Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D804084D57411EFBFC9A0B2762E951A.roa
File: 9D804084D57411EFBFC9A0B2762E951A.roa (raw, json)
Hash identifier: bE19PJFdCZfPTS+MAMwNxUu/kjgOKJCbVhDZlVgYMSU=
Subject key identifier: 35:CB:E8:3F:C5:1C:07:28:48:4E:EC:7B:34:F7:CC:97:43:5B:87:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D804084D57411EFBFC9A0B2762E951A.roa
Signing time: Sat 18 Jan 2025 08:17:11 +0000
ROA not before: Sat 18 Jan 2025 08:17:07 +0000
ROA not after: Sat 22 Feb 2025 08:17:07 +0000
asID: 395886
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81340 (0x13dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 08:17:07 2025 GMT
Not After : Feb 22 08:17:07 2025 GMT
Subject: CN=678b6387-51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:d0:87:ed:02:73:81:b3:35:5d:fc:2c:46:
c1:77:71:45:fc:bc:a7:1a:82:c4:c4:0c:4c:98:12:
2d:72:0d:b3:14:8c:00:27:a0:00:8c:59:fb:ad:1d:
0e:d6:cd:06:05:5a:d0:d5:df:b5:4f:0b:32:63:fd:
64:60:45:7b:df:f1:96:a6:a7:b1:de:ec:eb:1b:5c:
8d:51:99:58:91:83:40:11:b7:be:ff:5d:b9:63:ca:
8d:30:b0:c0:bc:25:8e:ee:99:e0:b0:9d:2f:0c:3b:
d2:ed:76:1e:d2:ce:38:06:ec:89:f1:7c:b9:73:3d:
9b:44:8e:da:03:32:13:8a:52:c2:df:16:86:b5:92:
23:28:ca:67:34:92:c6:05:0e:4f:5f:ef:a2:2d:e5:
e5:25:ce:fd:33:5b:0d:82:55:cd:08:85:b7:9d:14:
b6:33:80:b2:43:1b:73:68:a4:34:25:d8:6e:51:d4:
bc:36:4e:e9:24:f8:54:e1:ed:3f:9c:0a:18:30:dc:
93:9b:d1:38:d5:c6:40:08:58:15:9a:2a:c7:08:a9:
13:c9:b4:4d:e4:b8:ef:a8:77:43:8a:7c:2f:1f:48:
82:83:e5:5b:58:0a:87:c0:fc:ba:c3:16:ab:29:52:
ec:8b:72:70:66:60:90:7b:47:90:cc:49:77:c1:2b:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:E8:3F:C5:1C:07:28:48:4E:EC:7B:34:F7:CC:97:43:5B:87:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D804084D57411EFBFC9A0B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:a6:53:64:f2:d5:0e:c5:30:c3:a2:ac:12:7e:c4:67:c7:09:
5a:21:b9:a0:65:94:30:78:02:ad:f5:0d:ab:98:05:9a:17:38:
cc:52:61:0a:8f:e1:2e:39:6d:ac:ff:7e:4d:44:7f:32:82:78:
78:5c:13:ef:a4:56:89:36:5f:a6:4c:bb:14:61:c7:2a:1a:6c:
91:78:53:08:74:46:67:fa:c9:c8:96:87:3b:f1:51:f4:52:e3:
8c:8d:82:7f:b8:d3:1d:63:a4:8a:70:7a:28:4b:10:d6:3e:6f:
a6:d6:7b:d7:8c:8c:0f:d0:c6:c2:8d:0b:c5:2b:39:21:db:fa:
ca:08:15:8f:0f:ff:f0:c7:76:28:9e:e6:67:13:35:6a:0d:06:
53:8c:37:88:de:f1:66:3d:87:b4:11:94:b6:da:f6:5d:2d:f5:
49:36:37:69:02:74:d6:5a:fb:31:00:f8:de:29:af:68:86:71:
7a:c0:34:04:88:5f:58:ee:f0:a4:72:25:4f:84:ef:f8:ef:9a:
7e:6c:6f:ac:12:c1:c0:46:ac:e0:f1:10:6b:25:fb:7c:13:ba:
e8:9e:6f:a7:df:9a:07:5a:f9:5b:03:ed:94:0f:64:9d:f5:ed:
fe:f0:c9:0e:93:ce:d3:9b:32:3f:ff:25:8e:48:26:b5:c3:9f:
7c:dd:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:01 2025 by rpki-client