Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B9ABC2C35D11EF9F742071762E951A.roa
File: C5B9ABC2C35D11EF9F742071762E951A.roa (raw, json)
Hash identifier: GLYFp2l4wewRwZUhVmF19V9jaOm16BbSX6QnRNG0DnY=
Subject key identifier: C4:64:92:2A:23:0A:1F:55:45:24:D5:7B:EA:8B:56:4A:6E:D4:EF:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01260B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B9ABC2C35D11EF9F742071762E951A.roa
Signing time: Thu 26 Dec 2024 07:48:19 +0000
ROA not before: Thu 26 Dec 2024 07:48:15 +0000
ROA not after: Sun 12 Dec 2027 07:48:15 +0000
asID: 17561
IP address blocks: 154.88.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75275 (0x1260b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:48:15 2024 GMT
Not After : Dec 12 07:48:15 2027 GMT
Subject: CN=676d0a43-6e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:db:93:5f:d1:4d:8d:b5:49:1b:15:4b:f1:
ef:43:71:e4:69:8c:aa:d7:8a:62:91:e8:d5:c2:c3:
87:a8:2e:f7:23:f1:fd:43:c3:e9:d3:a3:e7:fd:a7:
01:1b:8b:63:89:84:20:e6:d4:87:77:7b:3f:a9:5f:
da:bb:70:ef:b1:d6:ae:92:25:ca:9c:96:da:cc:c0:
8d:aa:be:ea:a3:83:98:69:43:f9:4e:ad:25:9b:b7:
22:58:82:ed:d8:86:29:4e:03:c1:94:1a:06:ea:15:
3f:96:f4:2a:30:1e:a4:4a:e2:7c:64:3f:f5:24:f7:
12:2c:24:c5:e9:31:8b:b9:0a:e8:2a:dc:e4:54:c7:
7f:21:70:83:bc:73:8a:c4:b5:57:0e:fb:6c:d8:4d:
a4:e0:c9:87:01:fc:52:a3:dc:64:95:a1:9d:9d:33:
c5:87:49:c7:6a:26:3e:7d:77:6c:7e:8c:72:85:20:
0e:8d:53:78:fe:50:67:d5:eb:d1:aa:05:21:57:9b:
9d:03:40:88:cc:e7:e5:b0:21:9d:27:80:8c:f0:9b:
18:75:b7:2e:d5:c9:63:03:3b:59:52:e3:be:e4:08:
1f:7f:c5:73:6c:36:19:23:28:dc:c4:71:d8:49:2f:
80:ed:55:5b:6f:b1:8a:53:4f:eb:77:c1:c1:ab:7a:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:92:2A:23:0A:1F:55:45:24:D5:7B:EA:8B:56:4A:6E:D4:EF:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B9ABC2C35D11EF9F742071762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8b:cf:d1:74:f5:35:c8:3a:db:4b:e2:2c:47:64:74:46:76:
5b:fa:57:0a:93:17:22:f1:b6:5b:af:e7:b8:19:f8:55:ea:06:
8f:d6:a4:37:2a:c5:f2:07:9d:74:30:27:3b:8b:98:12:14:75:
9d:94:80:0f:fb:d5:ed:f7:c5:7f:a7:7e:6e:89:06:29:55:54:
b8:a8:95:b9:da:13:d9:91:40:e4:48:95:5a:e8:17:9b:3f:06:
50:12:e4:d1:00:8b:f0:59:ac:4d:57:0f:ab:1f:71:11:88:b2:
ec:46:6c:fb:c1:e4:54:ca:84:21:c6:d6:91:e0:52:f7:67:f5:
42:d0:cb:34:52:da:fd:b3:43:8c:dc:db:0e:30:46:cb:8f:af:
02:d8:80:c2:74:46:a3:5b:c9:a0:5c:e1:bc:a4:a3:66:9d:3f:
e0:b9:ee:56:c0:d5:f0:5c:7b:f1:22:75:c7:2a:42:9a:74:52:
4b:73:fc:05:28:95:4d:bb:09:89:bc:b8:1a:5f:b1:9c:32:85:
fa:94:a9:ed:6d:26:7f:22:67:10:6b:fe:af:22:e3:30:5e:08:
00:63:79:4d:66:e7:55:3f:b9:c3:86:c4:b4:59:4b:4d:a1:f0:
07:6c:4f:c0:2f:83:e9:73:21:0e:be:8f:23:21:5e:7e:78:75:
dc:45:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:41 2025 by rpki-client