Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5308B14C42911EFB0F81089762E951A.roa
File: B5308B14C42911EFB0F81089762E951A.roa (raw, json)
Hash identifier: uiiWOjDa9OZ7/bK63+z1vT6iV1g6DoUKX3y13LfFHFw=
Subject key identifier: 76:AB:BB:95:E9:9B:05:80:D5:B9:E4:73:52:D5:59:68:60:97:08:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5308B14C42911EFB0F81089762E951A.roa
Signing time: Fri 27 Dec 2024 08:08:08 +0000
ROA not before: Fri 27 Dec 2024 08:08:05 +0000
ROA not after: Sun 12 Dec 2027 08:08:05 +0000
asID: 17561
IP address blocks: 154.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76307 (0x12a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:08:05 2024 GMT
Not After : Dec 12 08:08:05 2027 GMT
Subject: CN=676e6068-60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:8e:b0:5f:3d:d1:e1:68:91:13:29:2d:78:
21:0a:d1:81:2e:1f:a8:d7:63:e5:3d:c4:d3:b2:24:
ff:a7:be:ec:7e:fa:c0:0f:f6:8f:4c:0e:eb:aa:0a:
63:c6:d6:01:25:53:e6:d1:3c:67:66:12:1e:7a:da:
29:ef:ac:c0:0d:f1:de:25:f1:bd:22:bf:b3:ec:96:
01:0d:f6:61:d4:4e:0c:a2:b7:62:4f:c7:3b:8d:12:
72:71:72:fb:b8:1e:c5:9e:d6:1f:43:b2:da:00:77:
7e:5b:2b:d0:1c:e2:16:f0:2c:b0:2c:94:d0:a4:28:
7a:fa:bc:71:4a:ed:85:fa:5a:4e:c5:e1:fe:43:88:
c7:fd:f1:17:04:e2:60:64:00:c6:a2:fc:6c:b0:bc:
98:28:68:b0:48:67:fd:24:e3:b5:eb:86:19:a9:a0:
91:d7:a2:26:d0:91:d3:a2:81:1d:18:4c:12:07:b1:
a4:68:94:e1:f5:1a:4a:74:62:3f:2e:8f:41:44:fd:
fb:e4:0d:5d:3d:09:e6:85:80:1a:d2:84:1a:ff:2e:
cc:6f:55:b9:36:cb:11:5b:49:12:9b:68:68:ea:9f:
fb:98:87:7c:32:1c:4e:78:16:74:ca:60:e1:9c:d5:
ad:bc:4c:4b:55:2e:e3:fc:f8:8a:92:c3:29:06:9b:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:BB:95:E9:9B:05:80:D5:B9:E4:73:52:D5:59:68:60:97:08:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5308B14C42911EFB0F81089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5e:c4:d3:04:89:a6:78:6f:6e:08:e0:20:9e:86:35:11:ff:
23:5a:76:31:bc:7e:c8:01:e3:e4:cf:21:2e:83:42:ea:6c:bc:
ab:4f:e7:03:64:48:27:96:8d:e2:15:32:ff:75:0d:43:49:8e:
2f:6e:de:c4:2e:43:05:84:03:06:76:f3:5b:8f:6b:24:73:08:
24:53:75:19:22:d6:c1:76:dc:53:20:70:4e:15:11:02:c0:1c:
4c:64:a8:54:b0:bb:a9:e6:41:1a:a3:ee:04:8a:bc:ed:26:bb:
e2:cc:e5:94:c2:19:08:3f:a0:2e:b8:c1:e2:89:e2:08:9d:d6:
27:73:ec:db:db:8a:b5:99:2c:b8:df:76:22:e4:fb:a4:55:a0:
89:ae:27:36:5e:b6:b8:99:4b:30:a5:97:7c:6a:4d:54:50:e9:
55:da:3e:80:df:a1:8d:12:8e:c0:b0:f2:17:c1:0f:87:3e:a3:
df:f2:ac:2b:87:d5:66:41:44:29:dc:7b:97:b7:ee:7b:cf:74:
70:8c:57:3a:1b:92:41:df:73:70:fe:ec:8c:18:42:53:53:25:
f0:9d:be:6a:2c:55:f5:7c:5b:35:94:d8:7f:29:28:42:e0:24:
5a:61:67:06:54:bb:bb:48:5f:b8:bc:cd:f3:87:fc:d9:ec:7a:
0b:4c:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:17 2025 by rpki-client