Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27D5BF8C35411EF843B97B9762E951A.roa
File: F27D5BF8C35411EF843B97B9762E951A.roa (raw, json)
Hash identifier: Z1QdR2VHHlOO5BFH0JsLd+uuWdvBDMiG72eotukbSQI=
Subject key identifier: B9:8C:66:29:73:42:85:A8:FA:87:3F:99:AB:16:1F:2D:57:54:DB:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27D5BF8C35411EF843B97B9762E951A.roa
Signing time: Thu 26 Dec 2024 06:45:09 +0000
ROA not before: Thu 26 Dec 2024 06:45:05 +0000
ROA not after: Sun 12 Dec 2027 06:45:05 +0000
asID: 17561
IP address blocks: 154.88.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75219 (0x125d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:45:05 2024 GMT
Not After : Dec 12 06:45:05 2027 GMT
Subject: CN=676cfb74-e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:a5:a2:70:e8:ed:30:13:ff:45:26:bc:83:
f2:7f:b1:2f:7d:2e:1b:10:b8:35:f1:fb:19:27:8e:
97:4a:2f:e2:e8:46:2a:7c:a3:5a:ea:67:86:56:51:
c9:0a:1e:b5:ce:4d:9a:9b:10:f2:9d:3e:4b:af:65:
8c:c6:f2:6a:5b:80:2f:c8:88:22:eb:d9:6c:c8:47:
42:85:42:46:ba:f9:25:29:24:19:b7:cb:57:a8:b6:
07:22:12:41:29:7e:84:a5:7f:76:1c:d4:31:78:14:
ec:ed:9e:ee:59:1a:34:09:9f:23:b8:d0:18:29:f5:
cb:bb:70:89:a0:fa:ff:a7:d9:45:2b:27:20:fa:c3:
c1:61:a8:93:5c:4e:66:e7:81:81:c6:37:70:35:e8:
67:1a:48:99:17:bf:5a:75:00:d4:22:6e:f5:7d:db:
9d:98:23:4b:42:1b:bc:8a:4e:15:e1:46:0a:e8:4c:
bd:e8:f9:60:b9:b1:fc:22:a1:e5:f0:30:c6:51:58:
9f:53:6e:00:98:d8:be:3c:35:ff:ea:8a:08:77:76:
c1:03:d8:c3:ca:67:78:b1:d7:f1:25:46:ee:9e:dd:
6e:92:d4:d0:d6:42:24:98:f6:a5:35:d1:8d:03:34:
a7:a4:d9:1b:15:7d:a7:8f:75:44:8b:d5:bc:ed:fc:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:66:29:73:42:85:A8:FA:87:3F:99:AB:16:1F:2D:57:54:DB:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F27D5BF8C35411EF843B97B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.45.0/24
Signature Algorithm: sha256WithRSAEncryption
52:53:37:db:ab:79:9e:7e:11:1d:3f:de:4c:5e:c2:8c:3c:3f:
19:f3:d5:23:5b:86:cf:c8:8f:44:4f:58:e0:71:82:73:85:10:
1f:6e:54:e4:cf:55:cf:ed:83:53:0c:22:3c:49:33:a0:3e:18:
ed:3d:6e:a6:52:b1:97:71:0b:41:6a:7d:25:43:5c:50:24:e2:
70:67:28:15:67:34:37:e5:c4:e6:9e:0b:43:b7:ae:2e:3d:85:
8d:a3:6e:7c:ad:60:ae:e9:93:56:c0:01:bb:4c:80:bb:19:0c:
7d:bf:4b:08:db:98:6f:75:31:6e:11:e6:bb:24:38:57:74:cb:
38:35:cf:96:b1:68:71:da:bd:11:29:d1:5c:7f:da:83:d3:04:
4a:20:bb:71:d4:3e:9b:21:b5:de:d8:42:76:8e:bf:96:f8:9a:
37:00:0a:b8:42:f0:ee:45:4b:9f:db:4a:bf:c8:61:b5:b6:d5:
1a:a3:09:f0:ab:7b:cf:37:62:ea:a9:01:8d:f1:e5:a3:85:f2:
79:b3:45:24:89:af:c8:5c:e5:2a:ec:20:23:da:11:32:f2:2d:
29:5f:3f:f6:e2:ac:84:b5:e5:64:e7:eb:8f:9d:3a:26:7b:35:
bc:d9:13:4c:2e:bb:a4:1e:73:d2:0a:1f:2e:b7:b8:ab:34:ed:
d3:55:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:03 2025 by rpki-client