Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0BB1F48C27011EFA4F5C493762E951A.roa
File: E0BB1F48C27011EFA4F5C493762E951A.roa (raw, json)
Hash identifier: uq87MUg0HM0K0dACxQEdyfs9pegtzLqDcQA6Z5KIkxE=
Subject key identifier: 3B:06:88:FA:EA:66:3B:E1:58:D8:BF:0B:D0:45:21:94:1D:2B:E2:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012462
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0BB1F48C27011EFA4F5C493762E951A.roa
Signing time: Wed 25 Dec 2024 03:32:33 +0000
ROA not before: Wed 25 Dec 2024 03:32:30 +0000
ROA not after: Wed 10 Dec 2025 03:32:30 +0000
asID: 984
IP address blocks: 154.211.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74850 (0x12462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:32:30 2024 GMT
Not After : Dec 10 03:32:30 2025 GMT
Subject: CN=676b7cd1-4747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:e8:fc:c6:70:dc:df:c1:c4:4a:93:f0:74:
d9:1b:cc:20:7e:77:9e:95:ec:47:b3:72:e0:8b:d1:
42:d4:94:d7:36:22:69:19:cd:7b:d4:ed:da:1c:b9:
6d:75:5c:a0:14:89:2e:0d:6a:09:70:83:1f:7e:63:
d7:b8:ae:c7:c7:0e:25:6d:ea:87:19:eb:d4:73:27:
33:ec:85:eb:ad:23:a2:50:8d:bf:c5:0e:33:3f:b3:
d2:a7:3c:cf:29:f1:97:d3:4f:b3:31:68:1d:1a:b4:
47:35:b4:ff:fd:a6:41:ab:e9:58:ec:7e:13:89:0b:
37:b8:0c:00:fa:d2:82:e5:04:25:f8:84:47:39:ea:
2e:96:79:9e:7c:6b:51:2b:bb:b9:52:ee:e7:83:ac:
ef:d3:1d:0f:d6:0a:a0:2d:36:fa:fe:61:a3:f6:eb:
4c:92:7e:b1:3b:ff:11:74:51:86:e8:00:5a:36:46:
78:d1:97:75:a4:3a:5d:9c:2f:16:a8:dc:61:db:36:
80:80:ae:2b:8b:bb:06:39:26:51:fa:20:32:72:ce:
9f:4c:ec:29:a4:98:1a:37:c5:2a:e2:e0:48:a2:dc:
ce:45:b8:93:db:7c:e0:e3:27:1c:ee:fe:d3:18:2f:
53:47:17:bb:8f:82:20:8c:de:3e:f9:61:ec:10:33:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:88:FA:EA:66:3B:E1:58:D8:BF:0B:D0:45:21:94:1D:2B:E2:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0BB1F48C27011EFA4F5C493762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:60:98:ad:1b:70:be:db:b7:59:71:8a:af:1d:35:44:28:df:
9c:71:27:fb:25:ca:e9:10:7e:b7:b3:4e:7c:14:7d:ae:07:e2:
e9:6e:11:ea:c4:e6:c7:8d:c7:58:27:b7:e3:5a:6d:48:68:72:
74:98:a0:38:c4:9d:bd:a6:82:3a:8b:da:12:df:8f:cf:4a:46:
d0:75:ff:5b:c0:25:b3:35:a6:8b:de:3f:9e:77:9c:0f:53:47:
48:78:41:e9:14:c8:73:a5:d2:a6:e4:c8:9b:20:89:3d:7f:2f:
f1:5e:fe:33:9c:d0:60:0f:8a:0d:7d:c4:55:b1:48:a3:75:e1:
a2:d0:84:33:52:4b:6b:9c:f4:37:8e:ed:3a:2b:18:82:f4:69:
f8:18:cd:50:7e:b4:b2:81:c7:fe:56:83:a5:21:17:45:4b:6d:
5d:61:f6:62:b6:c9:57:aa:b3:d5:9c:a4:3e:e5:dc:ee:d2:1b:
9f:b8:5c:a3:af:58:7a:d7:31:f2:10:b5:a3:69:8d:df:a9:cb:
3b:50:f1:92:16:62:2c:c3:e0:66:b1:9f:03:79:fb:05:71:c7:
11:fb:b9:c7:66:bb:49:f3:35:51:6e:ce:47:5b:50:2a:39:61:
fd:61:9f:d9:7d:bc:15:57:bf:aa:f7:1c:6a:67:65:bc:58:d4:
6f:e0:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:39 2025 by rpki-client