Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11559C0C8A411EF8031566D762E951A.roa
File: D11559C0C8A411EF8031566D762E951A.roa (raw, json)
Hash identifier: eOaUAQBK91YRgTD0UlXtLAJrKxidH0VSqKFt91OpVxU=
Subject key identifier: E1:10:0D:AF:F0:F8:8D:40:35:D1:49:D6:28:6D:03:1B:E5:71:B3:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01313E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11559C0C8A411EF8031566D762E951A.roa
Signing time: Thu 02 Jan 2025 00:59:28 +0000
ROA not before: Thu 02 Jan 2025 00:00:24 +0000
ROA not after: Fri 12 Dec 2025 00:00:24 +0000
asID: 984
IP address blocks: 154.218.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78142 (0x1313e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:24 2025 GMT
Not After : Dec 12 00:00:24 2025 GMT
Subject: CN=6775e4f0-db73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:f2:4b:54:cb:6c:c5:71:1e:bb:42:bb:1e:
64:c8:21:c2:8a:60:c9:56:a6:51:24:50:5a:f6:93:
10:d8:9d:17:fb:0d:23:59:c3:42:8a:73:b0:c5:a4:
24:fb:59:fe:8c:59:26:97:a2:1f:0b:36:8b:9c:e6:
b5:4f:e8:91:7d:91:25:1d:4d:55:3e:5f:8f:75:0b:
bc:3b:6e:85:bd:b5:de:76:07:f3:28:53:e0:c8:e9:
97:71:56:68:48:dd:03:c1:34:4a:39:65:0f:db:5f:
a8:c9:b4:73:6d:0c:f8:50:35:54:d9:26:94:f4:5e:
39:e6:04:f4:dd:1b:de:de:6e:ac:07:8c:bf:87:4d:
6e:19:d5:5f:f4:c0:7f:ec:7a:92:1f:c0:f1:7f:0b:
1b:93:be:fb:29:f8:8d:1d:ee:8f:8d:73:a4:8d:ee:
4b:51:50:d8:e0:77:90:44:ce:cf:a6:60:2f:eb:53:
b8:23:ef:27:e0:dd:f9:d5:ba:1c:71:19:56:12:80:
28:67:17:58:34:00:a8:a7:e1:ec:d9:80:29:45:8f:
4c:8e:15:f3:ee:0e:fe:65:67:9e:21:2e:72:8c:41:
7f:f7:5c:3f:a8:e2:fd:a1:95:06:bf:69:1d:e4:77:
80:9d:69:62:a4:4a:79:f7:99:eb:42:79:55:81:ac:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:0D:AF:F0:F8:8D:40:35:D1:49:D6:28:6D:03:1B:E5:71:B3:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11559C0C8A411EF8031566D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:17:a2:1b:e5:d3:fd:0a:f5:b7:88:97:7c:e0:38:71:f7:4c:
7f:bd:48:c1:52:8f:18:0b:90:cd:e8:23:30:7f:d0:3c:4a:48:
e6:11:2e:4b:85:88:c8:66:74:e3:de:df:b9:a1:16:72:76:aa:
0d:9e:1a:49:3c:aa:0f:ea:6a:52:d3:28:e1:48:f9:84:d8:72:
16:7a:68:9b:bf:cd:e5:e9:a2:5b:43:12:c2:81:b9:09:22:08:
cc:29:3d:d6:d0:50:77:77:14:1e:6e:f7:a1:ce:49:a5:92:fd:
f2:c2:64:15:65:c4:d5:02:7d:b3:46:11:76:c4:a5:25:59:db:
21:4f:f9:91:c8:07:2a:46:ad:5b:4c:83:75:a9:50:95:11:91:
17:ad:28:17:40:2d:30:95:d7:a6:e4:ec:d6:53:97:ae:06:e8:
48:be:25:c5:05:e0:8b:58:7d:b7:4b:56:5d:42:15:a5:5b:da:
f5:b1:a7:b5:35:2b:2b:a5:05:e7:1b:26:eb:c0:de:d1:f9:b0:
92:15:80:d7:90:0b:be:ee:ea:e4:f9:5b:cd:03:dd:26:7d:81:
bb:fb:64:69:aa:64:46:a6:cf:fa:31:8e:1c:43:41:4b:69:c2:
db:68:45:c8:c3:a5:72:39:4d:40:62:85:a6:dd:3c:cf:73:d1:
d4:6d:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:27 2025 by rpki-client