Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5BA850C5E411EF9C7E027C762E951A.roa
File: EC5BA850C5E411EF9C7E027C762E951A.roa (raw, json)
Hash identifier: GGIrpdRhCm6A5jFurVWqAlW2vrm0M4XTG/Y5qBfW8As=
Subject key identifier: 2C:DD:64:B3:0C:34:EE:41:52:B5:6D:7A:16:AC:44:E5:26:0F:59:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5BA850C5E411EF9C7E027C762E951A.roa
Signing time: Sun 29 Dec 2024 13:00:48 +0000
ROA not before: Sun 29 Dec 2024 13:00:44 +0000
ROA not after: Fri 12 Dec 2025 13:00:44 +0000
asID: 984
IP address blocks: 154.210.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 08:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77168 (0x12d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:00:44 2024 GMT
Not After : Dec 12 13:00:44 2025 GMT
Subject: CN=67714800-455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:52:09:1f:70:b0:87:e0:35:83:11:91:63:
54:db:e5:01:07:49:fe:8a:a3:5b:b8:e6:af:64:40:
0e:09:7b:b8:17:dd:5e:ea:f1:20:2d:f3:4f:f1:86:
17:ce:57:8d:cf:e4:d1:d0:62:0d:8e:fb:cf:5a:9b:
18:ab:59:42:88:80:59:06:24:17:04:6f:f8:54:6a:
39:46:35:a0:dc:8b:d4:a8:96:2e:fc:ad:91:cc:12:
4f:60:47:9a:84:33:dc:a1:a0:49:3a:30:35:47:69:
52:78:55:f5:61:86:ab:87:aa:72:03:10:e0:3a:54:
82:2e:e1:4a:c0:9f:bd:19:4e:c4:e2:b4:e2:84:d7:
1b:a8:c6:21:5c:54:e0:b5:b7:d6:e2:71:f0:98:d6:
3d:be:ce:c6:74:c0:6c:fa:d4:03:75:fc:04:10:54:
77:93:06:21:64:5a:b0:14:0b:4e:3d:f9:da:a7:ca:
b4:50:e7:b2:78:23:d2:fa:a8:2e:24:2a:d2:82:6e:
6f:1e:6c:a3:5f:4a:19:b6:18:5e:6f:9f:c3:e9:d5:
dc:24:e2:16:4b:fe:44:a7:25:e9:f7:39:d5:db:a7:
d2:3b:00:a6:2b:fc:33:b9:39:cb:96:f8:63:4b:ce:
b3:2c:89:ac:cc:34:c2:28:94:f4:da:23:f8:be:b8:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:64:B3:0C:34:EE:41:52:B5:6D:7A:16:AC:44:E5:26:0F:59:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5BA850C5E411EF9C7E027C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.122.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f7:a9:ef:9f:3c:7b:1d:0e:25:ee:14:f6:91:9c:85:1c:f6:
c9:0d:bf:38:7a:f1:df:e6:5e:96:58:b0:f0:a9:78:24:d9:53:
ff:31:06:88:41:ac:ae:16:65:04:bc:eb:b2:f1:3d:0e:7a:20:
2c:fd:37:74:f5:4e:79:bc:a3:fd:b2:d4:ff:55:1b:8b:9f:33:
02:a4:0c:77:68:f7:cf:5f:c1:5b:ef:a1:0f:44:fd:b7:ce:de:
e1:72:7d:10:84:d0:dc:f7:61:40:6b:0d:dd:dd:7e:a5:08:07:
69:46:b3:70:47:3d:dd:8d:57:91:dd:42:99:59:58:29:c4:86:
0e:ce:48:98:5d:fe:4a:bf:c5:05:d4:59:f5:db:43:42:b1:31:
09:e7:d7:e9:7f:06:07:b3:4e:4c:d4:51:70:2e:fe:5c:41:5c:
89:db:cd:d7:ef:ba:03:7f:f4:e8:a8:57:31:94:a8:aa:13:e7:
0e:71:7d:20:50:2a:f1:05:c1:6e:73:b9:fc:ac:d5:50:a9:8b:
5a:cc:77:45:07:cc:ea:c9:6b:31:aa:b0:fd:3c:54:e0:67:19:
c4:26:81:11:f6:ec:be:c6:d6:1a:c4:ed:b2:5c:b2:90:3e:6b:
67:75:6f:df:90:5f:d6:0e:a4:b8:f4:c8:1c:6d:df:9b:01:f9:
96:b1:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:57 2025 by rpki-client