Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0BEDD86C41511EFBCF3B68B762E951A.roa
File: D0BEDD86C41511EFBCF3B68B762E951A.roa (raw, json)
Hash identifier: BefAV6SjHUHhFHUmX+49mnMPTO6waW8iwvjKrhAElmQ=
Subject key identifier: 27:13:8E:09:D6:1B:EB:35:C4:55:76:D5:75:12:A3:99:76:CF:8E:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012959
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0BEDD86C41511EFBCF3B68B762E951A.roa
Signing time: Fri 27 Dec 2024 05:45:45 +0000
ROA not before: Fri 27 Dec 2024 05:45:41 +0000
ROA not after: Fri 12 Dec 2025 05:45:41 +0000
asID: 984
IP address blocks: 154.196.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76121 (0x12959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:45:41 2024 GMT
Not After : Dec 12 05:45:41 2025 GMT
Subject: CN=676e3f09-971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:84:5a:de:78:8d:7e:49:de:bc:d6:04:91:
4c:69:4f:c1:de:b7:0e:ca:03:1b:b6:ee:96:52:6b:
ff:25:1d:2d:52:31:d7:5a:ba:6e:f7:14:3c:6a:40:
41:98:f5:da:5f:99:e1:5b:2e:95:85:05:29:db:fa:
cd:72:41:71:61:0c:6f:07:9a:de:71:ea:af:81:8e:
89:d0:63:44:a9:2a:08:62:03:bf:ce:15:df:9c:1e:
7c:03:e0:a1:f8:12:a1:4b:8b:39:9c:bd:0e:be:07:
25:2d:5d:ec:a1:3f:aa:2b:b8:32:99:3f:5f:8b:f8:
fd:95:0a:a8:b0:d2:9e:50:d8:09:36:11:be:db:af:
4f:63:b8:49:2e:18:de:24:10:18:c0:dd:05:fe:d6:
60:0c:ef:cc:b7:67:08:a9:6a:1a:08:cc:5b:32:49:
bb:02:20:01:87:96:fa:13:cf:09:4d:84:44:1f:28:
27:4e:f9:72:82:5c:e1:66:19:93:fc:0e:56:d5:77:
21:1b:b3:6f:8f:d4:6f:a8:32:75:8f:49:c1:91:b1:
67:81:7f:35:a3:10:36:10:fe:ca:b3:77:56:2b:94:
aa:a1:6c:14:89:6e:f9:97:42:ee:41:b7:96:f6:ab:
96:bd:1e:36:b1:72:2b:66:2e:cb:31:03:5d:38:90:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:8E:09:D6:1B:EB:35:C4:55:76:D5:75:12:A3:99:76:CF:8E:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0BEDD86C41511EFBCF3B68B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e8:b4:f9:4d:3f:4e:70:d6:76:d8:e0:28:57:b0:1b:6e:c9:
d5:2a:95:bf:cd:af:84:41:47:37:fc:ed:c3:bb:de:67:c9:ef:
32:25:dc:61:8d:58:ed:9f:a4:f4:6c:8b:32:d1:1b:64:fa:36:
3b:b1:75:2a:a7:23:cc:a3:e2:58:4c:cb:bd:67:e8:1c:7a:1f:
64:10:0a:f4:57:1f:5a:65:cb:f0:aa:8d:1c:b8:5d:28:6e:60:
00:1d:e5:4e:83:9b:ca:51:9e:78:55:b9:79:55:31:6f:a8:ef:
25:8d:d3:92:81:ab:40:5b:85:c8:b3:8f:b8:4a:4a:51:f2:56:
cd:38:53:b3:17:7a:b9:7b:8d:77:4f:e6:59:52:12:f1:a6:6b:
f8:78:8e:db:10:f5:e3:19:72:36:1b:4c:a0:e5:8b:19:2e:4d:
a6:b1:c1:59:c8:d1:5c:eb:bb:47:d2:9d:21:d6:10:66:79:ad:
9d:b3:32:f8:51:22:41:62:4a:1f:bb:da:77:5d:60:7e:11:1e:
00:d1:34:b3:fc:dd:5f:d3:6f:e7:28:aa:72:26:96:db:c5:f1:
32:be:c6:3a:98:49:e1:8c:2d:68:31:f0:c4:61:fd:99:ac:16:
21:fb:ec:18:80:d1:07:c0:04:a0:d9:13:24:c1:7e:36:20:21:
fa:47:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:48 2025 by rpki-client