Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C774E088D2DC11EFA96A5E56762E951A.roa
File: C774E088D2DC11EFA96A5E56762E951A.roa (raw, json)
Hash identifier: uN2MJkBoY+1KUDA0BYuB7Np5MXNZbkRm0tg1ZHiU5cA=
Subject key identifier: C1:80:18:3E:C2:A1:F8:5D:4C:DF:C7:F6:89:64:25:28:9D:5B:F3:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C774E088D2DC11EFA96A5E56762E951A.roa
Signing time: Wed 15 Jan 2025 01:05:15 +0000
ROA not before: Wed 15 Jan 2025 01:05:11 +0000
ROA not after: Sun 12 Dec 2027 01:05:11 +0000
asID: 17561
IP address blocks: 154.81.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80748 (0x13b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:05:11 2025 GMT
Not After : Dec 12 01:05:11 2027 GMT
Subject: CN=678709cb-4439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:ea:84:d0:26:c1:ae:59:1e:9b:cb:2b:fa:
42:0c:0c:7e:39:79:f9:b1:b3:c9:74:1b:fa:5b:f1:
cd:d4:5b:32:48:c0:d8:15:19:96:db:44:54:f0:ed:
04:d7:04:43:bc:d9:1b:c1:25:e4:f5:1e:8e:b6:91:
95:a2:a2:be:e9:b3:5d:e9:85:61:d4:d4:61:40:d4:
6d:e3:2b:44:73:f8:5f:78:e1:03:36:69:08:6d:f3:
40:a8:fc:96:84:b7:e0:00:4c:ca:3a:6a:b9:e3:74:
83:fe:de:f5:d1:c5:8c:d8:c9:d9:8a:e0:de:e1:89:
db:25:39:a1:bd:ec:e6:5e:66:53:ce:91:f1:de:a4:
0d:dc:d5:ca:d4:fa:65:f4:8c:e0:6d:b3:cd:57:c8:
6a:61:57:4e:1f:ea:66:31:5e:7f:a5:52:e3:32:21:
66:b4:c7:9f:cf:54:fa:14:a4:30:92:ff:22:6d:94:
5d:93:07:53:47:0a:41:31:db:17:54:ce:78:b9:c0:
74:eb:6a:0e:85:74:29:a9:f8:b0:1e:a0:44:c1:1d:
f5:d5:36:31:7d:9a:24:4f:05:5b:c5:a7:61:64:00:
23:bb:fa:a7:c0:be:fb:d6:30:3e:c8:c7:06:fc:4c:
58:6d:e3:e0:96:6e:a6:7c:e7:9b:ae:50:20:98:3d:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:18:3E:C2:A1:F8:5D:4C:DF:C7:F6:89:64:25:28:9D:5B:F3:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C774E088D2DC11EFA96A5E56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.187.0/24
Signature Algorithm: sha256WithRSAEncryption
47:27:98:dc:64:42:f9:a9:2f:10:8a:3a:44:92:ed:2f:4e:02:
76:a8:5c:91:fb:61:fb:2b:e7:e5:94:a5:a7:2a:29:c1:08:fb:
59:b7:a8:9b:ce:e8:e4:10:6b:3b:6d:ce:43:ba:b4:28:9a:f2:
1b:21:53:a1:ac:39:c7:40:b1:03:e3:7f:e4:e6:36:d1:96:98:
8c:62:0b:2f:45:43:78:fe:d6:89:d9:c8:6b:12:c6:0b:06:44:
0d:79:d3:3f:ca:7d:29:68:a8:3f:56:6e:e2:d6:50:cf:a3:19:
24:e4:36:e8:d5:1a:4a:88:d0:d8:3f:88:a1:53:0c:60:7b:de:
83:5b:c7:b5:dc:af:cc:60:c2:56:1e:75:73:6a:d9:18:f3:a3:
20:78:bd:0f:df:d1:58:69:d3:74:17:ed:bf:a2:8f:21:99:0d:
c5:5d:ee:ef:94:9a:54:42:3e:c8:33:7d:44:14:33:d9:db:2b:
f7:41:c0:02:66:0f:29:66:58:73:2f:7b:f4:11:03:31:92:d1:
f7:62:1b:fa:14:9a:66:e4:10:37:4e:e7:9e:d1:67:de:31:90:
4d:42:6a:6c:26:32:4c:57:2e:59:2a:1e:42:36:e6:48:84:62:
bf:a9:dd:0c:b9:cb:48:d2:a3:f1:aa:8c:35:3e:51:4d:e3:4d:
ed:45:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:08 2025 by rpki-client