Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697B032C61F11EFBA6DF96D762E951A.roa
File: D697B032C61F11EFBA6DF96D762E951A.roa (raw, json)
Hash identifier: rvicXTbchwkBVPB9ApLTPHnJZbE8iYJdrpavrTKiGBw=
Subject key identifier: F1:51:06:82:8C:84:7E:EC:2A:91:F2:34:24:3C:2A:88:B3:E0:24:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697B032C61F11EFBA6DF96D762E951A.roa
Signing time: Sun 29 Dec 2024 20:02:32 +0000
ROA not before: Sun 29 Dec 2024 20:02:28 +0000
ROA not after: Sun 12 Dec 2027 20:02:28 +0000
asID: 17561
IP address blocks: 154.217.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77666 (0x12f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:02:28 2024 GMT
Not After : Dec 12 20:02:28 2027 GMT
Subject: CN=6771aad8-2bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:35:9c:27:53:6d:8d:5d:0b:cd:c4:ea:33:
27:16:c9:d4:89:60:86:8e:c9:a8:7c:16:3f:99:51:
31:c3:b8:9e:a7:18:cd:62:cd:53:34:79:01:0c:c3:
df:51:22:e0:82:67:95:d1:b6:4b:93:04:2a:dc:70:
ec:1a:27:64:16:1d:a6:ec:f8:0d:04:6b:1f:39:2a:
13:cc:83:04:44:59:3a:93:76:71:30:b3:3f:eb:fd:
e7:24:b6:44:6a:aa:fa:9d:91:31:27:37:b4:7b:5a:
ee:bb:03:79:38:db:bf:ad:ea:1b:14:d3:f8:bd:40:
11:0e:9c:6f:9d:7d:d7:6c:71:96:d5:6b:f6:b6:a1:
43:a2:a6:f3:c8:cd:54:a4:a2:c6:11:59:2f:d2:94:
46:df:20:64:80:88:5a:b0:10:e1:3f:88:db:4d:ab:
70:b2:c5:fd:48:ed:36:48:b1:b2:ae:97:39:0b:36:
a1:80:16:5f:bf:cd:8b:1f:05:99:ae:a1:52:7f:ad:
88:5c:01:2c:f4:a2:96:6c:e9:fa:66:4f:35:40:09:
6a:01:76:54:fc:db:3c:ef:8e:ce:1e:9a:74:5b:4a:
d9:3a:2b:c5:b8:11:b6:75:fa:bd:41:90:d6:96:43:
88:1f:ed:7a:98:1a:c2:09:d5:d1:2f:c2:09:4d:64:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:06:82:8C:84:7E:EC:2A:91:F2:34:24:3C:2A:88:B3:E0:24:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D697B032C61F11EFBA6DF96D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.148.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b8:1f:6e:3f:d5:af:cd:4a:85:2f:6e:aa:9f:d1:43:bb:71:
d0:5c:48:20:48:1b:c6:9b:ca:7e:ff:d0:8f:a9:ab:4b:c4:1c:
2d:5e:c8:d9:af:1d:b2:e9:7f:f1:80:18:45:f3:eb:24:78:b6:
14:99:a8:7d:9a:82:53:c2:1c:81:0d:c4:53:8d:6a:8a:53:98:
07:69:54:0a:3f:25:dd:c4:43:a0:02:cd:da:05:f8:79:35:80:
a2:85:cf:f3:c5:89:41:db:f7:72:fd:42:86:ce:ee:84:5a:0c:
65:d9:8c:82:63:8a:8b:4f:64:a9:ba:80:34:16:56:7b:cf:75:
1f:0f:a2:ad:0e:90:67:36:6d:25:b4:e4:de:2d:c8:41:e1:66:
9a:5a:d5:aa:98:51:46:71:f3:05:a3:09:62:54:75:8f:50:f9:
89:f7:2e:79:cd:cc:54:c2:c8:88:b0:85:fe:f7:8f:c3:95:88:
a5:96:59:61:76:13:cd:87:9d:53:55:27:8a:2b:6e:bd:4d:c2:
2d:20:53:e0:66:44:d0:fe:95:b1:89:b2:aa:1d:98:5c:14:de:
52:05:06:c7:c0:3b:b2:9b:c2:3e:25:2a:0c:ee:d3:3a:6d:09:
f1:37:f0:b6:9b:65:25:aa:44:1b:2a:14:f0:36:d6:6a:7d:d3:
99:87:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:15 2025 by rpki-client