:b7:38:e7:b4:2a:c1:8c:a2:8c:08:
34:bc:79:0d:f3:4e:f4:07:ce:2c:62:4a:a8:d6:3e:d5:ac:66:
d3:7b:fb:64:77:61:f3:b6:0f:7d:f8:da:23:7c:6e:08:61:b7:
ba:0f:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:14 2025 by rpki-client