Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FC3CE0C53F11EF99379763762E951A.roa
File: C2FC3CE0C53F11EF99379763762E951A.roa (raw, json)
Hash identifier: j5Ve5qGP4BzZCOv0AJgAiDVXRtxurWdDrlH/KMSqUHc=
Subject key identifier: 60:48:32:6E:CB:81:BE:50:89:59:BA:7D:BD:C3:A8:44:1D:29:89:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FC3CE0C53F11EF99379763762E951A.roa
Signing time: Sat 28 Dec 2024 17:18:32 +0000
ROA not before: Sat 28 Dec 2024 17:18:28 +0000
ROA not after: Sun 12 Dec 2027 17:18:28 +0000
asID: 17561
IP address blocks: 154.206.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76913 (0x12c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:18:28 2024 GMT
Not After : Dec 12 17:18:28 2027 GMT
Subject: CN=677032e8-3be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:a7:73:62:2e:11:8a:fb:1c:36:08:b8:e6:
44:f8:14:79:d5:bb:a7:0d:3c:91:af:37:64:49:0f:
c4:ec:f0:77:37:60:00:5e:b6:ae:d9:c7:91:92:a8:
fa:9e:22:34:83:1a:e1:4d:42:ef:ed:3a:b2:53:3d:
bb:cf:f6:fa:1e:2a:d3:f2:a7:7a:4b:d5:a3:d4:b5:
10:ce:f2:da:1d:f6:a8:66:8f:2d:0b:13:04:f9:34:
2f:4c:c2:4a:2d:45:26:83:8d:26:55:c9:34:30:b3:
95:73:f9:d9:7a:58:fa:e9:0f:3f:a8:0a:3b:50:71:
00:d7:51:1a:2d:6d:37:53:2a:21:e5:55:ce:a1:e4:
88:45:78:aa:ec:ce:12:7d:32:00:59:13:de:9c:ab:
e5:4f:d8:10:7a:02:9e:94:e4:ae:24:bd:b5:01:46:
1a:1b:69:6c:57:93:aa:6a:c4:05:df:ae:58:2c:e9:
64:41:ff:04:f4:9a:c6:bb:96:2c:2c:e1:65:04:ab:
e2:0a:13:b6:f2:d1:a1:4b:9d:83:be:c8:52:41:71:
34:47:de:3a:35:62:64:c4:d2:d1:8d:ba:c2:c4:62:
58:46:18:e7:68:b2:fb:28:91:c9:0a:31:4a:55:17:
e0:69:b9:19:70:96:27:10:14:48:6f:34:bc:26:b4:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:32:6E:CB:81:BE:50:89:59:BA:7D:BD:C3:A8:44:1D:29:89:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FC3CE0C53F11EF99379763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
44:56:bc:d4:a2:aa:64:3c:74:34:52:27:e8:05:a4:f1:50:12:
ee:4b:32:3b:63:f8:0f:5a:b4:5d:18:2a:08:d0:45:3d:17:e2:
93:81:21:63:fc:f0:51:8d:d7:f4:2d:cd:8c:d2:c3:cc:a9:10:
d7:97:66:c2:b4:c4:a2:84:79:c1:93:d5:d5:2e:f6:6d:1a:a6:
28:03:75:f4:be:17:38:20:ad:b2:cf:4e:df:fb:35:b5:e3:1a:
2c:c3:22:16:5b:cb:e8:f8:ee:49:f4:a5:e5:1e:8e:fc:c1:21:
f0:71:63:72:60:23:91:89:2c:aa:99:31:7a:65:ae:20:63:d8:
df:84:29:4e:1d:f1:d9:d8:56:2c:88:c4:d1:85:7e:1b:7e:30:
76:93:b7:1d:2e:e2:11:f5:49:d4:27:ba:5f:af:0a:ae:51:8a:
89:d6:7a:00:38:44:d7:e1:5c:d0:9f:cc:ce:d0:ea:94:1b:ec:
eb:aa:99:3f:44:82:61:63:5c:14:1f:9a:89:a1:f1:e9:04:04:
40:b2:b0:5d:fd:6c:6a:0b:12:2a:cc:b3:0f:b8:ea:04:d5:76:
97:5e:e4:e1:e9:2f:9f:29:6c:f3:8e:45:82:b2:35:ad:35:85:
e6:4a:e7:d0:42:c8:cc:ac:36:2f:75:c4:93:3f:d1:76:99:82:
60:5a:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:02 2025 by rpki-client