Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFA39812C26311EFA4376FB7762E951A.roa
File: EFA39812C26311EFA4376FB7762E951A.roa (raw, json)
Hash identifier: rLt9ksrvZlLu5HCnjayubTPnsTYgYrKtBbZZCKywNUY=
Subject key identifier: 3C:9F:5A:1D:75:52:C3:E3:DA:91:F4:E7:91:43:BC:3A:CF:91:73:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFA39812C26311EFA4376FB7762E951A.roa
Signing time: Wed 25 Dec 2024 01:59:55 +0000
ROA not before: Wed 25 Dec 2024 01:59:51 +0000
ROA not after: Wed 10 Dec 2025 01:59:51 +0000
asID: 984
IP address blocks: 154.199.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74706 (0x123d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:59:51 2024 GMT
Not After : Dec 10 01:59:51 2025 GMT
Subject: CN=676b671b-b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:56:b6:df:e4:a7:35:08:4e:e0:7d:1f:a6:
1a:a6:08:05:5c:d7:a6:e5:2c:62:d2:e0:6f:5b:e6:
1a:49:28:3c:14:81:63:79:4f:71:09:03:7b:4b:86:
46:95:ca:ba:81:3d:52:9e:3c:e6:f9:bc:bb:8f:36:
3e:d5:e8:64:3e:8a:bf:9d:df:08:0b:27:ea:3a:80:
aa:8c:b3:26:e9:71:69:17:a0:60:76:88:86:e2:d6:
2f:0c:97:55:07:50:56:24:9f:0d:1a:c3:15:06:71:
69:7d:6c:eb:48:d9:ac:39:4b:88:39:ea:e3:0a:4c:
09:2f:60:d8:7a:16:97:f9:c3:02:95:39:f8:92:9e:
52:44:ea:df:d4:50:9b:64:80:9c:d2:09:1e:29:3b:
c5:85:d3:bc:a2:70:d1:ec:aa:1e:41:21:5e:0d:e2:
5c:11:b0:81:f7:70:a7:f6:7e:b8:98:42:6b:3b:9d:
13:78:5e:27:d6:5b:04:ef:d7:33:11:61:26:9b:a9:
87:50:64:1f:71:82:03:0a:1c:10:8d:b6:3a:16:fb:
cb:f1:b7:a4:bf:bd:09:40:59:ae:17:1e:1a:5c:47:
14:71:e9:16:70:94:a4:b2:6b:88:3a:5e:fb:9b:89:
92:29:1f:b0:a4:88:df:d9:f2:a8:7d:f5:eb:3a:14:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:5A:1D:75:52:C3:E3:DA:91:F4:E7:91:43:BC:3A:CF:91:73:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFA39812C26311EFA4376FB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.118.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dd:13:0a:46:4d:5d:3c:45:5f:dd:13:c8:12:ec:d1:0a:5a:
38:f1:39:45:de:d9:2d:a6:11:33:0b:6a:4e:cd:4b:f8:16:f8:
26:ea:ee:fe:c5:8e:08:7c:2e:bc:12:c2:36:b0:5e:1b:9b:b8:
8e:60:64:d5:6d:30:c9:5e:c6:97:5b:14:43:50:51:04:90:55:
83:0b:48:ba:28:36:b2:87:43:3c:46:ca:63:89:d8:66:f9:02:
41:58:71:de:53:a2:c2:b7:90:e1:00:4f:8a:85:63:81:28:45:
ef:24:9d:a0:f9:40:8b:8a:bc:f8:87:53:f9:48:08:56:e9:10:
c7:b4:5d:0a:49:e7:d3:d0:d5:6b:2f:31:43:f9:30:dd:33:6e:
a4:9a:ac:ff:35:fb:5d:ea:ed:46:ab:d6:ac:f2:c6:ea:3c:bd:
56:f3:08:a0:26:7c:15:e6:ae:3f:a3:8c:94:5f:0c:45:d9:16:
7e:4c:0b:4f:22:e1:ca:dd:09:4a:66:c1:ea:f9:df:4b:bb:88:
b6:65:8b:81:c6:8e:40:6e:da:f8:29:ef:0f:d5:fa:c7:27:ce:
39:c6:43:99:73:1a:2d:e3:33:f6:f6:18:79:30:53:fa:1e:9f:
8f:37:4d:8b:0b:68:75:02:4a:d7:e1:83:21:d0:d5:7c:d4:43:
7d:32:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:37 2025 by rpki-client