Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF01F2A8C54911EFA27308A2762E951A.roa
File: EF01F2A8C54911EFA27308A2762E951A.roa (raw, json)
Hash identifier: JPajFlFMuHON/HbuoOELJRFU1jrNnOXtUKuBRUEO3/c=
Subject key identifier: A0:B4:DD:9E:85:AC:31:64:04:A1:38:20:28:E6:6E:AC:52:32:E2:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF01F2A8C54911EFA27308A2762E951A.roa
Signing time: Sat 28 Dec 2024 18:31:20 +0000
ROA not before: Sat 28 Dec 2024 18:31:17 +0000
ROA not after: Sun 12 Dec 2027 18:31:17 +0000
asID: 17561
IP address blocks: 154.209.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77007 (0x12ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:31:17 2024 GMT
Not After : Dec 12 18:31:17 2027 GMT
Subject: CN=677043f8-8a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:ae:74:ad:67:66:5c:1a:51:c1:f4:12:80:
ef:0f:c0:2b:dd:25:ee:9d:2e:74:14:01:59:bc:60:
43:35:f9:61:1e:1d:b0:8e:2c:1c:99:ab:50:a0:fa:
0e:67:5a:17:f0:7c:31:9e:38:1f:e0:1d:b6:59:6b:
40:e7:27:e1:9e:b7:c3:73:a5:f0:64:13:20:0a:0f:
ca:78:e1:29:34:8d:2e:66:f4:dc:a1:7c:27:ac:4f:
6b:a3:1b:b3:11:84:03:1a:cc:1d:9c:62:f7:9f:19:
b4:04:71:86:f7:e4:14:4e:4f:5d:f0:c4:84:45:57:
94:04:5d:ac:12:a3:41:f9:4e:27:41:c0:9e:46:fb:
ee:a6:11:68:8c:55:af:d6:ad:12:fa:e4:82:be:e5:
b2:d0:4e:46:06:44:81:2e:fb:76:ad:1c:57:30:84:
4f:68:b4:78:dd:66:ba:e7:e8:ff:ac:c6:b8:cc:a7:
1b:16:fb:3a:4f:ca:be:16:fb:6a:64:f2:8a:3b:78:
bf:8d:c2:b3:93:6d:7e:61:be:30:3c:31:7d:21:0e:
c9:9c:f7:ec:c5:ae:42:b8:7e:f1:a4:12:0a:6e:a5:
a8:25:34:57:e6:1e:71:e4:b9:da:9e:ac:88:fd:b8:
72:89:6a:94:7d:c4:07:49:a4:3f:78:71:bf:9d:20:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:DD:9E:85:AC:31:64:04:A1:38:20:28:E6:6E:AC:52:32:E2:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF01F2A8C54911EFA27308A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:2a:cd:5c:48:30:89:3d:d1:d0:6a:b3:4a:4d:5a:7f:6e:
18:dc:3a:40:cb:a5:fd:bf:94:71:e9:3c:68:ac:f5:87:ca:eb:
92:2f:e8:80:3e:00:48:96:dd:a2:a1:a0:1c:26:49:43:49:7d:
10:c1:f7:ed:e7:99:80:f5:a6:b7:da:08:0f:63:e7:ee:0b:bc:
fc:5f:95:19:8b:2d:96:d2:eb:0e:6c:5d:5d:7c:81:7a:18:4f:
0f:eb:da:40:ef:44:f9:00:63:1a:4b:de:1f:1f:e3:76:66:13:
6d:e3:59:04:b9:65:ae:26:1e:ed:b9:11:51:a0:52:b8:17:35:
bf:fb:32:f0:e3:b8:a6:a0:85:bf:fd:e3:d7:dc:09:d3:2a:a3:
a8:b7:55:60:d7:3a:63:68:4e:c8:d7:1d:9e:da:68:bd:f4:72:
26:8b:33:6b:6f:b3:14:d1:ed:44:3d:16:45:36:5a:b5:44:5e:
06:df:02:db:3d:15:dd:96:45:ac:4d:16:14:00:38:03:43:0b:
a5:e3:fd:f7:06:32:c1:8e:51:0f:cc:4d:74:79:4c:1a:f2:83:
23:48:74:22:35:ca:a8:c9:42:a3:ac:ab:1f:d7:55:81:12:b5:
cc:da:81:4d:58:27:51:d6:bd:90:fe:4a:d3:c8:39:0b:89:5e:
96:d1:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:09 2025 by rpki-client