Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1BBC418AD5E11EF8E0CDD50762E951A.roa
File: F1BBC418AD5E11EF8E0CDD50762E951A.roa (raw, json)
Hash identifier: mwJ02DnYt8hWYox2p1vdl0jFro5ENAwoiu1DzDTUU/Q=
Subject key identifier: F8:0A:CB:D7:2F:F2:9E:81:E1:CA:85:E0:50:D2:A2:5C:0F:1A:0D:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1BBC418AD5E11EF8E0CDD50762E951A.roa
Signing time: Thu 28 Nov 2024 08:01:17 +0000
ROA not before: Thu 28 Nov 2024 08:01:13 +0000
ROA not after: Wed 03 Dec 2025 08:01:13 +0000
asID: 151970
IP address blocks: 154.197.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70909 (0x114fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 28 08:01:13 2024 GMT
Not After : Dec 3 08:01:13 2025 GMT
Subject: CN=6748234c-8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:db:c7:a3:80:3e:c7:1e:d6:73:b7:68:d2:
db:37:45:59:ba:1e:79:0c:9c:b2:0f:65:a6:3a:8b:
3a:a3:6e:80:ff:81:da:7f:95:4f:80:1d:11:de:0b:
7a:0f:06:05:8c:64:14:c6:f5:1f:f9:76:1d:7b:f0:
0b:7e:de:56:40:54:0d:8e:a1:74:0c:5c:67:32:63:
34:9f:45:dd:54:37:eb:80:e6:51:4c:9c:c5:45:f2:
b2:d3:14:02:14:f8:ba:02:7c:50:2c:34:c7:67:fc:
08:a1:88:45:0e:e5:7f:38:51:8d:93:83:bd:c0:e3:
d6:28:30:12:d7:00:18:a0:13:b5:41:10:ce:fe:cb:
ad:1b:6e:6b:dc:fb:76:31:ed:e8:62:7a:c3:94:2d:
c6:fd:ae:99:a1:6a:9b:d2:82:c7:f8:89:c0:a2:d5:
be:5d:fd:a6:62:ed:6f:dc:cd:29:e6:6c:19:16:f1:
75:3c:1f:77:c6:83:78:c9:8e:bd:e8:09:ff:0d:ae:
2a:83:82:66:84:aa:91:ce:fd:e4:81:32:94:29:d8:
b4:62:04:36:aa:81:91:2b:dd:3f:1f:af:f0:7d:b9:
11:6a:b9:30:ce:f1:ec:4c:40:88:70:84:d0:5c:b1:
29:40:31:39:3c:20:6f:f5:11:4c:97:31:0a:b0:d1:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:CB:D7:2F:F2:9E:81:E1:CA:85:E0:50:D2:A2:5C:0F:1A:0D:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1BBC418AD5E11EF8E0CDD50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f5:1a:b4:e5:76:d5:e7:65:8a:93:60:92:75:7b:39:0c:9a:
96:86:aa:21:56:83:6e:d4:0e:58:8a:66:60:2a:fd:5e:4c:86:
2b:fc:1d:3e:b2:74:16:3c:db:8a:26:22:fd:86:44:69:ad:d7:
b6:81:c7:d5:ae:81:75:64:40:e2:52:01:b2:bb:4d:4d:bc:c0:
bd:70:d1:03:13:12:65:d4:b8:1b:12:6e:9f:ec:1c:d6:3b:ee:
71:7f:e8:c3:44:1c:46:8a:bb:b8:e2:eb:f0:aa:9f:1f:90:e4:
58:8d:62:d9:17:fa:7d:40:f2:c1:57:66:d2:76:fc:00:fe:f5:
47:97:c2:64:32:13:32:61:c2:18:fc:fe:d2:aa:66:08:5e:03:
4d:2e:18:c6:aa:1b:d2:ed:3a:87:00:a4:de:16:8c:89:78:d3:
10:06:ff:2e:09:ef:2d:82:52:10:6f:2a:a8:fa:0e:6b:9d:ae:
ba:18:2b:98:1a:86:73:e4:2d:50:68:05:fb:47:09:54:78:46:
e6:37:e1:34:e6:00:1f:5b:dc:c4:3c:e6:c0:83:84:54:e6:5b:
c6:9c:df:54:fb:28:59:02:96:2c:b4:a2:b8:53:1e:84:fb:8c:
17:fa:74:2c:c1:5f:e8:23:58:db:fb:95:16:18:a9:bf:f0:45:
00:ec:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:37 2025 by rpki-client