Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2360A8C1CF11EFAC908F80762E951A.roa
File: CE2360A8C1CF11EFAC908F80762E951A.roa (raw, json)
Hash identifier: d3L277k2QhBnOer2SD+XwR+luAujm6olYeSQaYUkTAk=
Subject key identifier: F7:38:0C:06:1A:36:7B:6F:06:D3:1B:F1:A8:DB:E2:C0:3B:F8:5D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012293
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2360A8C1CF11EFAC908F80762E951A.roa
Signing time: Tue 24 Dec 2024 08:19:33 +0000
ROA not before: Tue 24 Dec 2024 08:19:30 +0000
ROA not after: Wed 10 Dec 2025 08:19:30 +0000
asID: 984
IP address blocks: 154.193.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74387 (0x12293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:19:30 2024 GMT
Not After : Dec 10 08:19:30 2025 GMT
Subject: CN=676a6e95-39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:d8:6f:bd:bb:22:a0:77:29:be:9a:09:51:
01:db:cf:8f:c0:15:11:1f:2a:8e:2b:b9:10:1d:cd:
24:33:4a:ac:6a:fe:21:b6:d3:23:13:86:e6:18:c6:
d7:33:33:6a:40:c6:3f:7b:e3:b2:8b:bf:cc:ee:11:
09:6d:e3:53:47:8f:c0:32:fb:da:5b:6c:20:89:8c:
91:1f:e8:a7:3a:81:0f:91:50:d8:51:f8:12:d8:5a:
21:15:e8:94:34:1c:c1:2a:d9:25:8b:78:ed:ae:d0:
69:69:81:01:dd:c0:f2:2a:3b:82:16:1d:f8:bf:a6:
c3:6a:ac:3a:28:6b:e0:f9:71:9f:64:e1:f8:4a:5f:
02:d0:68:96:70:e4:a6:ce:1c:96:72:e7:1e:5b:13:
ae:08:c4:0d:7b:5a:8c:66:81:98:88:ff:8e:66:3e:
f2:13:d7:15:03:a9:50:b1:52:f5:36:c5:e0:24:04:
e3:e5:f5:c5:b6:5c:be:4e:d1:fd:5e:88:bc:f7:80:
e7:2a:52:14:0a:c4:47:25:81:85:00:9d:5a:22:75:
52:62:1b:58:79:b5:a5:4c:53:d3:40:26:58:5b:3a:
92:0d:d5:e0:df:87:6c:98:2e:57:a4:25:c6:67:00:
19:04:a2:8c:90:8d:6a:19:35:be:17:38:e8:24:10:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:38:0C:06:1A:36:7B:6F:06:D3:1B:F1:A8:DB:E2:C0:3B:F8:5D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2360A8C1CF11EFAC908F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e4:9a:04:e4:fd:51:9e:b5:f2:90:88:20:a2:d1:6e:66:c3:
62:54:71:af:4b:da:02:02:71:b9:90:f3:a9:b7:5c:fb:f4:27:
76:77:35:9b:0d:62:d6:71:0c:37:23:31:d6:7e:a4:d1:bd:c6:
44:7a:4e:0c:40:ec:e2:b3:b7:fc:4f:66:0c:6b:be:11:27:32:
cb:f9:56:d1:b7:cd:fd:92:fd:3d:42:88:09:0f:55:c2:d3:42:
ee:31:bb:8f:6e:5d:ae:d5:a3:c2:d8:cc:c5:0f:a9:14:9a:03:
85:c3:1e:3b:05:2e:5c:91:0b:b6:49:ad:62:6c:eb:81:5e:84:
ed:b1:8a:4c:15:cc:04:ae:7f:2d:2c:e2:89:9c:cb:d2:02:a5:
f3:4b:b7:4c:33:86:49:32:ea:fa:c2:79:8d:b2:91:d9:91:34:
68:1c:d6:20:6d:4e:2f:8b:d8:e8:fb:9e:bf:08:25:23:f1:8e:
e5:56:63:ea:15:c4:53:31:15:18:48:ec:eb:c6:0c:45:09:55:
28:29:47:53:80:43:af:de:da:e3:49:4b:7a:02:2c:25:6f:93:
d5:f1:f1:71:8a:80:9d:8e:d8:ae:08:55:0a:da:9c:28:4b:5b:
4b:0c:2a:a0:dd:c1:00:40:25:d3:66:85:44:46:0b:2f:b8:ca:
6b:2e:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:56 2025 by rpki-client