Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9069C28C3CB11EFA94420A3762E951A.roa
File: B9069C28C3CB11EFA94420A3762E951A.roa (raw, json)
Hash identifier: uEZcV6QTtfwmsbATHuh1wN1KVFh5yLsDfdEdnrkGUHM=
Subject key identifier: 03:92:94:30:43:95:5A:8B:D3:5D:D3:EE:98:AF:1C:25:EB:79:4B:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01280A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9069C28C3CB11EFA94420A3762E951A.roa
Signing time: Thu 26 Dec 2024 20:55:22 +0000
ROA not before: Thu 26 Dec 2024 20:55:19 +0000
ROA not after: Sun 12 Dec 2027 20:55:19 +0000
asID: 17561
IP address blocks: 154.83.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75786 (0x1280a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:55:19 2024 GMT
Not After : Dec 12 20:55:19 2027 GMT
Subject: CN=676dc2ba-e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:c1:8a:57:2c:fd:d4:81:59:9a:28:45:e4:
1a:70:38:62:2a:2c:95:11:a9:ea:af:d6:19:af:ee:
21:3a:4f:a2:d8:63:f7:d6:cb:b5:94:e4:a6:29:3b:
07:70:22:45:35:9b:b6:f9:49:4a:a3:cd:ba:19:41:
6c:58:55:99:0b:19:c3:6e:f5:c4:e1:3d:da:df:c2:
2d:93:ad:96:80:a4:12:4d:06:0a:17:7e:79:c0:3f:
a8:d6:7c:25:5d:ce:71:52:12:cd:5b:ad:60:e0:c0:
a7:be:71:4a:1e:a5:ab:a4:7d:38:45:d8:c3:5d:0a:
cf:3e:cc:87:09:06:72:cb:00:b3:23:66:4f:74:22:
44:1f:cb:3d:b2:06:61:91:03:4b:1e:02:56:5c:37:
08:67:53:02:1d:bd:70:9b:df:8d:3e:49:b6:30:34:
a9:be:66:14:26:63:3e:b7:63:01:3f:6c:c2:e6:78:
55:c4:79:59:48:7f:c7:f9:cd:a5:55:84:c6:73:8d:
b8:65:6a:e9:f5:cc:2f:de:68:47:93:cc:55:ae:86:
42:54:a2:ac:fb:f2:fa:77:ae:8b:ee:a8:22:82:94:
5f:26:c9:68:51:49:0a:ae:16:4d:b1:86:65:f1:b6:
8b:38:42:f1:d9:5b:94:93:7a:ce:e4:06:fa:c5:d9:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:94:30:43:95:5A:8B:D3:5D:D3:EE:98:AF:1C:25:EB:79:4B:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9069C28C3CB11EFA94420A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.154.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6e:49:17:4a:73:9d:a6:00:9f:3a:e7:24:7a:e2:b4:bc:8e:
d4:95:ba:40:14:f3:a9:8f:5c:69:86:4f:3a:a7:ab:f3:be:b2:
5e:7f:d9:9a:f1:51:f5:a2:d1:05:d4:54:8e:fe:f3:1c:be:18:
f0:27:25:80:0e:4a:10:fa:15:b4:1f:64:e0:d8:e0:1b:ae:75:
62:27:d9:6b:2e:6d:90:ec:60:90:4f:18:46:6e:56:af:ef:58:
48:fd:73:26:f1:49:e6:fc:a5:ae:b6:95:81:f2:48:8a:57:87:
a8:e9:ae:de:1f:44:c6:d7:b6:7d:17:a5:a9:ac:43:d8:dd:22:
0d:dc:5e:de:7f:4a:3d:b5:21:16:20:14:fd:f5:34:68:33:2b:
70:ba:da:a0:0c:44:b5:44:ae:05:cf:13:a6:69:41:91:28:2e:
7f:21:2a:42:3f:4e:40:d4:3d:92:13:ea:cf:58:be:f8:53:50:
65:f6:79:31:a9:61:3b:e0:25:6e:42:b6:fb:c6:47:a6:82:b7:
88:80:8a:d9:df:32:d7:e9:d7:31:7c:83:9f:97:ce:00:c3:6e:
ab:bf:cd:c0:93:61:42:9f:a4:1f:c3:e3:df:92:1d:b3:05:23:
a1:68:82:03:c0:05:87:b8:bc:a7:b5:67:60:7d:fc:27:9b:86:
33:3a:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:41 2025 by rpki-client