Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0C3000C40F11EFB3FAC267762E951A.roa
File: DB0C3000C40F11EFB3FAC267762E951A.roa (raw, json)
Hash identifier: bpaIWO3CR+TDVD9xH9ymubockVONL9mtUEFkouHrj0A=
Subject key identifier: 80:50:5A:86:56:B0:AB:56:D7:C8:19:A7:92:42:83:7E:57:3C:81:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012945
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0C3000C40F11EFB3FAC267762E951A.roa
Signing time: Fri 27 Dec 2024 05:03:05 +0000
ROA not before: Fri 27 Dec 2024 05:03:01 +0000
ROA not after: Fri 12 Dec 2025 05:03:01 +0000
asID: 984
IP address blocks: 154.196.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76101 (0x12945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:03:01 2024 GMT
Not After : Dec 12 05:03:01 2025 GMT
Subject: CN=676e3509-130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:fa:b6:fc:40:63:3b:70:3e:70:7a:b5:d0:
b4:32:f0:58:eb:fa:73:d9:13:bd:79:1a:df:1e:b2:
3c:22:cf:54:b0:cf:16:e2:32:5c:5e:d9:35:c9:59:
20:4a:77:0a:e6:f7:86:82:e3:e5:1a:5f:02:cb:36:
2a:be:59:7e:cb:4e:20:47:44:5d:e8:12:5c:13:cf:
7f:21:c8:9d:92:a0:66:4a:85:be:49:e8:1f:3b:57:
9e:d7:53:4d:32:fb:f0:22:4e:17:c1:ca:5d:30:11:
3e:90:1e:7d:d9:10:c3:cc:1b:95:98:b3:78:79:63:
02:af:f7:01:d7:83:ff:5e:d3:87:43:53:c0:49:1b:
5f:e7:56:7c:c1:eb:19:f7:ed:30:02:02:6e:c0:4b:
50:f1:bc:07:c9:94:9c:c0:47:e7:9d:37:98:51:78:
69:0e:00:75:87:03:75:f1:bf:4d:e7:9f:92:a1:19:
27:bc:29:75:27:34:f2:96:91:30:f7:a6:8a:83:ca:
48:22:b7:27:dd:22:29:0c:9d:87:e8:e2:a2:6d:88:
51:06:0b:db:d1:8a:aa:58:b5:7c:07:c2:39:2b:af:
0f:49:1e:f2:32:fa:03:31:65:b0:3c:7a:3c:28:c5:
3e:ca:36:b7:b0:55:a9:47:aa:98:fd:57:2f:98:eb:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:5A:86:56:B0:AB:56:D7:C8:19:A7:92:42:83:7E:57:3C:81:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB0C3000C40F11EFB3FAC267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.236.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3d:b0:e0:3d:39:6d:dc:97:3c:4b:55:7b:aa:81:e5:fd:31:
72:cd:38:ef:bc:d4:e8:15:e9:ba:4d:d8:c7:20:8c:35:58:a3:
64:1c:31:37:65:44:68:73:eb:7e:f9:ce:4e:b9:25:62:bc:bf:
2f:c0:63:eb:7d:67:c8:ee:24:40:8c:f3:12:fe:14:1d:c6:6d:
e2:36:1a:dc:90:8b:6e:a3:92:a2:57:3e:39:05:a5:c1:83:4e:
c1:99:c4:8a:a8:8b:8b:0a:1b:80:a9:f3:73:cc:eb:a5:e2:23:
94:a3:da:56:af:f5:ae:b1:a5:6d:5b:52:c6:18:e3:8e:0a:bd:
4b:ad:6a:04:af:43:8c:f7:89:ba:7e:f9:31:54:c7:09:2d:fb:
52:76:bf:0b:97:5d:f7:5b:2f:b8:97:9e:2d:e5:1b:1c:38:0e:
ba:c3:9c:aa:13:e1:16:58:54:e6:11:f5:19:d4:ef:23:8b:a6:
38:0c:e1:9a:0e:e1:55:fe:1b:7f:33:09:cc:44:11:06:4b:7b:
52:66:3a:db:89:b2:d5:90:d5:71:d6:cb:bc:6c:44:3b:98:ae:
43:43:bd:6e:7c:a9:37:e2:8e:c4:09:26:cc:55:c3:97:91:38:
9d:78:95:44:93:60:1e:dc:38:29:e8:52:e5:ea:5c:ad:4a:86:
af:1c:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:48 2025 by rpki-client