Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2F1D0CDDD11EF9AAF7BB5762E951A.roa
File: D5A2F1D0CDDD11EF9AAF7BB5762E951A.roa (raw, json)
Hash identifier: n2/x5aacH5Sgx54Dx4X5TR8NFI3iZW642h83k2zRyPk=
Subject key identifier: F7:F5:15:C5:9A:51:09:0F:57:B4:75:0A:BE:8F:5D:A3:06:6F:10:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2F1D0CDDD11EF9AAF7BB5762E951A.roa
Signing time: Wed 08 Jan 2025 16:30:13 +0000
ROA not before: Wed 08 Jan 2025 16:30:09 +0000
ROA not after: Sat 03 Jan 2026 16:30:09 +0000
asID: 984
IP address blocks: 154.89.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79783 (0x137a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:30:09 2025 GMT
Not After : Jan 3 16:30:09 2026 GMT
Subject: CN=677ea815-bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:55:02:8b:61:ff:38:45:88:7a:09:fc:4a:
57:ea:af:a2:30:de:09:9d:11:03:05:e4:cb:54:b2:
ac:b8:3f:ec:f1:e3:48:4b:a8:ec:2e:3a:e9:d7:f9:
00:12:2e:29:50:82:a9:d1:69:8a:41:18:c2:41:ab:
5b:ec:10:fe:ed:8a:8e:83:0e:6b:1e:42:33:1e:ea:
29:08:b2:ed:9c:07:44:1e:0f:84:9f:d4:41:13:44:
a2:cc:c2:f8:5e:b0:11:30:6c:00:12:c4:f2:a9:19:
b2:4f:73:c5:ef:49:9b:de:c9:17:c2:14:c4:18:41:
ae:ec:34:0c:8f:a1:51:af:3d:75:78:b3:a2:36:f2:
13:9b:6f:a1:e0:99:68:6d:95:0b:a1:8e:d2:bb:5c:
54:3e:da:c0:8c:66:33:91:18:6c:be:59:78:75:2d:
d8:db:cf:99:45:f2:31:6c:e9:31:f6:22:68:9d:fa:
78:bb:f3:09:8e:24:bf:13:1c:d2:8d:0f:3f:1c:90:
21:85:32:c1:1f:ac:53:e9:57:01:58:6b:16:a6:32:
99:92:fc:9b:1b:44:3e:20:3b:e6:57:61:02:a8:78:
bc:d4:9a:d1:6b:57:f1:b8:19:4b:ef:b8:99:d0:fe:
f2:ee:1d:91:ff:f4:1a:1c:f0:d5:c3:30:1c:26:ca:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:15:C5:9A:51:09:0F:57:B4:75:0A:BE:8F:5D:A3:06:6F:10:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2F1D0CDDD11EF9AAF7BB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.162.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b6:bd:a2:8f:7f:b8:65:88:d6:28:6f:58:a8:0e:1f:2a:6a:
6c:c5:0a:e0:90:9e:87:08:91:4d:6f:b0:f9:23:74:77:10:4d:
f0:b5:a1:58:23:57:fa:d1:bf:6a:b8:1d:ea:2f:ba:da:a2:e4:
e6:71:10:f5:72:55:e8:df:5b:9a:80:e9:f1:05:1a:84:0d:93:
0b:f0:a9:d2:36:45:87:e8:27:9c:06:44:e0:ac:98:04:ae:d4:
1a:fb:a0:50:27:ea:ef:00:74:14:24:93:d3:5e:6a:18:1e:4f:
ed:00:33:31:bf:97:08:42:84:71:43:bf:92:5c:58:d1:19:1d:
87:5f:a4:fd:45:bf:66:ad:15:2b:fa:39:5e:50:a2:09:d3:b8:
c8:c2:44:de:b0:aa:e1:c2:ce:08:ab:21:52:4f:22:ef:b5:08:
24:c2:f6:ce:c4:44:0e:ed:8d:ac:3f:69:82:5f:d6:2e:a4:38:
b2:53:d3:e0:08:6e:d7:c7:03:c3:f2:65:c9:20:03:80:af:b2:
2c:72:7e:54:ec:30:22:e7:69:1c:fd:9c:a8:8b:fd:61:11:ab:
0f:6a:1a:63:e9:dc:e7:b2:e5:66:5d:2f:2d:13:7d:f3:01:9d:
53:02:9e:a2:1b:8f:53:52:79:e1:fe:04:c1:71:6c:c8:aa:13:
ee:16:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:19:15 2025 by rpki-client