Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED792984D98E11EFA057B8B9762E951A.roa
File: ED792984D98E11EFA057B8B9762E951A.roa (raw, json)
Hash identifier: bdr+yExZH9+S4kamD7Gkn1xATuyP2HDAGhSIPBVELbU=
Subject key identifier: 6A:DC:1B:E5:9A:E4:23:DB:DC:D5:C4:16:85:90:46:78:39:91:5B:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01427E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED792984D98E11EFA057B8B9762E951A.roa
Signing time: Thu 23 Jan 2025 13:35:37 +0000
ROA not before: Thu 23 Jan 2025 13:35:33 +0000
ROA not after: Tue 13 May 2025 13:35:33 +0000
asID: 138915
IP address blocks: 154.205.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82558 (0x1427e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:35:33 2025 GMT
Not After : May 13 13:35:33 2025 GMT
Subject: CN=679245a8-19b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3a:3d:9b:d4:e8:be:10:ac:c8:19:9b:a9:31:
5d:f7:3a:cd:75:74:62:80:cd:25:51:29:42:34:b5:
f2:7f:77:7d:01:d6:b1:85:5a:16:bb:71:26:b8:43:
99:df:92:a9:13:16:66:88:2e:3e:15:4e:2d:9d:b6:
76:10:af:36:25:8b:b2:6f:27:c1:dd:fd:d9:b2:77:
53:c7:8a:2d:a2:b0:72:af:3f:7a:20:b4:a7:95:bb:
fd:10:67:8b:d7:f9:70:92:b7:22:07:ed:11:3d:5d:
f0:3f:5d:48:17:54:d4:b9:f1:5c:9c:e8:0f:f7:1b:
32:c5:6d:36:ef:0f:25:97:11:4f:94:cb:a7:2b:4d:
a0:83:aa:8a:dd:4e:a6:20:a6:68:5b:14:81:37:2f:
39:46:cf:63:13:57:b8:5e:44:10:d0:2f:66:c5:f6:
56:7b:a9:c6:d5:8d:32:c8:9e:b4:f0:ce:5c:de:68:
a9:11:cd:98:0d:6a:fe:fe:d4:80:87:06:58:da:f7:
7d:90:35:3a:31:1b:38:fc:5a:85:1c:4b:09:14:c7:
8e:46:ac:6a:05:e4:48:9c:44:02:66:3d:7d:95:65:
8d:01:7b:c1:25:47:6c:16:6d:9d:b2:2c:a5:ca:26:
71:bd:01:f6:a6:75:95:fb:45:ef:95:58:91:ff:ee:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DC:1B:E5:9A:E4:23:DB:DC:D5:C4:16:85:90:46:78:39:91:5B:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED792984D98E11EFA057B8B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.155.0/24
Signature Algorithm: sha256WithRSAEncryption
77:da:78:f5:d7:84:1a:7f:2d:12:40:9a:b6:61:74:7f:14:ba:
1e:b1:a1:d7:96:ae:76:68:72:74:0f:5b:68:68:ed:55:6d:59:
f1:cb:a9:e1:18:d8:95:a7:3d:ff:ec:2e:02:7b:40:51:87:a6:
db:cd:42:ac:f3:d6:d5:ab:f7:18:3f:d1:62:33:d1:ca:b0:db:
d7:1c:5b:7c:4a:f1:13:af:c9:d1:5b:98:97:76:58:22:c8:bb:
40:5d:90:bb:9b:8c:97:be:94:c3:ff:70:e0:0c:87:16:44:e0:
42:88:46:76:2e:e4:02:95:c9:a5:71:02:e7:90:5c:bb:1f:e9:
45:f9:bd:97:36:c3:76:95:2c:5d:eb:7e:7a:fe:c9:3a:f5:f9:
ca:93:dc:c6:c4:34:b5:4c:87:c3:dc:45:c2:bf:ff:29:3c:05:
17:81:46:d7:77:b9:8b:c4:71:94:0e:cc:db:7b:d7:a6:49:b7:
9a:9b:e8:07:08:24:8f:d0:c3:37:48:ac:22:3e:db:f0:52:20:
83:2b:c2:c3:23:0c:b6:0b:ca:8c:af:eb:2b:69:8a:10:d0:4b:
2e:29:f5:ff:ec:b8:16:24:6b:56:99:97:80:2e:fc:51:f0:0c:
ef:ba:5d:94:dd:e0:bf:b3:4d:ef:06:e3:4b:7c:7c:08:bf:0c:
cc:bd:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:23 2025 by rpki-client