Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2784426AB3411EF866CC2A8762E951A.roa
File: E2784426AB3411EF866CC2A8762E951A.roa (raw, json)
Hash identifier: DUsV6wM7L5Ro0v+M1M2taPVrzeQSfeBgfW6gWDrQKiE=
Subject key identifier: EC:AE:F0:6A:92:34:8D:C3:20:DE:EA:E9:DE:8B:47:DB:39:71:B7:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011352
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2784426AB3411EF866CC2A8762E951A.roa
Signing time: Mon 25 Nov 2024 13:55:10 +0000
ROA not before: Mon 25 Nov 2024 13:55:06 +0000
ROA not after: Wed 07 Jan 2026 13:55:06 +0000
asID: 139057
IP address blocks: 154.85.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70482 (0x11352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 13:55:06 2024 GMT
Not After : Jan 7 13:55:06 2026 GMT
Subject: CN=674481be-5fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:e5:1a:72:d7:d0:7b:86:9a:10:8b:9b:96:
e0:b1:e7:9b:f3:9f:c9:62:5b:46:fe:b5:27:7e:01:
57:e0:04:5b:fb:95:ff:ef:d9:63:75:1c:5e:93:13:
6c:63:08:c0:d9:64:27:27:b7:a9:3f:69:d5:19:8e:
7a:80:07:07:be:7a:f2:5b:bf:04:a9:56:32:f7:be:
71:74:08:b6:cf:e8:a4:84:05:75:96:f2:d8:ec:aa:
a0:05:70:a1:52:22:69:78:27:42:85:36:52:20:bf:
ab:38:08:6a:41:8d:80:82:31:20:c5:c1:be:03:03:
85:3b:ee:3d:51:6a:05:bc:33:3b:fc:c7:73:99:5b:
50:fe:e3:21:58:d8:8e:b6:7b:f0:b5:ec:35:e6:ba:
95:53:86:df:69:8e:0d:87:ca:e0:e6:34:1f:df:39:
7f:01:0f:45:58:77:59:30:de:37:bb:dc:b0:6b:44:
5d:da:d7:33:9f:ca:9f:fb:63:83:b0:94:de:63:84:
80:14:69:15:61:bc:de:ce:a6:ea:cd:d2:ef:34:16:
84:84:f9:e5:61:ea:f9:d3:33:74:d7:bb:eb:b1:d0:
50:46:0f:ce:7c:d6:5a:ef:a9:85:41:cd:7c:95:fb:
d0:10:c2:04:06:6a:bf:d2:32:54:ff:0d:f8:15:fc:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AE:F0:6A:92:34:8D:C3:20:DE:EA:E9:DE:8B:47:DB:39:71:B7:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2784426AB3411EF866CC2A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:57:a3:e3:6b:de:2e:bf:4a:83:5f:08:58:1f:a8:bd:bb:1c:
8b:7e:df:f3:3e:67:a4:8a:55:79:79:cf:20:b3:8e:92:67:99:
1a:ff:3e:d0:8a:c0:01:0f:d0:27:7b:a5:22:38:bb:6e:47:67:
f8:7b:56:be:b5:a4:ae:b4:02:f1:07:98:59:51:6e:a0:a0:71:
d9:6e:2e:52:16:2f:12:7b:75:20:33:be:b6:15:75:07:c4:b0:
69:d0:bd:c6:fc:bf:dd:91:d5:34:ca:71:86:9f:d2:50:22:5b:
0d:fc:bd:fb:2d:a7:c5:03:15:90:69:b1:87:e0:13:ed:05:b2:
62:2c:a1:49:c9:4d:f9:94:17:18:81:80:7b:dc:94:0b:83:13:
b8:5f:13:63:4b:54:fe:30:e1:ab:94:f8:9b:d6:49:f6:7b:de:
fc:64:55:7c:dc:66:8a:68:4a:ac:b1:2e:af:36:79:c5:7c:54:
2c:9e:d3:ac:59:87:36:57:eb:95:55:1c:e8:5c:f5:60:c5:53:
34:68:27:c9:6d:0a:3b:11:91:b1:06:5a:21:f7:5b:c0:16:84:
82:1d:c6:6a:9b:4d:36:8d:8f:36:2e:89:0e:75:d5:dd:09:1f:
5b:22:c5:3d:f0:ec:3e:57:94:59:46:6c:86:93:f1:7a:b9:52:
22:a7:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:54:44 2025 by rpki-client