Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C767ED82C41E11EF99CDCB45762E951A.roa
File: C767ED82C41E11EF99CDCB45762E951A.roa (raw, json)
Hash identifier: EzFonhuQEnH1RkRe5Wcy8tWho0JdeFliYzjOAbwRGjA=
Subject key identifier: FF:36:C0:79:FC:BE:4F:BB:29:45:E0:98:75:88:8B:9B:08:2D:FE:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C767ED82C41E11EF99CDCB45762E951A.roa
Signing time: Fri 27 Dec 2024 06:49:54 +0000
ROA not before: Fri 27 Dec 2024 06:49:51 +0000
ROA not after: Sun 12 Dec 2027 06:49:51 +0000
asID: 17561
IP address blocks: 154.201.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76201 (0x129a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:49:51 2024 GMT
Not After : Dec 12 06:49:51 2027 GMT
Subject: CN=676e4e12-0b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:7a:a7:79:5f:9f:42:2d:10:b2:51:7e:7a:
1b:23:71:73:25:c3:87:5f:7f:d7:08:92:8a:28:62:
83:9f:9e:35:8a:4e:a5:7a:af:76:01:75:8b:3e:cd:
d6:6c:f6:82:ae:07:01:fc:a4:0a:71:e1:8b:2c:fa:
bf:ae:f8:53:15:bd:ea:6a:cb:e4:cd:89:85:e1:1e:
dd:c1:1d:51:45:3a:8c:0d:f1:70:c3:c2:23:4b:0b:
11:13:4a:d1:70:91:26:c6:9a:27:2f:5e:dc:08:d8:
c6:30:65:4e:59:51:10:8e:e0:22:6e:a9:11:64:29:
1f:bc:d8:4e:c9:9e:c4:b6:53:a3:1d:e6:b0:4d:16:
e8:73:2d:ac:69:b6:7b:81:52:85:0a:2f:29:c5:1f:
a3:d6:c0:ea:c5:3e:d2:38:c3:fe:e4:e1:ab:93:f7:
bd:4c:cf:78:2b:21:ae:0d:cf:63:9c:44:4e:d6:53:
c7:c6:26:ba:26:c1:02:62:18:a9:60:b7:d8:95:30:
2a:39:23:4a:ca:cf:71:ec:c5:6f:eb:7b:88:f0:a0:
ac:74:11:c4:fa:ee:b0:2c:b4:7c:b3:61:77:a1:11:
28:e8:c6:c5:1f:27:ef:17:ab:d2:2d:9d:cf:00:79:
6c:75:d9:b1:8c:9b:68:cf:72:bb:d2:c9:84:d3:ed:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:C0:79:FC:BE:4F:BB:29:45:E0:98:75:88:8B:9B:08:2D:FE:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C767ED82C41E11EF99CDCB45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:22:16:5d:84:83:97:69:14:f4:eb:85:87:a1:a5:b9:61:eb:
33:19:08:51:82:0b:31:37:62:f7:4a:d1:37:11:88:e3:2b:ed:
19:ef:75:7a:8e:10:a3:5d:ec:71:a7:9b:0c:e3:58:13:ab:38:
42:80:4d:35:f0:75:6b:84:0f:32:f8:11:54:4f:27:4d:a3:85:
5e:1a:d3:a1:39:dd:22:1a:22:61:5b:78:96:71:47:02:a1:93:
9c:70:d6:ca:1e:5f:6e:df:a9:07:f9:e4:ee:3b:3f:6a:e6:25:
1a:62:0a:4d:ce:16:38:c5:52:cb:bd:86:b2:e9:25:ad:8d:36:
50:13:53:8c:78:0d:2c:1b:12:7e:e7:15:a9:a1:3b:2e:84:9a:
aa:6e:89:a8:6e:08:54:b7:0f:d9:45:cb:bd:31:76:d1:ba:f2:
00:bf:c2:ad:0d:3f:82:59:c0:02:44:ca:f9:0a:e2:ea:48:89:
8a:34:97:7f:4d:a0:7a:b1:94:7d:c8:13:61:a0:ba:be:34:c3:
c6:f6:b4:fb:4b:95:af:82:46:35:3c:1e:f3:e3:be:f2:0b:68:
8c:74:9f:70:27:ca:d6:3c:0e:e9:82:2b:c8:5b:98:37:13:0f:
7b:f7:5f:93:f5:da:f2:9c:59:82:c3:52:eb:a0:b7:e4:a3:1a:
ea:88:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:03:06 2025 by rpki-client