Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B98258EC54511EFB7270984762E951A.roa
File: 2B98258EC54511EFB7270984762E951A.roa (raw, json)
Hash identifier: OxxK4Ik0X2EQ+DQIh/XJ2y0PCn4gi46tiB66g0Tvdbk=
Subject key identifier: F5:D3:AA:51:50:F7:4B:D0:06:DD:F2:C2:4E:76:0F:E2:B0:C6:89:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B98258EC54511EFB7270984762E951A.roa
Signing time: Sat 28 Dec 2024 17:57:15 +0000
ROA not before: Sat 28 Dec 2024 17:57:11 +0000
ROA not after: Sun 12 Dec 2027 17:57:11 +0000
asID: 17561
IP address blocks: 154.208.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76963 (0x12ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 17:57:11 2024 GMT
Not After : Dec 12 17:57:11 2027 GMT
Subject: CN=67703bfb-85ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:c1:78:77:29:42:b4:e1:65:b0:16:03:97:
a3:f4:40:ab:f6:44:7b:01:80:52:13:e8:6b:ed:44:
8b:0b:38:55:95:d8:ad:48:e3:ec:15:34:bf:f9:d8:
ec:67:81:6c:c6:62:0b:4d:4f:3e:1f:5f:fe:b5:b4:
ea:16:29:83:d2:fb:45:2a:69:ef:49:d1:1a:bf:e0:
db:b9:38:eb:10:31:8e:0a:f6:fb:3b:3d:0f:d8:23:
d6:58:d2:b3:6d:c7:d9:91:4c:c5:01:30:82:b6:34:
5f:cc:de:e2:fc:91:79:08:72:9d:bd:55:d2:0c:95:
3c:1e:b5:e3:b6:a1:31:b4:6b:60:09:f9:cc:ef:ae:
3f:53:4f:51:a7:a9:5e:78:e9:0a:39:b7:26:e6:c8:
7d:aa:04:dc:af:5b:ab:73:f2:ff:37:9a:a4:00:58:
a3:d0:20:38:4e:06:62:2b:2f:6a:75:ef:53:4d:00:
1a:e3:28:e7:25:82:28:5d:88:03:f1:ce:4a:cf:85:
1e:2a:c5:77:11:bf:3c:a6:27:ed:05:ce:00:e5:fa:
3e:1e:09:05:95:cb:bf:5a:ee:be:d5:3f:e8:c7:c0:
12:71:31:2e:74:3e:c7:ba:2d:b0:41:a1:a3:8a:db:
12:69:6e:6e:3c:94:bf:e7:11:60:98:a3:2d:78:4f:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:AA:51:50:F7:4B:D0:06:DD:F2:C2:4E:76:0F:E2:B0:C6:89:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B98258EC54511EFB7270984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
71:59:a9:dd:98:57:70:a5:12:78:9c:98:fc:38:26:1e:fd:52:
bd:74:6f:f8:3c:b9:14:1a:d3:43:99:b5:b0:da:6c:fd:32:fe:
56:ed:eb:1b:41:dd:52:ae:28:8d:cc:9a:0b:fc:93:d5:1f:ef:
54:57:c9:c9:b0:92:c2:ed:c7:fa:b0:47:7d:b0:7a:57:5a:13:
d9:50:b8:f0:15:50:63:41:2f:77:82:b8:af:aa:cc:dd:06:b8:
ba:65:a0:4b:d9:c0:82:16:8c:ff:6b:9c:38:dd:27:21:0e:09:
7d:40:55:cb:77:69:07:96:43:9c:0d:57:d6:9d:a5:f3:6b:c3:
e7:ec:f9:79:16:51:30:85:f8:c3:41:f1:83:44:5f:c5:1d:be:
4d:ac:d9:28:e4:a0:1c:e4:38:34:08:02:f2:25:96:ef:71:a2:
c0:06:d9:d6:a2:e1:de:a1:b1:0a:90:63:44:3a:48:c2:2b:3a:
e6:93:f6:c6:4d:fb:30:8f:65:a4:c5:2d:fc:5e:de:8a:eb:e0:
9a:92:6d:d1:91:7c:17:ac:5f:a8:b2:cb:3f:f5:9d:aa:4c:cd:
d6:2f:41:7f:37:31:e8:48:5e:72:89:72:04:61:df:36:a3:31:
a2:82:b9:85:3f:c7:d8:a3:8d:42:c0:74:b6:1d:a5:11:a1:4f:
8a:c6:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:52:22 2025 by rpki-client on console.sobornost.net