Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B7E486C27211EF9A6968A0762E951A.roa
File: D9B7E486C27211EF9A6968A0762E951A.roa (raw, json)
Hash identifier: OnF69758p+nrPqpx9o+PaRu8/fEDlokKqBXbQVgGO54=
Subject key identifier: 06:AD:3C:EC:24:24:64:5B:99:BB:6A:3B:42:40:A1:04:6A:53:A6:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012478
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B7E486C27211EF9A6968A0762E951A.roa
Signing time: Wed 25 Dec 2024 03:46:41 +0000
ROA not before: Wed 25 Dec 2024 03:46:37 +0000
ROA not after: Wed 10 Dec 2025 03:46:37 +0000
asID: 984
IP address blocks: 154.211.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74872 (0x12478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:46:37 2024 GMT
Not After : Dec 10 03:46:37 2025 GMT
Subject: CN=676b8021-3a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:e6:93:70:ca:3b:d2:5f:d5:e4:ec:de:7f:
8b:2f:b3:d6:01:d7:90:e0:4c:d0:47:99:ef:3c:4d:
61:ee:56:7d:d6:03:a5:76:fa:90:77:83:f7:84:e1:
85:c3:dd:de:45:d4:89:52:70:9a:a7:29:3e:0e:ac:
ad:fc:28:2a:b8:9d:cc:67:68:8c:9f:40:92:d8:ea:
88:4a:c1:28:5e:80:2b:b2:08:ee:2e:37:98:c9:ed:
28:dd:fa:fa:00:1f:3a:e9:eb:5c:f1:6f:64:fb:0c:
e4:7e:6d:4a:c7:79:a5:f2:bd:f4:db:4d:a4:ff:41:
64:26:83:4a:ee:3c:a5:f7:34:a8:3c:67:3f:bc:ab:
c0:e2:a7:f0:ad:ef:9d:55:cb:b9:fd:4a:bc:40:bf:
5c:98:4e:b8:5b:0c:61:0f:ee:44:89:ad:7f:c6:02:
c7:3f:3e:2b:95:2b:33:a7:07:be:51:60:61:4e:79:
48:ca:71:93:1d:4f:3d:15:be:05:24:37:03:4f:9d:
b9:fd:da:e0:76:d9:d2:6d:8b:48:25:1a:3a:28:52:
b8:f6:b6:a7:e4:3d:c0:c8:e4:9c:c6:05:42:5c:ba:
df:be:04:bf:6e:28:d0:7c:36:7a:bb:61:71:81:67:
2e:90:78:c3:c0:39:e1:f2:fc:27:4b:97:ee:92:b4:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:3C:EC:24:24:64:5B:99:BB:6A:3B:42:40:A1:04:6A:53:A6:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B7E486C27211EF9A6968A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.217.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:6b:32:6c:21:9a:d2:bf:17:d1:40:ab:df:ae:74:28:dd:e4:
e0:80:85:fa:4d:d7:48:85:e3:09:24:fc:4a:ef:c8:33:9d:be:
bc:96:ee:ae:5b:89:49:30:8a:bc:49:39:aa:21:07:59:e6:8c:
a2:63:a2:64:ca:07:de:fa:0e:2e:11:06:eb:2d:3a:04:72:9d:
bd:2b:9a:d7:74:52:97:8a:fe:f2:64:74:01:4a:b0:eb:7f:1e:
6d:4d:3e:3e:9d:b1:e1:a2:5c:94:df:ec:9c:26:bf:e0:17:b9:
12:8b:fd:63:18:f4:03:77:d6:f5:ed:e4:3c:ca:ae:02:bd:9c:
72:cc:27:80:60:ec:03:b7:3a:55:2d:5c:8d:56:64:5d:f9:47:
47:bd:3f:42:13:86:f3:01:d0:73:e7:b6:46:33:db:35:c6:e4:
8a:81:a7:aa:ce:3b:de:ec:25:27:6e:d5:11:11:90:0c:06:d2:
ea:10:b4:c4:e5:83:2e:68:41:97:89:1d:d3:5b:fa:26:ab:66:
4b:6f:51:df:0d:d5:b1:51:81:e5:ec:54:15:89:fd:b6:6b:39:
50:22:bf:1d:8e:e4:18:6e:a8:e1:09:79:31:9b:36:b7:56:0b:
3d:6e:ed:d9:b4:18:ea:91:56:39:33:b6:7a:bb:b7:38:a4:c9:
22:4c:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:40 2025 by rpki-client