Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE255ECC36611EFA7B23AAB762E951A.roa
File: DDE255ECC36611EFA7B23AAB762E951A.roa (raw, json)
Hash identifier: c0xk+ylwyw6Ab44H0pP1sGoTUg/iBJmJtaQxMQiU+uI=
Subject key identifier: 44:C3:F9:0C:89:8B:47:F3:F6:14:9B:C8:17:FC:4F:16:4E:48:4D:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE255ECC36611EFA7B23AAB762E951A.roa
Signing time: Thu 26 Dec 2024 08:53:25 +0000
ROA not before: Thu 26 Dec 2024 08:53:21 +0000
ROA not after: Sun 12 Dec 2027 08:53:21 +0000
asID: 17561
IP address blocks: 154.94.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75454 (0x126be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:53:21 2024 GMT
Not After : Dec 12 08:53:21 2027 GMT
Subject: CN=676d1985-ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:d1:40:b2:58:8f:1f:6c:53:a5:b3:e1:11:
7c:e7:c3:5a:7e:0e:f5:4a:1b:ae:c7:31:1d:c8:ed:
0c:a3:b9:72:28:3f:81:bb:55:cc:83:78:3c:3d:e5:
3f:a5:16:53:7b:41:ba:a4:d7:a8:19:06:40:f2:ad:
fc:78:24:21:11:6a:80:95:e1:c3:9c:58:d0:16:6d:
14:fd:19:5e:8e:b5:7b:b7:0d:82:b2:1c:b1:27:91:
4c:d5:f6:21:6c:cf:45:3c:af:99:c6:a0:c0:97:ed:
ad:64:ac:b9:34:0d:f3:88:e9:22:13:45:54:54:00:
b9:00:75:43:c6:d5:f6:3e:28:1c:1a:f0:cf:ae:a2:
a6:2e:f4:6f:40:81:c2:15:57:4c:c0:5b:1b:c8:1b:
6e:59:c7:9f:4f:f0:38:79:f9:04:65:e6:3e:ab:8b:
90:c8:f0:1c:c5:91:99:3a:10:f1:75:01:73:70:05:
d1:0e:6e:b1:b2:5f:0c:5a:50:24:e8:a9:56:8a:84:
32:63:89:67:ba:f8:8a:1e:91:4c:bc:ba:67:79:a3:
95:77:bf:c5:29:f4:4f:c8:04:bc:0a:6a:17:95:d1:
cd:60:e6:00:f8:e8:c6:83:80:d2:cc:87:e6:43:22:
25:20:f9:e6:6e:d9:02:d5:a1:7c:65:0f:8d:62:be:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:F9:0C:89:8B:47:F3:F6:14:9B:C8:17:FC:4F:16:4E:48:4D:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE255ECC36611EFA7B23AAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.20.0/24
Signature Algorithm: sha256WithRSAEncryption
16:52:e9:33:19:6d:1b:99:9c:59:ed:b3:d3:23:e1:6a:3c:ba:
1f:56:a2:58:00:81:a9:65:e0:1d:3b:90:13:93:57:3b:15:73:
58:90:91:3b:d1:4a:2d:bb:91:3b:a4:f1:ad:f2:12:5c:3b:cc:
8a:92:d8:c7:ab:e6:30:61:ad:a0:6c:32:1b:bb:0f:55:71:bb:
3b:1d:08:ee:79:8e:c5:76:a7:ea:94:56:81:e7:96:7b:35:f1:
ea:e1:49:44:3b:d4:bf:cd:ba:cf:6c:e3:91:57:83:6c:04:f5:
1a:b0:50:e2:59:96:f4:33:d6:75:e7:76:c2:a3:99:2d:ff:a3:
36:e5:c0:9a:e8:6e:2c:38:c8:ba:87:d6:3d:e9:e9:1b:87:ba:
94:16:f9:42:5b:cc:43:c4:15:97:8b:78:11:eb:e6:7f:46:cf:
fb:e7:33:e8:7d:d9:a4:f7:b9:c6:0c:9e:82:eb:0c:e0:e5:ae:
c0:7f:31:0e:c3:a5:36:68:45:9c:e9:b3:27:7d:60:10:8a:4f:
58:ab:8b:85:88:70:48:21:9b:b4:a2:1a:6a:0d:d6:42:9c:f6:
be:b8:77:0c:3b:10:ae:88:07:e8:44:6c:0a:cf:2f:1e:35:08:
70:25:b9:6c:eb:43:97:b2:f1:2c:0e:a8:8b:41:94:68:da:f3:
41:59:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:43 2025 by rpki-client