Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9361820C41C11EF9C9174B7762E951A.roa
File: C9361820C41C11EF9C9174B7762E951A.roa (raw, json)
Hash identifier: 2wb/2OC5IPj6q9jW0ly8wNHxs/CcJmpUQnLUv9aeOjQ=
Subject key identifier: A6:95:94:30:7E:04:7D:94:07:60:B8:28:AE:97:DD:39:A2:8D:AF:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012995
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9361820C41C11EF9C9174B7762E951A.roa
Signing time: Fri 27 Dec 2024 06:35:39 +0000
ROA not before: Fri 27 Dec 2024 06:35:35 +0000
ROA not after: Sun 12 Dec 2027 06:35:35 +0000
asID: 17561
IP address blocks: 154.201.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76181 (0x12995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:35:35 2024 GMT
Not After : Dec 12 06:35:35 2027 GMT
Subject: CN=676e4aba-7db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:0c:ff:ce:c6:0d:c7:bf:28:17:aa:3d:e5:
27:45:2c:43:37:aa:28:09:90:71:3c:0c:08:69:3b:
0c:a4:56:09:c4:e8:54:bb:24:7a:47:ab:98:ec:8d:
ef:07:83:1b:8a:c9:91:93:bf:ea:7e:61:f3:88:c6:
cd:cb:3b:7c:e3:7e:bf:f1:11:d5:8b:00:5e:a1:fc:
6c:3d:5e:89:56:42:e0:41:96:b6:77:75:7c:84:3e:
59:81:9c:ae:b0:06:90:6f:98:69:1f:57:d3:d7:b2:
c2:2d:e5:49:e4:9d:24:91:87:dc:1f:f7:22:19:69:
f6:03:40:d2:27:c2:1e:76:99:ef:21:1c:51:4e:db:
99:3c:95:fa:d6:16:41:dc:17:89:3b:ca:7b:f2:f0:
57:34:ee:81:23:de:b9:30:bb:77:c1:e2:4a:5c:65:
23:17:fc:b0:d8:cf:62:3e:59:09:53:60:90:ed:fc:
0d:09:eb:49:c6:bb:89:aa:8c:05:a3:2e:e2:63:5a:
61:7d:13:e5:67:8a:24:16:ca:d9:37:38:b1:7a:64:
b2:7c:90:e0:34:1a:75:83:4f:2e:e3:66:cd:d5:91:
3d:e7:a9:90:65:b5:82:9d:cf:31:eb:c3:da:c8:53:
0e:6e:82:af:30:25:ec:d4:c9:b1:a8:c0:b7:f8:f0:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:94:30:7E:04:7D:94:07:60:B8:28:AE:97:DD:39:A2:8D:AF:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9361820C41C11EF9C9174B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.25.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e7:1a:36:79:4e:17:bd:6b:78:03:aa:96:3f:5c:c1:76:2d:
5e:2e:f1:ca:5c:1b:c8:f5:7e:48:90:26:6a:c0:b5:68:4b:4d:
37:2c:61:db:88:5e:6e:c3:8e:24:79:9c:c2:6a:27:84:79:1d:
4c:83:c5:da:ff:86:f9:18:8e:ed:bf:79:21:7b:b4:f2:0c:10:
1e:32:85:ab:2f:b0:56:10:c1:4f:13:61:f1:1b:b7:80:3f:75:
cd:e0:d6:99:36:80:4c:2a:c0:81:70:04:85:dc:bc:e7:14:a0:
71:a8:44:1c:9e:40:f8:bf:87:41:26:83:10:6e:69:07:ca:a1:
e1:76:64:f1:01:fc:41:24:f1:e3:7c:3c:d8:f5:43:84:1a:a6:
ec:5f:d6:d9:f8:55:6f:6d:b2:7c:56:7b:75:df:33:fe:35:25:
01:75:a3:cf:a6:91:95:ce:84:b4:dd:14:10:f0:fb:13:28:87:
e5:f5:ac:0b:52:dd:d6:df:d8:96:15:8d:82:4a:7a:e2:07:ec:
29:d7:15:60:62:e9:c5:b0:89:f8:d9:82:b5:b9:73:16:9a:39:
bb:d4:d7:88:6f:ae:ff:f4:6d:7e:5f:9b:71:2f:e1:f1:8a:d7:
b0:34:07:13:99:00:ea:84:e2:22:a0:0d:d0:74:9e:f8:d2:a9:
4f:c9:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:09 2025 by rpki-client