Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE158FBACDD511EF98C61283762E951A.roa
File: DE158FBACDD511EF98C61283762E951A.roa (raw, json)
Hash identifier: c7JAp0KKdDhLHssQO54KOB5jhig+hIYk9XhcoPH8D5Q=
Subject key identifier: B6:DF:24:95:DD:9E:9B:96:C8:52:75:48:03:D8:B4:BD:74:39:DC:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013769
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE158FBACDD511EF98C61283762E951A.roa
Signing time: Wed 08 Jan 2025 15:33:11 +0000
ROA not before: Wed 08 Jan 2025 15:33:07 +0000
ROA not after: Mon 03 Jan 2028 15:33:07 +0000
asID: 17561
IP address blocks: 154.88.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79721 (0x13769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:33:07 2025 GMT
Not After : Jan 3 15:33:07 2028 GMT
Subject: CN=677e9ab7-ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:5e:1a:44:ee:f3:43:5e:40:7c:ff:9e:5f:
a0:29:d3:cd:c4:19:68:74:0b:69:6b:8c:b1:2e:0b:
aa:90:3f:95:8a:72:5e:75:85:d3:a1:0c:65:cf:36:
89:4e:93:a5:f6:a8:f7:19:38:02:c0:31:f5:6c:50:
6c:26:7e:62:2c:b0:40:f2:7c:35:e8:97:c7:24:e6:
aa:c7:4c:10:f0:23:96:8c:80:2e:f3:a2:c2:34:aa:
3e:09:41:53:05:a9:13:d0:60:ea:5e:64:71:39:63:
b3:75:56:2a:60:97:48:61:af:01:39:79:57:b7:29:
b5:e2:d0:07:a2:d3:8e:3f:78:69:80:b8:8b:ae:71:
a8:25:86:6b:cd:60:76:7f:fb:8c:e7:3d:1e:62:9b:
20:ad:db:61:49:a7:6d:82:fe:3b:d0:07:3b:c7:1e:
4c:7d:ef:e7:79:61:11:15:c0:f6:8f:b4:d5:96:b8:
9c:29:12:61:10:26:78:fc:32:26:3a:99:62:79:4e:
e5:20:56:94:c0:4f:35:34:5b:0a:79:2b:b1:0c:40:
d7:cd:e2:d6:31:50:9e:ab:9d:e6:79:35:aa:a0:5b:
a7:b5:a9:46:9e:81:f6:15:ae:8e:7c:fa:38:32:7a:
e5:e2:9d:3e:64:8f:1f:52:b9:b3:f7:c4:f8:e3:cf:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:24:95:DD:9E:9B:96:C8:52:75:48:03:D8:B4:BD:74:39:DC:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE158FBACDD511EF98C61283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:bd:50:11:26:df:d1:1c:69:9d:82:19:bc:30:82:e8:dd:37:
6e:7b:ae:dd:3d:51:ca:98:80:a9:16:f0:52:30:ce:6c:fa:1b:
ab:04:6c:4f:6a:a5:ce:d0:5f:b8:97:3e:a3:96:50:be:28:1a:
8d:80:50:a7:15:92:f1:d7:d1:25:f5:2a:4a:0f:00:ef:1a:2c:
15:de:97:a0:67:e0:3f:40:99:e4:82:3f:cf:01:3b:c0:85:e4:
3a:5b:11:fc:2d:5c:90:e0:26:9e:3b:4b:30:11:0c:84:5e:09:
4b:a3:9b:08:30:82:4c:9a:c1:47:e1:83:99:9c:59:d3:4b:c5:
ea:00:23:72:ab:94:d6:04:6f:a3:ae:16:8f:43:c4:41:72:a3:
ad:cc:d0:57:a0:be:3c:b3:3b:7f:12:d5:a2:47:6d:fd:a9:5d:
21:31:74:19:82:75:71:9b:63:e8:5b:ea:48:e5:76:33:d7:26:
61:11:3a:1d:0c:f1:ee:3d:96:e1:bd:88:15:78:64:6a:d9:26:
ef:30:4f:ff:3a:8f:a8:fb:5f:21:15:15:f9:12:ba:0a:39:54:
d9:f0:9c:3b:27:39:a9:47:85:49:09:51:ce:8e:32:30:a0:6a:
b3:d0:4e:44:82:68:97:f7:ff:44:43:61:1c:80:a6:5e:60:ee:
e5:76:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:17 2025 by rpki-client