Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CC3790C91711EF94C48652762E951A.roa
File: C6CC3790C91711EF94C48652762E951A.roa (raw, json)
Hash identifier: wbFLz0kl8vLN0zniFaCvhn4HHHOdasIfVOdjb538o7A=
Subject key identifier: 3A:E8:66:6D:BC:EC:BA:61:72:00:7F:FA:67:3D:46:5E:C2:47:91:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CC3790C91711EF94C48652762E951A.roa
Signing time: Thu 02 Jan 2025 14:42:23 +0000
ROA not before: Thu 02 Jan 2025 14:42:19 +0000
ROA not after: Sat 13 Dec 2025 14:42:19 +0000
asID: 984
IP address blocks: 154.221.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78559 (0x132df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:42:19 2025 GMT
Not After : Dec 13 14:42:19 2025 GMT
Subject: CN=6776a5cf-813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:90:d0:4f:ad:ff:52:09:45:de:97:88:2e:
ae:a6:d2:fc:28:15:ee:76:0a:2d:de:f2:33:8c:c1:
fc:97:5e:73:97:b8:c5:13:3b:fd:de:8d:e8:cf:9a:
75:6c:d5:5b:66:19:03:48:20:41:8c:ef:92:97:83:
25:da:6f:9d:30:f9:07:2f:ec:7b:cb:a6:0d:8e:33:
d9:b2:51:89:5c:71:b8:77:f9:82:0b:11:86:d3:92:
b9:23:2d:52:b3:ef:7b:e8:fb:80:7b:88:bc:ef:71:
78:2d:2b:58:0a:43:82:04:d0:99:60:ad:94:8b:70:
67:84:2e:6e:ce:77:62:30:a3:c0:e4:4e:38:c7:df:
03:f5:73:d8:ec:7a:b1:e0:1e:5d:0c:b1:9c:a6:79:
c2:2b:4a:a3:ce:91:7b:97:15:5b:b1:67:82:da:f2:
74:82:80:c2:bd:1c:29:2a:90:b4:b0:2a:2c:d4:f3:
e2:8c:f2:c4:36:a4:2e:ee:ef:62:0a:05:1c:00:d7:
2c:cc:f2:2a:16:b4:4c:e1:48:72:bc:fd:42:74:b4:
44:b5:b9:14:ad:46:4b:1c:9c:6f:64:ad:56:1d:8a:
20:ae:79:47:97:69:44:a6:f4:e3:af:c1:3f:d4:c7:
e0:3c:7c:cb:53:08:09:3c:d5:4b:bf:67:7d:b0:84:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:66:6D:BC:EC:BA:61:72:00:7F:FA:67:3D:46:5E:C2:47:91:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CC3790C91711EF94C48652762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.252.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e3:3e:09:54:11:d9:7e:8d:dd:41:a7:d9:66:57:26:67:b8:
18:cf:73:52:7f:2c:08:05:5f:f3:3b:b8:25:40:78:3e:b6:35:
d4:bb:20:ea:ee:bb:eb:25:b1:82:da:80:d6:38:37:6a:04:65:
04:be:b6:24:3d:4e:2a:04:3a:ea:d9:b6:ce:b5:90:98:ee:42:
a3:7b:bb:9a:03:a1:06:4c:26:9b:70:bb:eb:49:cc:09:47:2f:
e2:8a:77:c0:32:18:f7:f5:16:5f:45:f2:31:93:39:75:01:20:
4d:b6:26:a0:1f:46:27:16:6b:76:e2:92:fc:95:af:88:8d:d5:
e6:11:77:20:19:00:8e:5a:82:88:b1:4e:4c:dd:22:8c:57:88:
7b:72:fc:6a:65:6f:f8:50:44:83:5a:ef:e2:1d:73:9e:f0:4e:
d1:6b:dc:c4:32:09:70:40:e9:e9:e3:97:25:f8:5f:55:c8:5b:
04:a0:94:eb:37:e0:db:7a:b0:8e:52:fd:48:cd:df:b6:bb:c3:
c8:c3:0a:85:c5:58:2d:b7:a8:b6:63:91:bf:7b:cf:d2:fb:4c:
12:ea:2d:a0:24:c6:71:7e:ae:08:d5:96:6e:cd:fd:14:b6:a4:
26:f3:66:d6:ef:6b:2a:5e:32:91:59:5b:ce:32:4f:33:fc:a8:
e3:c7:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:46 2025 by rpki-client