Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF098108C1B111EF915CA647762E951A.roa
File: EF098108C1B111EF915CA647762E951A.roa (raw, json)
Hash identifier: QxoU9MMwpt+0r2fJCxrHsAfXYEgmRKgO8CTuKSkl+94=
Subject key identifier: A9:EF:30:E6:E7:0D:D7:67:04:BE:11:64:42:1D:12:CE:59:ED:72:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01217F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF098108C1B111EF915CA647762E951A.roa
Signing time: Tue 24 Dec 2024 04:45:44 +0000
ROA not before: Tue 24 Dec 2024 04:45:40 +0000
ROA not after: Wed 10 Dec 2025 04:45:40 +0000
asID: 984
IP address blocks: 154.193.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74111 (0x1217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:45:40 2024 GMT
Not After : Dec 10 04:45:40 2025 GMT
Subject: CN=676a3c77-5d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0a:c4:16:45:8d:64:84:ad:3e:1c:07:b1:19:
a6:3d:77:af:ce:83:d9:e7:28:9f:ce:9e:68:2a:eb:
66:ab:fc:0b:da:40:95:c2:cd:80:ca:4a:72:89:9e:
d1:6b:44:8f:3a:65:26:13:80:fb:58:17:f0:e2:fc:
46:c0:f1:d7:83:5e:a1:80:53:58:20:17:7b:73:b9:
33:54:27:a1:9e:b6:c6:dc:82:c7:65:12:9c:ad:d5:
71:34:bd:e7:47:09:75:a3:63:58:8d:1b:2b:91:ed:
5a:6e:23:c4:f7:d6:c0:6c:5e:12:9a:76:f1:e2:2f:
e8:32:71:af:44:00:96:bf:fc:84:7c:13:56:90:13:
95:9e:2d:1a:9b:b9:88:e3:7a:74:97:85:04:c9:0b:
b8:7c:65:46:ab:53:87:b0:4e:5d:8c:6c:3f:66:92:
1a:6a:2c:91:a2:35:83:d0:32:79:41:cb:f6:ef:92:
a3:b7:f1:d2:74:cb:9b:d8:36:9a:53:dd:d1:17:e8:
e1:d1:df:d4:18:16:6a:8f:3a:f9:fa:d5:15:c1:d9:
44:77:3b:ad:9b:8e:02:c1:17:ee:f2:5d:62:ea:33:
af:e0:1d:9c:a3:53:35:80:59:bc:39:ad:aa:dd:20:
d3:6c:31:70:56:28:96:51:7c:63:95:b2:39:0f:d3:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:30:E6:E7:0D:D7:67:04:BE:11:64:42:1D:12:CE:59:ED:72:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF098108C1B111EF915CA647762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:77:fd:71:8a:45:46:78:c6:4e:78:fe:9b:8f:89:80:18:6d:
fe:1f:3d:86:b3:cc:69:a9:4f:46:1f:dc:9f:bc:92:b0:7b:7a:
87:b3:53:50:35:a3:67:1f:d9:ce:cf:d7:b7:63:b0:25:49:ba:
61:89:7f:04:0f:d2:ef:ea:e5:68:46:e4:3f:81:ab:25:99:34:
01:6b:98:c2:32:4d:b4:23:13:e2:f6:2e:74:3c:69:c3:a5:83:
c6:91:a4:fd:fc:8c:9a:57:23:1e:57:28:a7:75:5d:8d:b5:07:
49:9f:30:cc:51:e9:80:b9:23:96:91:4a:bd:f2:c7:47:5f:75:
1a:c2:4e:9a:f9:42:98:44:59:47:35:e4:47:d3:6f:57:0d:04:
af:81:70:68:4a:94:a7:6c:91:52:41:15:12:01:e3:bd:74:53:
7f:fe:8a:94:af:b4:5a:74:c5:a2:ed:41:5d:05:6b:07:f3:37:
ec:cf:bb:8d:99:0b:8d:e5:65:28:28:15:a9:67:da:d9:07:e9:
e2:08:f7:8c:0c:68:95:e2:e7:8d:85:c7:34:75:46:e4:58:06:
b9:45:88:f4:c2:02:26:0d:8b:6d:c1:7b:48:c6:39:55:74:33:
a3:8e:28:28:cc:d9:6d:8f:50:57:20:17:66:81:95:d0:c8:f2:
ff:31:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:09:44 2025 by rpki-client