Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6747F3EC93A11EF9CC8AEAC762E951A.roa
File: A6747F3EC93A11EF9CC8AEAC762E951A.roa (raw, json)
Hash identifier: byi4irrAWKI1pvRO9Ul/KUHBDto9ewzBmwzCC0TrHhQ=
Subject key identifier: 18:24:A9:92:ED:AA:4F:AA:7D:15:13:58:63:4E:EB:0C:1F:6C:DB:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6747F3EC93A11EF9CC8AEAC762E951A.roa
Signing time: Thu 02 Jan 2025 18:52:01 +0000
ROA not before: Thu 02 Jan 2025 18:51:57 +0000
ROA not after: Mon 13 Dec 2027 18:51:57 +0000
asID: 17561
IP address blocks: 154.223.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78839 (0x133f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:51:57 2025 GMT
Not After : Dec 13 18:51:57 2027 GMT
Subject: CN=6776e051-4860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:8b:9a:26:fb:79:04:60:de:fd:57:3a:99:
d4:1b:5c:6f:0a:1f:f2:e5:fd:be:46:2b:70:68:2a:
5f:99:32:2c:6a:dc:38:b0:70:4e:23:af:f8:8b:b5:
de:5e:3b:11:c9:13:ef:39:53:9e:a2:8d:94:db:ae:
4b:03:18:33:d8:d5:16:a0:0d:45:67:0f:21:11:c2:
1e:26:c0:97:24:df:09:24:b5:1c:08:b4:55:2c:0b:
31:6f:96:b0:fb:b6:1c:61:21:df:0b:89:95:e3:40:
84:f4:4b:36:05:24:8b:25:ca:ab:65:c8:ee:0c:5a:
13:ec:f7:e4:76:d1:4a:5c:a6:d1:d9:75:e4:0a:7a:
27:82:ce:0f:17:78:8e:09:6b:9b:44:ed:d8:6c:33:
31:e0:ed:ac:a6:e4:f1:b9:3d:fd:ea:83:c5:9c:8d:
38:02:42:78:74:7d:2b:5a:3a:59:a4:e4:ec:c7:45:
f5:b9:3b:78:66:e7:01:50:72:3f:5d:40:61:c0:e3:
f2:96:92:0e:f4:fe:dc:cb:c4:3c:be:51:10:29:0d:
db:74:da:6d:04:f7:6a:0b:7e:c1:cf:d1:a6:f8:d4:
00:c9:38:9f:ca:4f:11:eb:e6:d9:d2:59:6a:43:34:
91:02:cd:08:6e:cf:86:f9:85:75:2b:5d:40:6a:b7:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:A9:92:ED:AA:4F:AA:7D:15:13:58:63:4E:EB:0C:1F:6C:DB:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6747F3EC93A11EF9CC8AEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:43:32:22:15:0e:6e:89:02:b3:d1:3f:3c:d2:8c:72:2a:25:
7e:fc:9b:d9:1a:74:2f:96:95:48:2d:3a:e8:4c:cf:68:ae:4f:
d7:22:c3:09:6d:46:52:96:4d:f0:6c:ba:aa:a4:e8:e8:cf:22:
0c:ef:cb:ce:2f:66:e2:6b:e2:ad:ad:75:37:52:82:39:6f:fc:
10:d6:94:d6:49:be:a4:c3:12:b1:a2:36:8a:9a:2f:27:70:3c:
7c:d6:d3:d2:73:1f:e3:45:57:ea:f4:18:93:6f:5b:77:b9:69:
ae:96:94:d0:8c:59:c1:17:51:e5:15:e0:fd:f5:f3:f9:bc:69:
65:15:bb:98:5a:eb:7b:4f:bb:34:a3:a6:08:89:3c:c7:ed:db:
61:d6:ee:2b:51:83:56:ef:ca:99:a8:2d:2d:c0:c8:8f:f8:90:
ed:98:18:7a:81:7b:bf:a2:9b:95:81:bb:e2:1a:1a:df:c4:a1:
04:8d:f9:65:60:3c:51:b0:86:29:6c:13:34:a9:0d:6a:c7:3b:
15:11:95:19:2d:9e:89:93:d5:b7:f8:30:db:e2:59:df:33:3e:
0c:35:2c:81:78:09:5d:54:83:75:02:d9:56:fd:d9:8d:32:4a:
c1:51:11:f2:99:c1:c6:90:c0:74:ac:fc:4b:c3:24:9c:b0:72:
e4:18:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:22 2025 by rpki-client