Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E28052C34E11EF80B7FC91762E951A.roa
File: B0E28052C34E11EF80B7FC91762E951A.roa (raw, json)
Hash identifier: B5ONXTCNGxKBhB7vu0ORaoNYD7Bl1UW0yL/W9E03wx8=
Subject key identifier: FE:4F:DB:31:B9:F9:50:28:55:06:F5:BF:F5:4D:72:53:8E:17:60:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01258F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E28052C34E11EF80B7FC91762E951A.roa
Signing time: Thu 26 Dec 2024 06:00:21 +0000
ROA not before: Thu 26 Dec 2024 06:00:18 +0000
ROA not after: Sun 12 Dec 2027 06:00:18 +0000
asID: 17561
IP address blocks: 154.95.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75151 (0x1258f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:00:18 2024 GMT
Not After : Dec 12 06:00:18 2027 GMT
Subject: CN=676cf0f5-a601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:97:4c:0c:01:2b:c8:ff:32:ea:89:a3:63:
57:7d:c1:31:87:cd:ea:c9:72:6a:d4:e4:c5:fe:18:
a5:98:e6:3a:2b:dc:ed:f9:5e:32:92:40:f4:0a:fc:
3c:e9:16:5b:e5:09:b6:c8:0d:62:23:21:ab:25:c7:
0b:63:39:8c:6c:c3:7e:12:29:12:19:5c:2b:25:c6:
4c:d6:a1:6a:6c:48:ae:d7:bf:7a:7f:9f:81:fa:21:
81:c6:d5:22:98:b6:cc:c2:e2:43:90:e6:00:f9:c8:
98:39:a6:30:00:58:bf:91:c5:85:6b:38:cc:1f:4e:
52:ea:86:0a:7e:a0:4a:99:68:21:86:1c:5e:35:0c:
63:4f:3e:d9:8c:26:5e:a8:49:33:8f:c3:79:7b:f2:
34:9f:56:98:e9:09:84:27:dc:df:8b:ab:1d:12:12:
4c:b0:94:67:81:7a:3f:2d:fa:39:f0:23:15:cf:dc:
d1:06:cd:30:23:61:a8:83:63:a9:8f:5f:2b:66:c9:
2d:11:c8:5a:d6:56:b3:96:86:d2:4d:ab:84:c2:8d:
2d:90:68:32:23:1a:28:ac:c3:66:81:ca:ec:e0:c9:
47:e6:56:4b:cc:9a:62:33:c6:3c:b0:83:b7:ff:1c:
12:55:9a:1a:9f:fe:f9:ec:91:36:db:83:d0:89:7a:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:DB:31:B9:F9:50:28:55:06:F5:BF:F5:4D:72:53:8E:17:60:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E28052C34E11EF80B7FC91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.16.0/24
Signature Algorithm: sha256WithRSAEncryption
58:44:36:34:b5:1f:ed:8f:ea:2e:77:2e:af:5d:ae:99:db:ef:
5a:cd:47:d5:d8:ca:d0:fb:ca:c9:61:14:d7:65:5c:bd:24:30:
d3:18:4a:f8:5e:98:b6:c4:8a:9f:cc:05:1a:4e:91:6a:07:20:
e3:05:67:8f:a8:10:d8:54:9b:66:d2:bb:17:1e:44:d1:84:ff:
08:e1:06:65:ec:bf:43:a6:3f:2d:97:2f:2d:58:4f:ec:41:98:
f6:37:00:24:5f:b7:2c:38:90:66:5d:0f:3f:5c:c9:6d:1a:b2:
b5:6a:92:bb:a2:67:80:ac:95:4f:33:74:fd:b4:8f:29:bc:b4:
04:f7:f9:51:4c:ed:af:1d:cc:ee:88:6d:4c:a9:2a:65:0a:25:
5b:b8:a4:13:e9:31:80:66:0d:56:b3:f4:a3:63:f4:13:03:05:
38:04:45:56:d0:cf:51:76:9c:15:c1:d1:eb:46:e6:b3:f4:95:
07:24:58:5e:d4:d0:56:77:e5:30:19:50:30:fe:e3:57:6f:9c:
c5:7f:8c:3b:ee:2e:9c:21:58:36:f3:65:4f:5f:63:b7:53:81:
56:31:f0:c5:e1:66:34:b7:45:ff:0d:93:46:e1:d0:42:96:ec:
b8:b9:df:69:03:72:68:8d:3f:ac:1d:a0:93:d1:26:28:da:6b:
51:94:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:02 2025 by rpki-client