Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF7BC06C41011EFBC81266E762E951A.roa
File: DEF7BC06C41011EFBC81266E762E951A.roa (raw, json)
Hash identifier: YzHN7Nwv/83fA4Kc6OeTWfvik/C063y7FgONobQ4VHo=
Subject key identifier: A2:3E:32:56:9C:49:D3:85:F2:82:4B:E0:F5:98:07:9D:D8:A2:11:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01294F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF7BC06C41011EFBC81266E762E951A.roa
Signing time: Fri 27 Dec 2024 05:10:21 +0000
ROA not before: Fri 27 Dec 2024 05:10:17 +0000
ROA not after: Fri 12 Dec 2025 05:10:17 +0000
asID: 984
IP address blocks: 154.196.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76111 (0x1294f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:10:17 2024 GMT
Not After : Dec 12 05:10:17 2025 GMT
Subject: CN=676e36bd-f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:d0:7b:7d:33:e3:fd:97:63:2a:4a:b0:35:
d5:0c:47:01:df:6d:9f:8b:fe:99:09:26:4c:fc:e9:
ea:ae:c0:3c:03:ef:34:71:11:63:c9:6a:92:f8:38:
a7:01:c5:8e:0c:55:77:25:b5:54:70:e6:c7:c5:39:
56:c0:70:8b:02:ca:ae:29:8d:b4:d7:69:0e:4c:62:
47:ea:ce:6b:58:4d:fe:ab:a9:c2:4b:6b:89:fd:96:
ad:90:6d:ca:89:30:ff:81:1a:23:91:ae:aa:c0:88:
c4:8f:dd:cf:6d:02:5d:51:fd:d7:31:45:ae:f0:0d:
c5:94:4d:a6:fc:1d:5d:6b:d5:9d:f0:be:31:51:3c:
0e:ef:44:56:9c:0c:db:3c:20:8b:59:d7:77:97:6d:
3b:62:ac:9a:2f:36:2b:2a:9e:1b:fa:f2:34:46:d9:
b0:de:f1:83:44:5a:65:28:59:ad:bb:53:73:c2:25:
7d:b4:52:32:67:50:2a:f9:5f:6f:73:27:83:c0:eb:
60:1d:25:9e:37:04:28:f6:a0:49:58:54:eb:ca:8f:
02:eb:28:8c:f7:fa:4d:3b:45:03:95:fd:70:de:62:
dd:e9:e0:bc:32:ca:4e:9e:9a:c3:59:00:e7:91:53:
1b:7f:0e:55:04:0e:96:41:70:af:19:a7:24:c9:92:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:32:56:9C:49:D3:85:F2:82:4B:E0:F5:98:07:9D:D8:A2:11:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF7BC06C41011EFBC81266E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.241.0/24
Signature Algorithm: sha256WithRSAEncryption
42:68:2e:0b:db:85:b3:4f:24:be:7f:34:d0:1f:d6:3a:a0:0d:
79:cf:5f:bd:8c:18:00:a1:2c:f2:31:6d:c6:4c:13:5c:dd:a8:
d5:a9:3b:e7:60:d6:46:47:f7:f6:c0:9b:40:bb:47:a8:02:29:
2e:b0:60:0e:79:a6:fb:40:ef:c1:8b:8d:bd:8b:7b:59:7c:49:
78:cf:cc:65:fb:a7:38:a2:af:18:25:3b:8f:86:2b:c2:cb:11:
d0:82:24:b9:d7:ef:e5:79:51:73:b8:4e:9e:a9:3f:f6:7b:fa:
ce:ef:cd:ee:5e:bd:da:ee:b2:f6:06:bb:e1:55:c4:1a:8c:0f:
6a:7f:23:3b:9f:19:b4:d6:30:9e:35:d7:12:01:f7:6c:2e:05:
c9:08:5f:23:8a:1b:a9:42:5b:27:62:b4:c3:2d:3f:8a:ac:28:
63:d3:24:aa:bb:1c:9e:51:a7:f3:a0:ac:9b:df:1b:83:62:6a:
0e:5f:bc:03:ad:cc:46:30:6a:57:2d:dd:2e:72:20:5b:b9:48:
67:51:97:c6:ce:af:ea:a0:7b:59:f2:14:8a:86:bb:56:c7:a1:
74:4d:c4:97:f1:c8:0a:67:24:2d:27:a3:d4:fb:73:e7:c7:92:
65:58:3e:29:ba:7b:c9:94:c8:0b:f6:0e:68:34:be:e4:88:6f:
04:d9:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:07 2025 by rpki-client