Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB26DC26C0D611EF8CF90259762E951A.roa
File: CB26DC26C0D611EF8CF90259762E951A.roa (raw, json)
Hash identifier: JiNxAm8A1BCZYl8H5dL5DhWDB3n864l4XT5+YQHspEs=
Subject key identifier: 84:F0:8A:B8:60:9B:BE:F6:2B:86:2C:85:0A:DC:2D:7F:0F:8D:29:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB26DC26C0D611EF8CF90259762E951A.roa
Signing time: Mon 23 Dec 2024 02:37:04 +0000
ROA not before: Mon 23 Dec 2024 02:37:00 +0000
ROA not after: Wed 10 Dec 2025 02:37:00 +0000
asID: 984
IP address blocks: 154.89.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73318 (0x11e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:37:00 2024 GMT
Not After : Dec 10 02:37:00 2025 GMT
Subject: CN=6768cccf-8d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:ea:cc:88:c7:a1:7a:29:25:06:ad:47:8e:
cb:37:ff:2a:7e:6a:19:2c:9e:f3:09:2e:94:f0:f9:
6d:64:a8:19:e5:3a:0e:9a:e0:a0:72:2b:86:2c:e5:
1d:df:0b:52:59:ae:7f:5c:93:67:65:49:fe:d3:c8:
94:20:3a:f7:7e:62:5c:df:c5:e6:93:1e:e1:30:c0:
cc:00:f5:9b:3a:04:3d:12:bb:c0:79:28:8a:1e:0f:
c8:b7:4e:0d:b8:5b:1c:fe:22:08:f8:62:82:be:3d:
21:bf:2e:c2:71:d7:27:75:37:b0:5e:a3:74:e3:76:
91:32:0d:f2:52:29:f2:0e:82:2a:1f:40:94:e5:7c:
af:c9:e3:2f:c0:b4:5b:c8:63:c1:80:2f:ad:ac:cc:
c9:44:06:10:21:1c:ae:b7:cb:a7:ac:de:91:6c:4d:
64:a9:30:df:72:47:b5:70:db:c3:6a:1e:07:3f:98:
df:0c:39:ab:3d:70:57:db:87:04:a5:05:bd:20:17:
6a:b7:be:21:45:4e:b7:4e:ef:74:ff:38:61:03:c9:
d3:2a:ac:c8:dd:0e:6b:50:9b:67:e2:c7:76:c8:a9:
0b:66:6e:83:22:ec:9e:17:92:f3:4e:2d:5a:94:4b:
32:db:4e:54:e6:39:65:f6:90:46:f0:00:cb:69:69:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:8A:B8:60:9B:BE:F6:2B:86:2C:85:0A:DC:2D:7F:0F:8D:29:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB26DC26C0D611EF8CF90259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.145.0/24
Signature Algorithm: sha256WithRSAEncryption
30:38:23:5d:a3:b4:bc:45:80:cf:1d:61:69:ec:c9:33:ea:1f:
51:73:4d:83:2b:a9:ea:3b:99:5b:dc:bf:d6:92:ff:eb:43:68:
e0:bd:e3:08:14:d6:ea:7f:b3:34:d4:49:1e:39:ca:3f:85:95:
44:c8:d7:2e:d1:db:7c:53:f9:96:ea:d5:2c:c4:9e:82:73:89:
aa:89:38:d5:3e:9b:92:38:19:a0:00:71:ed:83:ae:12:9a:49:
f4:8d:72:e0:aa:b8:0f:ce:f1:cc:c9:b8:10:d7:7a:7d:1c:e9:
eb:14:a2:40:22:27:7d:8e:e2:00:7b:c2:47:77:e4:ad:a4:d2:
80:87:c4:8b:da:56:db:28:be:e3:ad:42:e3:17:8b:b2:f1:fe:
2a:64:a2:f0:63:7d:be:b0:a1:b0:bf:40:a9:15:01:26:2d:63:
7b:43:08:01:9d:f1:aa:29:fc:6b:bf:c1:73:1c:b0:e7:a2:25:
ef:1a:9c:11:1b:7e:fe:6a:15:a4:d4:b3:01:d8:5b:f3:5b:4c:
7a:54:4e:aa:22:d7:08:fb:21:53:ac:38:db:08:37:5c:2e:af:
55:0d:19:96:60:7b:c2:2c:57:fc:80:ad:70:ac:3b:0c:6c:67:
be:cf:91:ad:5e:1d:64:ef:6a:39:10:39:41:b1:a8:f8:f4:58:
30:c7:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:45 2025 by rpki-client