Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B24262C26111EF9885A8A7762E951A.roa
File: F7B24262C26111EF9885A8A7762E951A.roa (raw, json)
Hash identifier: u2cNylhchSZ+c6cT+akrXO1K00TKFfiXVy5KtpUpHg0=
Subject key identifier: A0:B4:93:EB:5A:51:F9:3A:97:7B:77:38:9C:2A:C2:E3:06:20:7F:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B24262C26111EF9885A8A7762E951A.roa
Signing time: Wed 25 Dec 2024 01:45:50 +0000
ROA not before: Wed 25 Dec 2024 01:45:46 +0000
ROA not after: Wed 10 Dec 2025 01:45:46 +0000
asID: 984
IP address blocks: 154.199.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74684 (0x123bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:45:46 2024 GMT
Not After : Dec 10 01:45:46 2025 GMT
Subject: CN=676b63ce-d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:91:86:77:96:c9:56:d8:33:d3:19:e4:16:
c1:31:07:81:e2:19:ed:d9:bc:63:8b:db:d8:5f:e0:
34:53:11:67:a1:a1:12:1a:73:da:7e:94:37:cf:bf:
31:83:c4:97:1b:e9:7d:7c:ae:5f:59:91:ba:d2:29:
78:4e:cb:9a:d9:96:ad:10:3f:12:09:5f:96:4b:03:
85:f3:0b:28:b6:50:4c:95:1b:98:27:a7:97:50:46:
b0:a0:be:69:62:df:92:03:f0:b7:ed:a8:91:81:62:
32:4d:05:e1:2b:b4:65:a5:30:20:4a:01:eb:31:d9:
a0:0d:cf:80:5b:49:99:1f:bf:f2:31:d2:4b:22:5e:
b6:d1:54:3d:d4:22:7d:1c:f8:b0:eb:be:80:b4:d4:
91:a5:43:ad:82:37:78:ac:f0:d9:9d:d8:3c:f4:ac:
9f:86:5d:08:f6:61:54:71:e6:3d:9c:22:65:b9:2b:
52:f2:12:d8:26:ef:ae:b7:fe:29:dc:fd:f5:d7:b2:
98:6f:10:17:48:ce:a8:9e:c5:5e:cd:ff:39:3b:1e:
50:da:23:98:db:7b:51:67:94:cc:8d:b1:06:f7:3d:
9c:2b:0e:7b:14:b5:00:27:94:98:57:de:05:3c:f3:
35:4b:0c:0b:13:9c:86:30:da:b5:80:14:ff:39:d9:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:93:EB:5A:51:F9:3A:97:7B:77:38:9C:2A:C2:E3:06:20:7F:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B24262C26111EF9885A8A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a9:d3:96:2a:36:e7:96:76:0e:64:56:e4:68:b5:50:51:7b:
e0:31:77:ad:8c:6e:6f:85:2e:a2:3b:8a:93:80:51:5d:43:8a:
98:3a:df:c6:9e:d3:5d:6b:67:bd:76:5d:80:8c:21:6c:04:70:
f1:8f:46:cc:82:c6:f4:57:47:77:a1:ce:90:74:e9:55:c7:1e:
dc:b6:41:e5:cc:b9:aa:65:0b:9a:d0:1b:cb:00:b3:1b:fc:2e:
ec:e2:c5:f7:7f:3d:15:b7:a0:66:3f:0b:09:b3:5e:a8:42:0a:
30:d9:89:58:e8:92:89:9b:1c:1c:b2:b2:bc:27:54:fa:15:b3:
7e:24:a0:39:da:be:39:79:99:60:06:d9:8e:ea:36:64:6e:43:
88:55:ef:64:35:a7:e3:be:08:3e:71:c0:94:f4:02:ff:bf:88:
02:69:f4:69:95:89:20:05:5d:ec:c4:11:8d:d3:f0:41:e3:73:
a5:e2:bb:df:e2:9d:70:58:c6:8c:99:9b:72:f2:d6:45:2b:cb:
e8:de:b9:25:60:43:8c:80:96:c2:05:87:bd:99:5f:16:ee:64:
c3:b7:f2:bd:12:25:78:a2:46:95:f1:ca:9e:9a:c1:41:3e:83:
b0:30:da:b0:4c:21:71:40:f8:3f:ad:a7:de:0f:2a:79:e7:c4:
43:bf:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:16 2025 by rpki-client