Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B34BE2C81611EF878A0968762E951A.roa
File: C6B34BE2C81611EF878A0968762E951A.roa (raw, json)
Hash identifier: QSCoG1gBwfthK7IZBK5M/q2E3SYJKyAzNv/H7Vy5MMs=
Subject key identifier: B0:30:8C:06:93:79:0A:12:A2:AD:A2:77:8D:51:EF:18:77:86:14:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013112
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B34BE2C81611EF878A0968762E951A.roa
Signing time: Wed 01 Jan 2025 08:02:42 +0000
ROA not before: Wed 01 Jan 2025 08:02:38 +0000
ROA not after: Tue 11 Mar 2025 08:02:38 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78098 (0x13112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 1 08:02:38 2025 GMT
Not After : Mar 11 08:02:38 2025 GMT
Subject: CN=6774f6a2-a9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:ef:b0:99:48:3f:47:2a:de:8a:85:24:bf:
6c:b6:44:98:b6:59:ab:06:37:33:c6:05:e2:9c:db:
7f:05:7c:97:12:b4:b4:0d:92:1f:79:8a:c0:44:f4:
9d:28:ed:ba:b3:76:9c:76:7d:ef:24:0c:4a:ab:6d:
80:6e:b0:df:2b:de:c4:f9:eb:09:91:99:74:61:df:
aa:a2:a3:41:ac:99:c2:4a:05:18:be:61:8f:8d:b3:
c3:3d:79:c8:1b:1a:7a:77:9c:fa:75:5b:78:74:2d:
e1:43:e9:41:36:1f:e4:2f:1e:b6:e6:3f:b9:7f:f5:
75:77:5c:af:d9:1a:79:f4:82:46:9f:8f:4f:51:3e:
fd:93:2c:e3:29:e4:e3:67:5b:5b:5a:85:06:12:d3:
cd:6b:05:9d:2a:3b:bb:92:33:d2:cb:f2:69:c3:9d:
b9:2d:ea:14:3f:11:34:bf:13:5d:74:a0:9a:20:14:
d9:45:06:05:66:73:7b:b2:37:32:09:b6:a4:e1:72:
e7:bb:6a:24:ec:f2:3f:58:c4:02:16:eb:24:7c:25:
2e:fe:2e:72:7d:90:f3:b7:7d:28:b3:14:54:2e:31:
c6:37:bc:28:87:77:c1:b9:9b:29:54:58:9c:90:a2:
55:6d:22:9e:ee:ae:5e:e0:85:9e:1c:4d:45:89:00:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:8C:06:93:79:0A:12:A2:AD:A2:77:8D:51:EF:18:77:86:14:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B34BE2C81611EF878A0968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:20:ee:c3:80:08:c7:c7:22:c1:70:4c:cc:8e:3f:90:66:7f:
cf:db:c4:66:ad:69:c8:04:1a:f5:41:cd:e4:8c:87:55:fb:65:
dc:d2:c5:26:ca:63:57:00:56:3b:e2:76:00:ac:62:df:95:d8:
54:03:ab:43:e4:ec:16:6d:46:cb:a7:88:d7:44:a3:64:a2:6c:
b7:9f:79:b6:9b:fa:88:ec:4e:3a:d6:d9:25:d6:8f:83:ff:1b:
98:c3:80:a9:ef:81:46:47:27:39:5e:bc:e6:3c:38:ac:c7:b4:
63:dc:c9:9e:0f:18:cb:b4:ce:0c:1a:e4:75:89:6e:c8:f8:b5:
db:72:2d:9e:a2:f8:d0:58:fd:ed:4c:70:38:c8:ac:d9:19:78:
32:98:bd:07:df:a0:9b:37:09:72:cc:0d:c2:0b:a4:02:4c:b0:
d4:a8:36:59:8c:16:f2:66:2b:fd:1a:dd:ba:e8:ac:c2:00:a3:
b6:9a:27:15:64:70:61:ee:1e:86:16:86:31:ef:ec:3e:27:ee:
92:64:53:9f:ae:d1:a6:fb:52:60:7f:96:88:c7:41:b9:49:66:
5c:4a:0b:4c:d6:f3:a3:16:00:41:62:73:32:de:53:5c:6c:4b:
58:e6:51:47:e3:d7:f4:48:7f:18:94:8f:05:63:36:5a:a0:48:
1c:63:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:03 2025 by rpki-client