Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D915CCD6C40D11EFB972E75A762E951A.roa
File: D915CCD6C40D11EFB972E75A762E951A.roa (raw, json)
Hash identifier: B4AOkUbI2+VfU3cOI+i36cL4gEZBzbiGmAhucQDizmM=
Subject key identifier: 32:4B:46:01:43:1D:39:CC:E7:B1:CD:62:23:CA:56:49:43:1B:56:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012931
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D915CCD6C40D11EFB972E75A762E951A.roa
Signing time: Fri 27 Dec 2024 04:48:43 +0000
ROA not before: Fri 27 Dec 2024 04:48:39 +0000
ROA not after: Fri 12 Dec 2025 04:48:39 +0000
asID: 984
IP address blocks: 154.196.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76081 (0x12931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:48:39 2024 GMT
Not After : Dec 12 04:48:39 2025 GMT
Subject: CN=676e31ab-5c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:24:d0:34:be:ce:d1:38:69:66:16:15:40:
85:21:f5:78:d6:2e:6c:92:5d:5d:6b:c6:60:bd:48:
5f:a7:0b:b1:79:e6:e8:5b:8a:8e:91:bd:02:39:4c:
e1:7d:a3:5e:b4:ce:49:95:ba:95:51:ef:35:7d:6c:
21:35:7b:e3:cb:a5:8f:76:87:9a:e5:d8:7a:66:73:
7a:2e:5b:6e:60:14:a1:09:55:c5:6f:f2:52:1d:ad:
e8:76:08:df:5d:89:5c:d9:36:db:43:07:a7:e9:ee:
f0:33:b8:38:4b:28:a5:2c:62:6f:9e:be:6e:eb:ee:
35:d2:2a:43:e2:dd:16:a5:eb:7e:f1:4d:46:23:67:
2a:69:bd:7d:62:2b:5b:e6:5f:ae:ff:2b:dd:63:8a:
f6:15:e9:5f:a4:08:fb:13:d0:a8:61:c3:f0:6f:b2:
d1:38:9a:bc:08:42:ec:e1:95:15:3d:77:5a:a4:5d:
ba:54:99:4a:ce:c6:16:c8:d7:7a:6f:a9:9c:9d:39:
64:fd:a2:ae:d6:86:f4:d4:0b:c8:77:fd:ab:9f:47:
46:5f:5d:f3:03:8c:db:96:c4:6f:a0:6f:fb:ec:67:
d9:1e:ac:c5:4b:3d:9a:42:e2:ab:2a:fc:3c:09:86:
78:12:ea:7b:68:2d:f2:b7:e8:85:02:f4:2a:91:b7:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:46:01:43:1D:39:CC:E7:B1:CD:62:23:CA:56:49:43:1B:56:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D915CCD6C40D11EFB972E75A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f5:15:ba:75:49:af:cf:91:e4:f0:68:34:f7:a4:bf:43:de:
76:bd:e4:a5:16:a4:a2:47:7e:ad:82:56:86:1a:3c:0f:c4:ee:
b7:06:39:61:5e:97:d8:4c:c9:74:72:99:36:40:f1:ef:c0:0c:
e9:47:f0:7a:0b:5e:d0:73:38:56:d8:30:df:04:f4:89:85:4f:
c2:52:66:eb:c8:7f:36:d0:d7:8c:ed:4d:02:2a:c5:f2:a1:3a:
69:5c:6d:c3:e2:25:e5:c7:4d:f2:a0:c7:e2:1c:99:12:cc:db:
59:91:b8:19:4d:e3:49:f2:a8:41:1f:ce:38:aa:82:4f:db:e4:
18:ff:3d:11:ad:00:7b:18:04:27:f4:47:43:cf:5c:db:ab:1e:
5c:ee:8f:c6:97:7a:b7:81:8d:4a:e4:23:d9:7e:52:e6:07:4b:
b9:73:3f:68:fa:e0:f0:26:63:ee:b6:55:54:0d:e9:6b:55:4e:
89:65:ba:2a:36:a4:16:2d:fe:4b:94:79:a4:0c:04:c6:40:51:
f1:b2:bc:0c:42:3c:a9:d7:97:e2:47:a1:8e:8f:c9:68:a2:8c:
52:9b:22:6d:ce:57:c7:be:ed:e9:12:31:1b:f6:ff:d4:76:9e:
69:7c:ee:dd:bb:08:6a:89:c5:6c:61:84:f2:34:bc:ff:06:35:
b2:26:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:10 2025 by rpki-client