Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D765F18C54F11EFAF576247762E951A.roa
File: 9D765F18C54F11EFAF576247762E951A.roa (raw, json)
Hash identifier: ssMnmQnlZQ8Oeks3DWErlNdfzuj+Cq8n/u/vlZ84nYc=
Subject key identifier: EB:F0:AC:F6:A5:2B:51:7A:B4:75:6F:FB:14:DF:07:0C:12:A7:F0:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D765F18C54F11EFAF576247762E951A.roa
Signing time: Sat 28 Dec 2024 19:12:01 +0000
ROA not before: Sat 28 Dec 2024 19:11:57 +0000
ROA not after: Fri 12 Dec 2025 19:11:57 +0000
asID: 984
IP address blocks: 154.210.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77059 (0x12d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 19:11:57 2024 GMT
Not After : Dec 12 19:11:57 2025 GMT
Subject: CN=67704d81-2934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:39:db:03:b8:43:4a:7f:2b:ac:86:90:2c:
91:9e:d7:c9:b7:c7:84:67:b8:43:e0:b2:16:ea:bd:
e1:b3:69:7f:93:7d:7c:45:1f:11:2d:a5:ec:89:9c:
df:26:a6:92:d3:44:40:43:02:23:5e:fb:78:64:94:
53:36:66:4b:01:40:6a:ac:30:f0:c5:6d:d8:6e:14:
b9:5c:c0:3a:a4:16:7f:77:d8:36:01:b9:0c:1c:50:
92:df:1f:25:2f:87:88:07:cc:a9:6a:ea:77:f2:b8:
de:de:f7:ec:f6:ae:ef:9d:9b:a3:b3:f2:52:93:1b:
44:28:a0:a4:77:ae:de:bb:da:6c:4c:de:ad:e3:b9:
df:88:da:56:cb:7c:1f:9f:9e:f8:a5:d3:1e:30:ba:
49:de:cf:ab:0c:ab:e7:6d:24:71:4b:00:c9:79:4f:
37:e4:6f:56:8b:a0:2d:7c:3d:89:a7:e4:63:30:11:
d3:43:8d:6f:75:02:7c:34:65:4a:61:0f:16:b8:e6:
98:6e:f1:cd:fc:02:41:fc:41:70:2d:c3:0f:f0:90:
19:54:d5:04:0a:66:06:a1:02:48:e4:21:2d:65:aa:
0b:d5:87:dd:04:1d:cc:47:6f:d1:9d:5a:b1:4e:07:
e3:c0:24:cf:07:5a:7d:80:b1:bb:5a:9e:0e:41:ce:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:AC:F6:A5:2B:51:7A:B4:75:6F:FB:14:DF:07:0C:12:A7:F0:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D765F18C54F11EFAF576247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:79:53:6f:5a:0a:90:f0:5b:26:b2:94:8a:35:d4:ee:f8:5f:
b7:da:c7:bc:db:5c:db:e6:d7:00:08:98:54:7f:77:4a:46:46:
df:bf:4b:69:51:80:c8:dc:29:17:ad:f6:39:72:23:d8:b8:98:
4c:93:fe:de:6e:fb:cf:8e:05:01:2b:a4:f1:fd:62:4d:90:86:
dd:07:22:b0:6d:cc:8f:fa:48:cf:cf:0d:55:16:a7:24:58:b3:
22:70:c1:89:a3:58:95:10:05:0a:9c:b6:a9:1d:80:2b:fb:62:
aa:af:e1:c6:ca:e4:c7:9b:7c:24:5c:e1:f8:6a:56:89:8f:fd:
bd:6a:4d:62:5a:59:f8:ab:48:e7:39:de:b6:0b:de:a7:c7:b1:
f4:28:92:c7:68:bc:9e:d4:ac:06:a6:4d:04:1f:5f:2d:88:70:
81:67:bb:d9:21:23:f4:be:b5:0e:ab:da:c3:50:87:5e:9d:87:
34:98:a3:96:4e:35:a2:8d:11:a9:2e:a9:98:16:65:a6:0e:25:
c0:c9:6c:e9:0d:b6:61:31:61:63:c8:13:cf:80:2e:4a:86:0a:
e8:5e:5d:06:f2:13:e7:25:97:83:dd:65:6c:79:a8:4b:0e:ea:
f5:24:1d:ff:76:a8:be:dd:7d:c4:72:a7:a4:d8:a3:19:24:a1:
b2:89:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:10 2025 by rpki-client