Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B5C9ACC65211EFBCB6B8B8762E951A.roa
File: F6B5C9ACC65211EFBCB6B8B8762E951A.roa (raw, json)
Hash identifier: +YPZ/fDiqeihVnD5vSIzRQSp7gkoC9ELnoiEeO7tJzQ=
Subject key identifier: EA:81:5A:63:E0:80:D2:79:F2:DA:55:CE:0D:A5:D2:0D:AD:D3:1B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013056
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B5C9ACC65211EFBCB6B8B8762E951A.roa
Signing time: Mon 30 Dec 2024 02:08:30 +0000
ROA not before: Mon 30 Dec 2024 02:08:26 +0000
ROA not after: Fri 12 Dec 2025 02:08:26 +0000
asID: 984
IP address blocks: 154.218.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77910 (0x13056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 30 02:08:26 2024 GMT
Not After : Dec 12 02:08:26 2025 GMT
Subject: CN=6772009e-9f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:0a:57:9e:30:da:f9:55:a1:41:ae:b1:ee:
65:05:cd:fe:54:0e:4e:ea:d8:2b:5f:a5:3e:f1:e7:
bc:e0:c9:d4:27:a4:00:d5:8f:31:b7:ca:77:30:a4:
e0:10:42:5b:c9:38:2e:80:aa:3f:77:d6:9c:84:7e:
a3:09:4b:c4:e6:c7:63:cf:65:ac:11:2a:ef:9e:90:
e0:b8:d8:fe:36:e1:de:66:23:0e:4a:94:86:88:e3:
9c:6d:77:08:17:55:e7:92:79:1a:0b:43:83:cd:ee:
b2:73:03:3a:95:02:10:75:76:4f:5f:24:93:70:62:
2e:9f:43:5e:61:0d:ed:f4:b3:9e:7a:56:c3:25:1b:
be:3c:e6:5a:ac:09:46:44:4a:71:94:60:7b:aa:f0:
74:3b:8b:61:93:b1:ac:c2:fa:68:bb:ec:df:85:4b:
5e:19:f9:1f:49:81:07:b5:ba:40:0d:91:e3:48:72:
bb:1f:fc:f9:6b:a1:e7:1c:ea:b7:93:bf:93:e1:47:
47:3b:39:a9:3f:1a:ae:3f:ec:68:75:fa:ac:67:92:
13:4f:12:6a:bb:72:59:a4:04:b9:b5:1a:b8:18:5c:
18:48:45:cf:77:d2:71:06:7f:6c:bc:3a:18:57:47:
0a:7f:64:49:ac:fb:1a:6a:0e:d4:2f:25:a3:12:4b:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:5A:63:E0:80:D2:79:F2:DA:55:CE:0D:A5:D2:0D:AD:D3:1B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B5C9ACC65211EFBCB6B8B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:5f:49:cd:e4:00:f4:95:4e:33:b9:d7:39:8e:ee:70:36:c8:
82:d4:31:e8:ac:7c:b0:c1:1c:dc:53:96:01:19:a8:3d:23:5c:
28:ac:ca:04:1f:ce:27:59:90:12:df:37:4c:95:8a:42:ac:d3:
13:6f:b6:d3:21:2f:e1:ce:d0:0f:d5:fd:49:d5:20:34:ee:31:
fe:c6:29:07:89:ec:72:be:e9:09:6b:53:91:ba:c3:e1:6a:69:
21:43:a0:cd:61:26:89:18:02:74:8f:0d:cb:90:d8:0a:3f:d8:
e8:42:b3:5f:6e:7a:59:02:bc:76:61:68:3d:4b:aa:91:8e:68:
55:e1:9a:be:7f:51:ce:1a:3f:19:40:26:51:11:a3:5f:b8:36:
69:a1:7f:67:d0:aa:51:1b:3c:da:e0:5d:4e:8d:1e:72:71:eb:
0b:e4:2a:da:13:b3:3b:5a:45:f0:38:0d:ec:03:a9:56:2c:10:
dc:4d:3b:c1:84:ba:31:e1:fe:37:db:a5:f8:24:60:79:ae:1a:
5f:27:e6:4b:ef:7f:a8:b7:a7:ab:59:11:54:1c:28:58:29:6b:
c3:bb:7e:c0:73:1a:d0:1a:d7:f0:18:d0:5c:b1:33:a6:f1:c0:
11:aa:c4:b3:85:53:6e:39:1e:7c:fc:b5:a8:e0:d8:0a:24:84:
01:86:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:45 2025 by rpki-client