Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFDE9322CDB411EF8542D3B1762E951A.roa
File: CFDE9322CDB411EF8542D3B1762E951A.roa (raw, json)
Hash identifier: Vgj8nMZxevdhuNivangholNpS9KZ4x0wmUbXgTCGECw=
Subject key identifier: 5D:2F:F0:C3:ED:1F:0F:18:55:0F:8E:BB:EE:21:55:59:15:0B:08:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFDE9322CDB411EF8542D3B1762E951A.roa
Signing time: Wed 08 Jan 2025 11:36:34 +0000
ROA not before: Wed 08 Jan 2025 11:36:30 +0000
ROA not after: Thu 16 Dec 2027 11:36:30 +0000
asID: 17561
IP address blocks: 154.197.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79530 (0x136aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 11:36:30 2025 GMT
Not After : Dec 16 11:36:30 2027 GMT
Subject: CN=677e6342-9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:e3:e7:8c:2b:8c:8e:dc:96:6b:26:ad:bf:
ad:52:49:c2:b4:57:ad:6f:80:1c:a0:d1:51:45:3e:
b2:46:51:39:40:98:d2:7a:05:61:6b:1f:e1:f8:f0:
ff:14:89:fc:6e:fc:9e:a0:3d:c1:88:3d:3f:3a:64:
f6:9d:20:50:9a:fe:b7:e3:eb:ac:19:87:c1:40:60:
d7:f7:95:59:9d:c7:40:83:3f:fa:b1:64:e0:f2:73:
67:95:7d:59:aa:3e:98:5e:36:a7:56:b4:72:3f:07:
2e:e6:d0:96:d7:53:53:25:eb:ff:1d:d1:1f:ce:1a:
4b:05:3a:9a:b3:51:bf:26:d3:56:82:2c:91:6f:65:
22:31:52:8e:a1:e7:19:4a:6c:7e:94:1e:ef:1c:5f:
de:2e:32:20:5b:4d:62:d5:6e:82:7a:a3:fb:e6:09:
33:99:c1:31:44:af:f4:02:38:5c:aa:c9:21:ce:95:
28:e4:55:3d:40:2f:2e:a5:ed:c4:cb:d9:91:f6:08:
b1:42:e6:dd:1b:1f:99:bc:ec:6e:f1:1d:9e:b2:e5:
ab:8f:2f:80:f3:11:f8:e8:1c:d6:da:c0:03:b7:7b:
62:61:75:b1:14:cd:f6:95:df:3e:0d:a5:e4:76:f3:
82:fe:50:9e:a9:f4:6d:47:b9:ba:6a:9b:fe:48:6e:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:F0:C3:ED:1F:0F:18:55:0F:8E:BB:EE:21:55:59:15:0B:08:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFDE9322CDB411EF8542D3B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
10:33:20:9a:9f:07:2d:af:0d:30:9f:bc:9d:86:ee:96:48:2b:
d5:ab:0a:39:ff:3f:d2:ff:06:44:88:af:63:38:51:a9:4a:56:
5c:d9:08:cb:ee:0a:b7:88:4a:e1:c7:e3:94:cb:de:f8:f6:64:
17:4c:86:40:34:e2:6e:34:4a:ff:a2:07:e7:ea:80:49:ef:d8:
b1:32:76:4f:a3:0e:ae:08:8f:e7:17:38:8d:9e:af:29:d8:49:
8b:7f:0d:7f:53:3e:a2:da:fe:89:1a:1e:d6:58:1c:9b:eb:c2:
a7:f8:f8:4d:54:f8:f8:4e:a7:7f:01:f0:b4:93:fe:2f:a3:9a:
a3:6c:53:7d:aa:2b:d3:97:f3:7a:79:1a:0c:b0:41:17:85:ed:
9a:83:7b:b7:f4:28:b5:15:94:b3:00:69:50:85:74:42:12:1c:
c7:b6:3e:c0:6d:96:d7:8e:91:96:69:04:07:46:d8:26:be:9f:
5f:b7:c0:4b:49:08:ba:20:d6:fe:8d:1c:80:9c:44:72:d2:06:
f9:b4:ab:a6:6b:d3:bb:c4:0f:a1:da:0c:9a:e2:ce:08:27:de:
bb:bb:7b:ee:09:58:79:f2:66:d0:0e:11:19:98:14:cf:8f:6c:
4f:77:ab:e6:1c:ab:ab:fb:d8:f3:b1:20:a3:c1:9c:04:de:c6:
48:5a:81:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:51 2025 by rpki-client