Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B4E42AC1B411EF89BB5359762E951A.roa
File: F7B4E42AC1B411EF89BB5359762E951A.roa (raw, json)
Hash identifier: paJfO4b6I7w5SqU4Sq18gGRA6xMHsCUPVsC8Os5lxTc=
Subject key identifier: 85:7C:59:1D:BD:23:79:68:F4:D6:AA:95:D9:7C:41:83:60:E6:C1:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B4E42AC1B411EF89BB5359762E951A.roa
Signing time: Tue 24 Dec 2024 05:07:27 +0000
ROA not before: Tue 24 Dec 2024 05:07:23 +0000
ROA not after: Wed 10 Dec 2025 05:07:23 +0000
asID: 984
IP address blocks: 154.193.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74147 (0x121a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:07:23 2024 GMT
Not After : Dec 10 05:07:23 2025 GMT
Subject: CN=676a418e-c51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:10:7e:9a:88:11:08:11:49:ac:83:05:1b:
34:38:23:5e:fb:11:2b:2a:b3:bf:43:8d:40:d9:b0:
d2:b4:ef:64:48:b9:ad:28:c4:f6:e7:76:ac:55:43:
fb:bc:58:c9:58:69:0c:9c:1a:a4:61:d1:f1:df:cb:
f2:81:5d:96:e8:0b:3c:4f:26:e6:39:ea:ed:d9:86:
d9:83:0c:2b:86:5b:04:4c:4e:89:d3:42:b8:3b:c6:
88:04:1f:06:1e:49:04:72:d3:69:11:1c:27:7b:1d:
89:31:1d:f8:86:1b:d6:2a:18:75:dd:33:55:b9:03:
55:a1:20:df:cd:9b:72:59:18:11:0c:af:a2:14:58:
a3:87:33:83:69:dd:d5:aa:ee:20:74:24:40:fa:33:
fd:89:c3:6d:6f:87:c4:a0:14:83:fb:55:88:54:49:
3b:0a:54:b1:5c:e5:f9:b6:e8:cc:77:02:12:dd:90:
6f:e3:60:c7:47:b6:ed:ad:5c:ea:0e:39:78:79:c7:
ea:bc:11:7a:6d:58:cd:2b:95:7f:f3:0a:03:a5:39:
49:d3:04:ae:38:d8:1c:6e:63:8c:0b:b6:c9:fb:17:
a3:96:14:30:f1:d0:db:2d:dd:9e:f0:9c:a0:25:76:
ce:ab:87:23:7f:4b:7f:fc:d5:84:aa:24:e6:da:f2:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:59:1D:BD:23:79:68:F4:D6:AA:95:D9:7C:41:83:60:E6:C1:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B4E42AC1B411EF89BB5359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6e:5b:a5:5c:4c:49:60:dd:79:05:b4:a5:8d:74:8c:1c:1b:
6e:c2:d6:09:1e:84:d9:3c:01:42:ca:47:29:3d:dc:02:d7:b5:
5d:38:bf:48:f3:6e:e8:1e:c4:ea:f3:83:0e:91:3c:45:24:92:
f1:8b:ee:2e:4f:98:dc:6f:bf:18:ed:14:1a:b4:b9:bd:b8:1c:
a3:80:70:e2:ee:6a:1a:76:a6:6a:43:08:52:8d:be:16:5a:94:
ad:b5:24:45:ea:a3:6e:aa:5d:ec:6f:01:5e:54:12:8f:e8:9a:
c0:17:08:da:a5:cd:fd:b2:5b:44:7a:5b:fb:fc:32:a0:60:fc:
15:20:65:d2:6e:24:bd:5f:d6:5a:5a:df:ff:6d:48:de:6c:1d:
55:4e:98:c2:02:14:c3:1a:b7:d6:ac:0c:0b:e4:c0:a7:f5:eb:
61:ae:51:4d:3d:72:71:ef:0b:bc:d4:b8:86:a1:05:f6:03:e0:
f9:a4:9e:25:bd:40:66:0c:70:32:3a:22:ee:54:34:59:97:5d:
e1:4f:97:39:e9:79:af:64:a8:c4:59:69:a7:98:9b:05:5c:d1:
6e:b4:35:5b:af:11:15:f8:6d:fb:d3:71:d4:8d:03:52:bd:fe:
4f:f9:a1:42:81:65:a8:5f:c6:60:92:ee:de:d1:60:b4:f3:1b:
d3:34:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:00 2025 by rpki-client