Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/826C8AD4C38411EF89EC2065762E951A.roa
File: 826C8AD4C38411EF89EC2065762E951A.roa (raw, json)
Hash identifier: H2QRZWWxP4PhuTXcB2pgtAUBNjFvmzGll1hMfkOypuI=
Subject key identifier: 93:E9:2C:50:81:37:38:F2:CF:AD:2B:79:28:67:B1:32:96:A1:65:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012782
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/826C8AD4C38411EF89EC2065762E951A.roa
Signing time: Thu 26 Dec 2024 12:25:36 +0000
ROA not before: Thu 26 Dec 2024 12:25:32 +0000
ROA not after: Sun 12 Dec 2027 12:25:32 +0000
asID: 17561
IP address blocks: 154.94.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75650 (0x12782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 12:25:32 2024 GMT
Not After : Dec 12 12:25:32 2027 GMT
Subject: CN=676d4b40-ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:bb:ac:39:cd:5b:9a:35:18:17:5b:e1:3d:
08:fa:59:db:a0:72:a7:47:a1:ae:e5:98:c9:9f:1d:
12:4f:79:cd:3f:59:73:2f:63:42:07:ee:e8:83:22:
5a:06:40:4d:ef:d0:0c:80:3f:8e:8c:87:9b:40:9b:
26:37:0f:46:b6:bf:ed:df:f2:90:b7:24:59:fa:1b:
73:22:cd:14:51:f2:10:1e:e5:26:1e:bc:91:00:bb:
c9:4e:f1:5d:f9:96:e1:1a:c0:4a:fd:80:3e:f8:b5:
55:b0:ab:ad:fc:a7:0d:1e:4d:ba:16:ab:a3:c2:f4:
54:c7:cf:db:fa:15:62:c2:e0:f9:c4:ac:da:54:d7:
2b:4b:00:1f:65:50:b1:a2:0c:1c:83:08:24:84:b7:
74:9d:91:95:3b:6c:37:a2:af:7c:d2:80:39:a5:c7:
33:56:f9:0b:4d:c3:2a:05:0a:da:a7:a8:4c:47:a7:
b8:16:f9:46:2a:05:9d:9e:f1:d2:45:fc:fa:dd:ee:
2a:b8:0f:1e:41:92:0a:a4:af:3e:6d:28:d9:4b:9b:
f2:bc:67:3c:56:f3:2b:53:84:60:bd:b3:35:56:2a:
51:7e:87:0e:22:5b:36:92:a9:ff:d4:a8:c3:f0:e9:
8c:b8:6e:2a:53:2f:bc:d7:9f:e7:a8:5e:05:87:cf:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:2C:50:81:37:38:F2:CF:AD:2B:79:28:67:B1:32:96:A1:65:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/826C8AD4C38411EF89EC2065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e3:e3:38:c8:45:c5:41:a0:3e:ee:c9:3b:f1:27:73:15:a7:
b4:99:1e:4c:79:b3:c5:26:06:3a:93:d0:fb:1d:83:a9:d6:54:
0c:a2:21:c6:7e:2b:26:3f:ab:b7:56:0e:55:6c:61:35:84:8f:
50:1c:06:1f:2a:b1:a3:ac:31:86:19:e6:0e:3f:78:81:eb:1a:
6d:42:ac:e3:d3:4e:8a:76:5e:00:06:32:fe:2a:36:52:a6:56:
d1:3c:c4:5e:d2:9c:52:2a:11:6e:31:78:3c:55:13:78:14:0c:
0b:7b:87:29:29:78:31:5f:55:ca:b1:41:6a:17:1b:83:3a:aa:
0c:d2:26:41:ea:34:ef:2b:68:99:91:3c:43:f8:4b:d6:2d:bc:
74:e1:aa:f5:58:e1:27:6e:92:5d:e6:7a:db:da:b0:d3:67:6f:
b7:ce:eb:f1:57:70:18:42:46:24:3f:e7:48:0e:a0:00:b2:bf:
6c:22:6a:51:26:ab:38:45:88:17:8f:1c:98:94:f1:33:c2:bb:
67:14:d5:8b:05:e1:0e:5e:c0:67:a8:d9:91:2a:47:3d:de:9a:
85:92:f9:14:c1:ac:1d:5a:bd:5f:f4:3f:65:fd:aa:4d:4e:37:
a1:bc:2c:ad:19:fe:32:d7:8f:52:d2:c0:8f:8b:e8:af:18:fa:
ee:b6:08:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:06 2025 by rpki-client on console.sobornost.net