Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CFCA36C1B711EFBDC01666762E951A.roa
File: 01CFCA36C1B711EFBDC01666762E951A.roa (raw, json)
Hash identifier: nWfl8tcsgR0s/woihvQd6mEToM5j/N/mKIebhZDkXxo=
Subject key identifier: A3:EF:1A:E6:58:22:9D:47:86:9B:E1:E7:8A:34:E2:8B:51:9C:B3:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CFCA36C1B711EFBDC01666762E951A.roa
Signing time: Tue 24 Dec 2024 05:22:02 +0000
ROA not before: Tue 24 Dec 2024 05:21:59 +0000
ROA not after: Wed 10 Dec 2025 05:21:59 +0000
asID: 984
IP address blocks: 154.193.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74171 (0x121bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:21:59 2024 GMT
Not After : Dec 10 05:21:59 2025 GMT
Subject: CN=676a44fa-a1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:0e:5a:12:ae:6c:76:5e:a2:c9:34:bf:6d:
eb:e9:20:16:13:75:08:1a:28:26:89:29:1e:1f:78:
b4:9d:73:f5:45:7b:53:8d:d5:8d:ae:07:62:ae:6c:
8b:5a:54:15:82:68:ab:6f:3c:ed:e5:49:eb:fc:0d:
54:f3:fb:f2:b9:33:a1:f2:2f:70:cd:d7:7f:e9:95:
37:9a:d8:ca:f4:0b:fc:8d:23:8c:d8:b6:2e:54:5e:
e4:83:6b:30:9c:4f:52:e3:0d:8e:8b:92:1c:36:c3:
9f:c0:d8:6b:54:7d:b4:6d:7a:95:7e:d7:2b:45:52:
b2:55:79:c8:77:15:07:ab:bf:2e:74:3d:f8:5d:c5:
25:1e:86:51:fb:1d:44:36:5e:7e:7d:f8:54:42:22:
d1:0b:4c:ca:00:14:04:33:11:7c:50:48:91:51:75:
17:be:08:f5:ba:3c:56:7f:05:7b:24:10:95:07:92:
23:0f:bd:ed:1d:b1:60:04:26:7b:ec:fa:48:04:3b:
d9:a7:d9:2a:38:6e:15:7f:74:ed:27:66:2c:9d:ab:
c1:a2:f2:98:31:d0:ca:38:f1:f0:07:71:8f:cb:07:
a2:7b:12:e3:e2:b9:eb:2c:88:4f:0a:1d:a3:71:81:
56:5f:0b:e7:14:2b:c1:f2:1e:5d:78:98:ae:87:28:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:1A:E6:58:22:9D:47:86:9B:E1:E7:8A:34:E2:8B:51:9C:B3:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CFCA36C1B711EFBDC01666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:84:17:4a:86:95:82:ff:e4:e9:bc:8e:d0:7b:ed:65:a6:0c:
36:dc:fa:cd:65:01:d3:b1:3e:d8:4d:4f:1c:0a:3d:92:76:fd:
52:2d:f5:6f:c8:f6:e4:0a:84:06:f0:3b:08:65:4e:00:5d:29:
68:ee:b4:a9:03:a1:26:8e:1f:33:79:7f:1c:f2:24:25:28:94:
16:03:be:ff:8b:a8:8c:99:7e:32:0d:67:6e:93:5a:a5:46:4a:
44:1c:93:ba:3e:18:f2:e9:b5:fb:ab:fd:57:cf:f7:4d:a6:c4:
69:db:6f:de:08:c5:28:4f:d7:88:25:4a:3c:31:f4:33:ba:96:
0c:bb:ee:e7:48:65:50:1b:d3:88:c1:e5:b1:32:45:c4:a3:5b:
2e:8e:11:0b:56:b8:31:c3:ac:18:cc:a0:de:3e:70:c5:8f:f7:
da:4d:09:01:d3:40:05:c0:a1:0d:19:97:1d:3d:96:63:bb:83:
a6:97:7e:51:24:6a:f7:ee:ff:35:7e:0a:9b:94:f3:e1:25:11:
67:78:b6:56:2a:43:04:35:fc:cf:24:32:a3:fe:ad:e2:4c:23:
31:24:d1:00:30:e8:de:f5:93:54:ed:72:67:a2:f4:60:1e:8a:
ba:7a:97:cb:43:d9:27:60:91:78:b3:33:21:e2:2a:46:51:12:
9f:c4:77:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:11 2025 by rpki-client