Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092AA80B85311EF957D1453762E951A.roa
File: 4092AA80B85311EF957D1453762E951A.roa (raw, json)
Hash identifier: fUnNFO8dnL8GBHLGoUESQR8c4FS3CbSNGCV5YfW4EZI=
Subject key identifier: 1C:B6:21:50:23:74:EA:E6:D4:B1:E8:1A:C7:88:9D:11:93:84:0C:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092AA80B85311EF957D1453762E951A.roa
Signing time: Thu 12 Dec 2024 06:35:18 +0000
ROA not before: Thu 12 Dec 2024 06:35:14 +0000
ROA not after: Mon 10 Nov 2025 06:35:14 +0000
asID: 38193
IP address blocks: 154.86.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72326 (0x11a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 12 06:35:14 2024 GMT
Not After : Nov 10 06:35:14 2025 GMT
Subject: CN=675a8426-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:01:c2:df:69:02:75:07:53:7c:36:76:68:
28:57:32:bd:7e:c9:af:41:25:20:dd:06:81:37:27:
1a:92:92:e2:69:0c:a9:31:35:26:6b:f6:13:92:0e:
4b:85:94:46:f5:6f:f7:f9:5d:de:d0:f8:6c:23:a9:
8c:82:bd:d2:a0:53:54:ab:b5:9b:a1:6b:df:f5:b1:
85:be:38:9f:49:2a:46:6a:a6:4a:dd:7c:10:e5:16:
f3:12:d2:39:c4:41:30:e2:c0:f4:a9:f9:4e:7b:e1:
46:36:6d:d5:c1:0b:11:f3:c4:35:86:67:91:4d:c6:
7f:c5:4c:e4:63:30:60:43:87:8a:b2:c7:36:59:db:
74:2f:53:67:80:ff:0c:c5:00:8b:bb:6b:6d:9a:65:
f2:26:38:19:da:1f:94:0a:8e:b4:6d:83:90:59:3e:
af:88:36:29:58:cd:78:e4:12:b3:e9:88:2f:97:72:
d4:64:90:e1:5a:f2:6b:ad:6d:72:f9:6a:b3:b3:fd:
62:49:6f:3a:87:d9:ef:c7:10:88:ae:db:5f:69:ce:
14:69:60:d2:b7:67:3d:a6:3b:ee:9e:d6:0e:13:e3:
56:5c:56:15:3f:6e:0a:86:f2:f8:41:6a:51:70:9b:
38:f5:3f:e8:38:07:6d:36:3f:e8:63:61:9f:9b:1d:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:21:50:23:74:EA:E6:D4:B1:E8:1A:C7:88:9D:11:93:84:0C:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092AA80B85311EF957D1453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.1.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c3:cf:3a:fe:43:f8:10:40:fe:65:1d:7f:79:c5:c9:32:e1:
b1:d3:d2:fb:77:42:a2:5f:bd:75:8a:c8:62:49:04:b7:2f:67:
a3:8d:a1:8f:7f:b8:7e:de:ec:3a:c8:2e:80:de:2e:40:6e:6f:
52:a4:22:b7:12:6b:b4:65:0f:b0:89:25:64:1e:f5:35:08:8f:
0c:bb:c2:f8:44:15:91:84:dc:54:92:aa:d5:71:94:c8:bc:5f:
a8:1e:0e:0e:a1:3a:a1:d3:ff:bb:8c:d2:b2:44:26:87:bf:63:
ec:b2:4a:ec:bf:1e:43:e4:21:04:22:b4:71:40:b7:30:30:e2:
f7:1c:44:3d:f4:2b:37:4f:fc:ba:b8:e7:3d:3d:a9:99:17:63:
ba:c1:84:f2:19:d3:ae:e6:17:68:73:46:76:69:94:7b:90:63:
31:78:ca:30:f8:43:c5:48:6f:ad:5c:3d:61:fe:7a:6e:5f:20:
b2:78:6e:ec:ad:30:d0:47:f7:53:35:25:78:82:44:4a:14:2a:
eb:ed:5e:7d:8b:5e:53:2b:bc:90:4a:2e:3b:5a:e7:3a:7a:c7:
48:f9:1b:f1:09:2a:84:a3:8f:d6:5d:5f:91:6e:40:b5:ef:8b:
99:29:d4:93:cb:56:a3:aa:3e:29:06:44:26:77:ae:9d:5c:d6:
4a:02:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:38 2025 by rpki-client