Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78AC23EC1D511EFBC4738A5762E951A.roa
File: D78AC23EC1D511EFBC4738A5762E951A.roa (raw, json)
Hash identifier: RckzGEcfHDrzKs7/ZWjmj9PFt4HacFn6FsbXIowmhIo=
Subject key identifier: 56:E4:81:45:5E:BD:2E:86:BC:72:31:76:33:AE:61:70:54:28:B2:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78AC23EC1D511EFBC4738A5762E951A.roa
Signing time: Tue 24 Dec 2024 09:02:46 +0000
ROA not before: Tue 24 Dec 2024 09:02:42 +0000
ROA not after: Wed 10 Dec 2025 09:02:42 +0000
asID: 984
IP address blocks: 154.194.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74437 (0x122c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:02:42 2024 GMT
Not After : Dec 10 09:02:42 2025 GMT
Subject: CN=676a78b6-2986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:97:2c:d9:e2:7d:91:b8:30:7b:48:ad:0b:
ca:9c:f9:57:cd:3a:5d:0b:d5:88:73:cb:36:6b:12:
03:4e:88:2b:e9:87:56:5a:9c:6f:b4:1f:e9:16:36:
6c:f9:e3:52:08:97:22:0b:c5:f2:f5:5a:b2:41:fd:
a6:64:e7:62:56:5d:b8:fd:73:d6:42:58:b7:42:66:
7e:b8:3f:99:ba:5f:f9:9f:2f:f3:02:5d:35:3e:98:
d6:ef:8c:ff:39:31:cb:de:8f:3f:d6:96:d9:b2:67:
a9:91:59:2a:a0:c9:b9:86:9f:4f:33:e3:42:dc:c2:
ce:fe:63:5f:e7:bc:63:c9:75:1a:8c:0a:81:42:00:
35:77:f9:2b:a1:35:3d:56:75:af:95:d3:ac:df:d0:
3c:e5:ca:98:d0:9f:30:b1:f9:e9:47:3a:44:11:55:
99:da:8b:49:b5:c1:90:1e:29:a2:8d:6e:15:a2:c9:
6a:52:d8:e3:85:97:08:36:78:22:61:69:52:05:1f:
d6:36:15:59:ad:46:09:ea:23:f2:a3:57:b6:c3:ae:
2e:28:db:d3:cf:ec:cc:71:12:dd:97:b3:94:67:7b:
ae:a8:b0:eb:c8:2b:75:95:f2:3a:ff:78:f5:f2:15:
e8:ff:20:6e:4c:a0:fd:71:76:44:f3:0c:47:48:3f:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:81:45:5E:BD:2E:86:BC:72:31:76:33:AE:61:70:54:28:B2:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78AC23EC1D511EFBC4738A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:30:b3:44:18:23:b7:be:85:31:e6:56:69:65:d7:b2:e2:4c:
b5:69:13:00:51:22:39:ba:cb:2e:98:6a:81:b6:c4:23:1d:c8:
35:c7:fb:89:6c:8e:c0:8c:99:2d:7b:f7:a1:22:d8:f1:62:bc:
86:54:a0:0f:ed:8d:fe:9e:c2:4c:63:d3:0b:cd:99:51:07:84:
8c:84:62:11:43:68:3b:a1:ff:e8:e7:8b:7f:9b:84:9e:8f:97:
9f:4e:5f:01:4e:bd:13:28:28:ab:b0:7b:31:bc:ad:69:2d:6f:
2b:28:d2:e9:68:13:40:95:8c:ec:8b:78:fe:de:de:26:24:00:
85:0c:cf:18:96:dc:dc:37:1e:f0:fa:90:d9:db:3c:6f:0c:f8:
55:e6:ab:96:6e:63:29:2c:0f:e3:66:56:40:26:90:e0:88:a8:
43:91:a9:56:19:6d:a5:30:2a:3b:d9:8a:6a:8c:df:f4:f6:d9:
10:cd:0a:8f:5b:09:bc:09:de:b0:28:04:0c:bc:71:df:4d:ee:
be:20:c4:32:82:65:e3:bc:82:f4:a9:06:e1:7b:f0:e9:c6:96:
b9:1e:5b:78:b2:7f:89:a8:0e:a5:1a:d6:e1:4a:66:40:da:5c:
d1:e2:75:f5:73:a8:31:f7:66:cf:9b:aa:52:aa:78:d5:44:ab:
48:17:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:05 2025 by rpki-client