Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DA1196CDE511EFA224D366762E951A.roa
File: D3DA1196CDE511EFA224D366762E951A.roa (raw, json)
Hash identifier: d0ud0YzxRIZDlqfALT1wQCfVr9DaZj3NzC63Te0Fax0=
Subject key identifier: 24:A7:93:C7:9A:BC:EF:B4:B0:DF:79:CB:2B:E4:AA:33:85:68:63:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DA1196CDE511EFA224D366762E951A.roa
Signing time: Wed 08 Jan 2025 17:27:26 +0000
ROA not before: Wed 08 Jan 2025 17:27:20 +0000
ROA not after: Sat 03 Jan 2026 17:27:20 +0000
asID: 984
IP address blocks: 154.89.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79841 (0x137e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:27:20 2025 GMT
Not After : Jan 3 17:27:20 2026 GMT
Subject: CN=677eb57e-90c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:67:f6:ae:d3:34:5b:67:e1:6f:6f:83:49:
6a:e2:08:f7:22:85:22:a6:23:39:36:48:55:68:94:
37:47:2e:ad:a6:b7:ea:c0:6e:6d:24:4a:db:ee:b1:
11:75:13:8b:78:af:04:83:19:92:b2:bd:bf:8a:cb:
d2:cd:c7:ad:60:d0:18:68:ee:e3:67:23:e6:58:97:
7a:bc:92:14:e5:73:03:ec:1a:2e:aa:84:42:c4:45:
27:f4:ad:42:33:37:4c:72:38:86:ba:3a:20:a3:14:
eb:6a:4a:95:e3:98:20:de:c3:d2:af:7d:9b:34:52:
7d:20:99:d7:e3:28:12:ec:c6:1f:7f:ad:ce:af:36:
1c:93:e2:39:ff:6b:08:4f:63:65:07:20:02:4d:80:
16:ac:69:ba:da:27:4f:9f:f5:94:2a:5f:70:de:79:
2f:a8:5a:e9:0d:79:8d:12:1f:03:7c:0b:b5:93:48:
65:4c:35:94:71:31:3e:ff:a2:3e:52:99:14:7c:86:
7e:4d:a5:70:38:03:55:97:6d:73:1d:eb:e8:a7:94:
2f:e2:56:a9:5f:fb:25:85:43:61:9b:d6:86:00:18:
49:ae:c5:e6:7a:2d:68:6c:7c:4e:7b:eb:9a:55:9c:
4e:ed:f5:77:08:63:fa:17:af:fd:30:5c:4c:d6:75:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:93:C7:9A:BC:EF:B4:B0:DF:79:CB:2B:E4:AA:33:85:68:63:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DA1196CDE511EFA224D366762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:dd:6d:3f:8e:d2:d5:3b:f8:f9:a0:1d:5c:29:9c:7c:b8:3c:
0a:f3:25:f8:57:2b:f0:4b:6a:e6:65:8d:2a:d8:f4:a9:9b:bf:
a7:07:36:5b:b3:9b:c4:b0:31:f9:95:e6:6d:88:be:00:04:61:
f1:ed:02:b3:d6:db:10:ec:f0:d7:fb:96:08:e0:eb:88:3c:7c:
eb:3e:bb:c9:70:ba:e1:e7:02:e7:a4:5f:69:46:8d:0e:cd:6d:
e9:7d:5d:00:9d:06:bc:4e:25:30:f0:f9:ed:76:6c:89:1b:f7:
a2:50:3b:5c:54:32:9e:fd:88:4d:a4:19:c1:11:93:3e:ff:54:
78:08:fe:67:1e:68:3c:87:ce:43:2f:a1:4a:5b:50:e0:ec:8b:
3d:da:00:ca:fe:9b:2b:81:db:ff:db:56:27:ee:b6:1b:53:b9:
1f:74:74:e0:2c:2d:91:ab:0b:e5:7f:15:7c:c8:9b:3e:d0:93:
ab:8a:c9:5a:e7:53:06:55:52:72:e1:a8:0c:71:1e:75:3a:58:
b3:6a:ab:63:1b:2f:5b:73:cd:27:2c:87:17:b3:15:fd:dc:bf:
e5:9c:a2:a6:9f:a9:7c:ba:4a:7f:7a:2c:3c:9f:a1:88:64:f5:
4a:0c:f2:3e:30:12:5c:1c:e9:ab:74:4e:07:ca:ae:aa:3b:69:
18:35:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:46 2025 by rpki-client