Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A98B6EC60611EF9C204B4F762E951A.roa
File: A3A98B6EC60611EF9C204B4F762E951A.roa (raw, json)
Hash identifier: EGvnVjju89P0OVQNzF+cfOoboqUBmXnMeJAYMzM3LVI=
Subject key identifier: 32:6D:4B:B4:F5:6F:11:64:0C:D6:42:16:8D:03:42:E3:79:FF:ED:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A98B6EC60611EF9C204B4F762E951A.roa
Signing time: Sun 29 Dec 2024 17:02:09 +0000
ROA not before: Sun 29 Dec 2024 17:02:05 +0000
ROA not after: Sun 12 Dec 2027 17:02:05 +0000
asID: 17561
IP address blocks: 154.217.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77454 (0x12e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:02:05 2024 GMT
Not After : Dec 12 17:02:05 2027 GMT
Subject: CN=67718091-6503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:c8:a5:a4:11:eb:1d:2a:22:8d:13:4e:ac:
2e:f2:7f:4e:ae:ec:18:fd:6b:5e:4b:eb:c1:b3:ae:
76:72:46:a0:6b:21:3b:c0:5f:4f:a5:ce:5f:2a:77:
1a:ba:1c:85:5a:7b:3d:52:a2:89:47:60:50:fc:91:
9c:f1:74:06:73:13:37:1d:bd:34:6f:7b:b8:b9:25:
1f:6e:53:6f:03:77:d4:35:6e:ca:33:b4:f7:d9:c9:
00:99:f1:b2:a8:12:c8:4f:2c:52:d1:ac:3c:9a:1a:
22:05:e2:18:de:43:77:bf:bc:f3:34:97:36:ec:d7:
f7:6f:79:d9:79:bf:68:96:d0:a0:e7:80:cb:a3:45:
b8:3f:a3:76:e4:70:28:7d:e4:7a:57:d2:89:59:02:
06:f3:95:89:f7:01:7a:14:b8:17:0e:95:5c:74:3e:
a8:55:f9:a5:c9:bb:af:94:08:95:7a:30:33:65:0d:
52:35:46:27:39:d0:4a:23:54:b9:a8:6c:cf:6a:d2:
26:b7:77:90:6e:cf:1d:cc:ee:55:e8:8f:5f:91:a5:
0e:4e:4b:05:f5:1d:28:b8:dc:15:97:e9:bb:74:45:
25:92:c5:3e:c3:fb:70:b9:fd:95:43:9e:34:a0:41:
df:2e:77:8d:6b:d0:8a:15:be:55:df:c8:37:5b:03:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:4B:B4:F5:6F:11:64:0C:D6:42:16:8D:03:42:E3:79:FF:ED:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A98B6EC60611EF9C204B4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:26:c2:30:11:2d:16:1c:8b:03:65:57:3c:cc:2a:ad:2e:c2:
35:15:f0:91:08:0e:70:24:61:f6:82:b1:82:d5:d7:72:ec:30:
2d:a8:9e:e1:08:34:7b:1b:4c:9d:c0:14:ab:64:87:54:66:06:
4c:1d:0d:34:61:ff:63:75:fe:9c:01:2f:7c:f0:25:7b:d4:3a:
ef:fa:f5:c1:04:12:91:19:51:c8:1d:b7:8f:c2:96:b4:42:21:
98:d1:2d:59:34:71:e7:e0:84:34:1c:20:d3:03:89:ea:8f:28:
5d:b9:c9:50:58:9f:e8:e9:2b:c3:2e:da:43:64:67:22:35:68:
f1:c1:cb:15:b0:65:60:0a:5b:dc:3a:3c:1e:71:69:52:eb:4f:
52:9e:95:11:a4:bb:27:f6:65:b2:3d:c9:ad:1c:3a:77:ea:fd:
1b:6d:42:13:7a:93:57:8d:b4:28:dd:1f:37:84:d2:00:b1:e9:
80:07:5b:60:94:f7:df:ff:d6:2c:d6:8b:4d:eb:ab:73:5d:2e:
51:a1:4a:fe:1f:22:c5:46:08:75:95:a6:96:c8:1d:b7:9c:fd:
72:1d:26:33:d5:93:0b:88:a2:d0:c4:c5:3e:43:be:67:28:c7:
7c:7f:03:be:1d:bf:3f:70:87:78:3b:d6:80:b8:ee:c6:c1:97:
f0:bf:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:13 2025 by rpki-client