Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB397212CDA511EFAAF30D54762E951A.roa
File: AB397212CDA511EFAAF30D54762E951A.roa (raw, json)
Hash identifier: Hv6dzZf49ISDwP526unTNtksAuDNXnsMyZvdk42rYKg=
Subject key identifier: 6C:48:F3:AC:A9:71:E7:9B:D4:91:70:B4:5A:1D:FE:04:41:E2:04:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013696
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB397212CDA511EFAAF30D54762E951A.roa
Signing time: Wed 08 Jan 2025 09:48:10 +0000
ROA not before: Wed 08 Jan 2025 09:48:06 +0000
ROA not after: Tue 23 Dec 2025 09:48:06 +0000
asID: 984
IP address blocks: 154.82.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79510 (0x13696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 09:48:06 2025 GMT
Not After : Dec 23 09:48:06 2025 GMT
Subject: CN=677e49da-dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:53:3e:33:c2:0e:82:62:df:d5:a1:6f:88:
6b:76:ea:00:e4:46:03:56:04:33:da:81:b2:6f:20:
87:a2:5c:4f:3e:da:c5:c4:6f:58:ea:c9:24:be:61:
f2:16:0f:d6:02:7e:9f:53:75:da:5c:e5:ef:2d:3a:
21:56:34:7f:d2:0b:6b:22:3b:d0:e7:a5:a9:6d:13:
c0:e4:fc:09:d8:a2:93:d4:3d:9d:9a:ae:28:3a:a8:
6f:2f:84:3a:87:40:d4:c0:b8:c2:ff:69:e7:a9:5c:
12:95:69:1b:86:1b:48:03:6f:2a:79:6e:99:89:5e:
9c:27:55:43:98:a7:3f:c9:87:a8:50:c8:7a:49:02:
df:85:6e:79:55:50:71:43:88:46:db:e5:e3:2c:b1:
74:30:ee:a6:dd:6c:e4:9e:fe:ff:21:22:ac:e8:d8:
b1:17:da:ca:6f:1f:7f:4e:1f:e8:90:41:b3:c4:f7:
52:02:f4:b3:58:6a:df:a5:17:f5:6b:8c:14:c6:5c:
64:0c:6c:d2:bc:27:c8:8a:eb:ce:fb:60:6f:3a:a8:
0b:68:0c:91:56:da:58:7c:e0:82:42:44:02:e4:c0:
1a:38:53:04:d8:52:f9:be:dd:00:c7:4a:10:58:d0:
e2:92:ae:07:d1:90:26:ef:98:95:d8:75:0b:1f:77:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:F3:AC:A9:71:E7:9B:D4:91:70:B4:5A:1D:FE:04:41:E2:04:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB397212CDA511EFAAF30D54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.168.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0d:a0:83:14:79:dd:b4:bf:9b:d8:3c:c8:8d:c1:b3:d7:1d:
01:77:84:94:bb:87:67:ab:86:06:0a:39:99:76:4a:93:8c:56:
08:42:6a:1a:4a:cb:98:ce:16:9e:a8:e0:c9:cf:99:ec:c6:4f:
b8:e2:5e:a6:30:34:cc:98:be:58:a2:9f:56:87:04:4c:fd:ca:
60:27:9a:66:05:53:8a:d1:06:1f:9d:84:4e:e8:07:62:1a:d1:
74:1e:e2:d0:d1:84:2c:a0:17:dd:94:03:dd:9b:6f:e3:f0:16:
70:c4:03:98:ea:23:02:42:86:7b:75:21:4c:f2:aa:b3:1e:67:
24:64:6e:cc:68:d1:62:4d:8b:8a:87:42:67:09:a1:3b:75:d5:
98:92:83:71:a0:77:36:1b:e0:59:0c:a1:86:9e:34:2d:72:84:
0e:0b:65:79:a4:09:b8:bd:c2:0e:74:ce:4d:b9:b4:c1:c5:d3:
ad:9b:9b:ce:64:8a:c9:ae:04:08:11:46:98:f1:80:93:f2:53:
2c:d3:f7:0a:0c:7c:20:ed:56:40:f2:17:2e:52:44:de:06:28:
ef:d2:b7:63:cf:5f:79:60:a0:6a:ae:9f:7f:91:fd:94:74:f5:
5e:ee:e2:4e:8c:97:ef:15:00:7d:a2:51:7c:7d:79:46:d8:35:
e0:3f:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:51 2025 by rpki-client