Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2712A6C8A611EFB3AA1D7E762E951A.roa
File: FB2712A6C8A611EFB3AA1D7E762E951A.roa (raw, json)
Hash identifier: FKcFc4FBF2CvYV6U+4s6jj99PziyDM7iaZEYpee6yLs=
Subject key identifier: 9E:81:7A:55:E5:37:FF:32:B2:52:06:C1:F6:80:82:07:1E:B9:1E:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013152
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2712A6C8A611EFB3AA1D7E762E951A.roa
Signing time: Thu 02 Jan 2025 01:14:58 +0000
ROA not before: Thu 02 Jan 2025 01:14:54 +0000
ROA not after: Sun 12 Dec 2027 01:14:54 +0000
asID: 17561
IP address blocks: 154.220.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78162 (0x13152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:14:54 2025 GMT
Not After : Dec 12 01:14:54 2027 GMT
Subject: CN=6775e891-aed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:d2:2c:51:aa:b8:ef:cd:74:5c:c3:20:46:
4e:57:57:a6:32:85:01:ed:f5:98:93:d9:c6:16:1a:
6f:78:11:b2:9a:7d:82:7a:ab:f3:54:b0:8e:6f:e9:
60:8f:ae:ed:87:a7:41:0c:4f:fb:a0:cf:8e:11:c8:
ae:37:44:38:9f:7d:b6:f6:cf:ef:8d:bd:3e:0b:97:
b6:b3:30:a2:54:03:7e:63:0a:14:67:3f:48:74:de:
57:e2:3b:cb:cc:06:2a:dd:0f:5b:9b:97:9a:ba:14:
d7:25:10:63:4a:45:f0:59:eb:be:75:12:59:31:f7:
48:fe:e5:34:f4:c7:a3:81:2e:75:8d:fe:ab:cf:fd:
d5:05:6f:40:d1:e2:e7:c1:e4:08:e2:c4:7e:51:b7:
a2:35:18:aa:71:33:e3:6d:c7:36:a6:bc:d2:cb:67:
2a:f6:a3:eb:6e:e8:5c:33:20:e1:2b:3c:0e:77:e9:
c6:84:43:bd:08:a6:e1:d9:1e:b1:b0:2f:dc:15:2f:
12:2a:64:3e:d0:ca:3c:99:e6:7a:63:2c:62:aa:04:
5d:e6:ed:fe:d3:d7:3d:f6:39:f0:70:3e:5d:c3:a6:
f5:ea:18:aa:2e:0d:6d:db:8d:48:90:ce:b5:8d:5b:
70:c6:a7:e8:5a:a3:49:a6:b8:50:c8:de:62:03:89:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:7A:55:E5:37:FF:32:B2:52:06:C1:F6:80:82:07:1E:B9:1E:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2712A6C8A611EFB3AA1D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.132.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d2:4e:3c:ef:f2:7b:29:a9:09:dc:11:c9:72:13:51:2b:c8:
23:57:fd:54:f0:d1:b3:40:2d:80:44:dd:21:b5:59:2d:bb:22:
ac:f3:bf:78:e3:14:57:75:c0:7e:83:59:2e:65:ef:fd:8d:27:
f1:b6:6d:b0:c7:0b:91:ae:fe:75:d4:18:14:31:c6:6e:59:aa:
f6:41:7f:9d:a3:ac:b9:04:00:8e:b5:5c:46:ee:7f:1d:de:ae:
57:b7:05:ed:12:51:fe:9b:0d:69:69:49:60:b2:25:f1:b2:19:
04:31:73:03:d4:69:f9:ec:d3:31:12:c6:6b:b2:a9:d0:33:67:
6b:fa:7a:35:24:ad:83:68:c1:d8:ee:6d:de:a0:3b:9d:63:dd:
e9:50:88:b2:b6:2a:b4:18:06:74:d8:5a:6d:82:4e:9b:27:3d:
d7:1c:c9:0d:f6:32:d1:2e:10:ad:e7:28:6f:c6:a6:70:f0:03:
53:9e:42:a7:32:e2:22:6e:76:48:bb:52:17:09:25:01:e3:c9:
74:fc:d2:29:96:5e:74:40:0a:8f:29:81:1b:e1:b6:35:99:0e:
eb:d2:8d:e0:b4:ee:00:56:53:c2:21:7b:f9:6f:c4:19:0b:cb:
79:2d:a5:95:29:63:04:75:cf:9e:10:84:33:88:d7:59:bf:18:
4b:1c:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:38 2025 by rpki-client